CVE-2013-4235

Medium

Advisory

Published 3 Dec 2019In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 4.7; base score, highest
EPSS: 0.003; 23rd percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 563; of 17,781 indexed, latest versions
Container images: 508; deployed by those charts
Fix available: 2 of 2; affected packages

libsubid-devel-4.11.1-1.1 on GA media

Carried by container images the latest versions of 563 of 17,781 indexed charts deploy, on 508 images.

Affected package	Affected versions	Fixed in	Images
shadowdeb	1:4.1.5.1-1ubuntu9, 1:4.1.5.1-1ubuntu9.5, 1:4.2-3.1ubuntu5, 1:4.2-3.1ubuntu5.2+13 more	1:4.1.5.1-1ubuntu9.5+esm3, 1:4.2-3.1ubuntu5.5+esm3, 1:4.5-1ubuntu2.5, 1:4.8.1-1ubuntu5.20.04.4+1 more	506
shadowrpm	4.6-lp151.2.3.2	4.11.1-1.1	2

OSV records: UBUNTU-CVE-2013-4235 openSUSE-SU-2024:11749-1
Also known as: USN-5745-1, USN-5745-2

Charts affected

563 by stars

Chart

Latest

Affected images

Radar Score

kube-monitoring-telegram-botviento-repository

1.0.0

1 of 1 See more

kube-monitoring-telegram-bot viento-repository 1.0.0

1 of the 1 container images this version deploys carry CVE-2013-4235.

Container image	Digest	Package	Fixed in
vientoprojects/kubernetes-monitoring-telegram-bot :latest	eb2a71531741	shadow@1:4.5-1ubuntu2	1:4.5-1ubuntu2.5

Open the chart page →

7,885

kongwallarm

4.6.3

1 of 7 See more

kong wallarm 4.6.3

1 of the 7 container images this version deploys carry CVE-2013-4235.

Container image	Digest	Package	Fixed in
wallarm/kong :3.1.0-ubuntu-4.6.0	ea9608c82e40	shadow@1:4.8.1-1ubuntu5.20.04.4	no fix listed

Open the chart page →

11,405

pageswalter

1.0.0

2 of 3 See more

pages walter 1.0.0

2 of the 3 container images this version deploys carry CVE-2013-4235.

Container image	Digest	Package	Fixed in
dellcloud/pages :monitor	6ba7b22caacd	shadow@1:4.8.1-1ubuntu5.20.04	1:4.8.1-1ubuntu5.20.04.4
flyway/flyway :6.4.4	22d97ceb0c47	shadow@1:4.5-1ubuntu2	1:4.5-1ubuntu2.5

Open the chart page →

20,190

wazuh-manager-filebeatwazuh-manager-filebeat

0.1.0-gamma

1 of 1 See more

wazuh-manager-filebeat wazuh-manager-filebeat 0.1.0-gamma

1 of the 1 container images this version deploys carry CVE-2013-4235.

Container image	Digest	Package	Fixed in
iosifache/wazuh-manager-filebeat :latest	85df3f04b5da	shadow@1:4.8.1-1ubuntu5.20.04.1	1:4.8.1-1ubuntu5.20.04.4

Open the chart page →

11,119

wbaas-backupwbstack

0.1.0

1 of 1 See more

wbaas-backup wbstack 0.1.0

1 of the 1 container images this version deploys carry CVE-2013-4235.

Container image	Digest	Package	Fixed in
ghcr.io/wmde/wbaas-backup :v0.1.7	8e6a9516eac0	shadow@1:4.5-1ubuntu2.2	1:4.5-1ubuntu2.5

Open the chart page →

9,743

myweatherhelmwebapp1

1.3.50

1 of 8 See more

myweatherhelm webapp1 1.3.50

1 of the 8 container images this version deploys carry CVE-2013-4235.

Container image	Digest	Package	Fixed in
mcr.microsoft.com/azure-sql-edge :latest	902628a8be89	shadow@1:4.8.1-1ubuntu5.20.04.4	no fix listed

Open the chart page →

9,130

myweatherhelm-schedulingwebapp1

1.3.92

1 of 9 See more

myweatherhelm-scheduling webapp1 1.3.92

1 of the 9 container images this version deploys carry CVE-2013-4235.

Container image	Digest	Package	Fixed in
mcr.microsoft.com/azure-sql-edge :latest	902628a8be89	shadow@1:4.8.1-1ubuntu5.20.04.4	no fix listed

Open the chart page →

9,130

webhookiewebhookie

0.1.2

1 of 1 See more

webhookie webhookie 0.1.2

1 of the 1 container images this version deploys carry CVE-2013-4235.

Container image	Digest	Package	Fixed in
hookiesolutions/webhookie :latest	0629694246ba	shadow@1:4.8.1-1ubuntu5.20.04.1	1:4.8.1-1ubuntu5.20.04.4

Open the chart page →

14,364

webhookie-allwebhookie

0.1.2

2 of 3 See more

webhookie-all webhookie 0.1.2

2 of the 3 container images this version deploys carry CVE-2013-4235.

Container image	Digest	Package	Fixed in
hookiesolutions/webhookie :latest	0629694246ba	shadow@1:4.8.1-1ubuntu5.20.04.1	1:4.8.1-1ubuntu5.20.04.4
library/mongo :4.4	4be76f674fc4	shadow@1:4.8.1-1ubuntu5.20.04.5	no fix listed

Open the chart page →

28,605

emissary-ingresswenerme

8.12.2

1 of 2 See more

emissary-ingress wenerme 8.12.2

1 of the 2 container images this version deploys carry CVE-2013-4235.

Container image	Digest	Package	Fixed in
istio/kubectl :1.5.10	dbb7726d1bf0	shadow@1:4.5-1ubuntu2	1:4.5-1ubuntu2.5

Open the chart page →

10,843

longhornwenerme

1.2.3

1 of 2 See more

longhorn wenerme 1.2.3

1 of the 2 container images this version deploys carry CVE-2013-4235.

Container image	Digest	Package	Fixed in
longhornio/longhorn-manager :v1.2.3	dca34321452c	shadow@1:4.8.1-1ubuntu5.20.04.1	1:4.8.1-1ubuntu5.20.04.4

Open the chart page →

15,230

kibanawiremind

8.5.23

1 of 2 See more

kibana wiremind 8.5.23

1 of the 2 container images this version deploys carry CVE-2013-4235.

Container image	Digest	Package	Fixed in
library/kibana :8.18.0	04c0fc150f3a	shadow@1:4.8.1-1ubuntu5.20.04.5	no fix listed

Open the chart page →

6,285

clickhousezloi-space

1.2.0

2 of 3 See more

clickhouse zloi-space 1.2.0

2 of the 3 container images this version deploys carry CVE-2013-4235.

Container image	Digest	Package	Fixed in
yandex/clickhouse-client :21.3	863f94a0f607	shadow@1:4.5-1ubuntu2	1:4.5-1ubuntu2.5
yandex/clickhouse-server :21.3.20	4eccfffb01d7	shadow@1:4.8.1-1ubuntu5.20.04.1	1:4.8.1-1ubuntu5.20.04.4

Open the chart page →

9,207

Container images carrying it

508 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
galaxy/galaxy-stable :v18.01	8e577a626dfd	shadow@1:4.1.5.1-1ubuntu9.5	1:4.1.5.1-1ubuntu9.5+esm3	1
geonetwork/gn-cloud-ogc-api-records-service :4.2.8-0	20c9bb761f67	shadow@1:4.5-1ubuntu2.5	no fix listed	1
geoscienceaustralia/dea-k8s-data :latest	f4039b45572a	shadow@1:4.5-1ubuntu2	1:4.5-1ubuntu2.5	1
geoservercloud/geoserver-cloud-gateway :1.0-RC2	ca58b74529cd	shadow@1:4.8.1-1ubuntu5.20.04.1	1:4.8.1-1ubuntu5.20.04.4	1
geoservercloud/geoserver-cloud-rest :1.0-RC2	5dc0c93a1710	shadow@1:4.8.1-1ubuntu5.20.04.1	1:4.8.1-1ubuntu5.20.04.4	1
geoservercloud/geoserver-cloud-wcs :1.0-RC2	47ae1bdb4bcc	shadow@1:4.8.1-1ubuntu5.20.04.1	1:4.8.1-1ubuntu5.20.04.4	1
geoservercloud/geoserver-cloud-webui :1.0-RC2	28c3e5a8c5a3	shadow@1:4.8.1-1ubuntu5.20.04.1	1:4.8.1-1ubuntu5.20.04.4	1
geoservercloud/geoserver-cloud-wfs :1.0-RC2	8c70ee06d5ab	shadow@1:4.8.1-1ubuntu5.20.04.1	1:4.8.1-1ubuntu5.20.04.4	1
geoservercloud/geoserver-cloud-wms :1.0-RC2	42775ba6a4da	shadow@1:4.8.1-1ubuntu5.20.04.1	1:4.8.1-1ubuntu5.20.04.4	1
gethue/hue :4.11.0	11b649636e68	shadow@1:4.8.1-1ubuntu5.20.04.4	no fix listed	1
gethue/hue :4.10.0	5702b2c37ff9	shadow@1:4.5-1ubuntu2	1:4.5-1ubuntu2.5	1
gitlab/gitlab-runner :v15.3.0	860d4a3fec7a	shadow@1:4.8.1-1ubuntu5.20.04.2	1:4.8.1-1ubuntu5.20.04.4	1
gopinatht/ovs-plugin-installer :latest	632cb2e9c399	shadow@1:4.2-3.1ubuntu5.3	1:4.2-3.1ubuntu5.5+esm3	1
gotson/komga :0.99.4	9b15ea6bfc30	shadow@1:4.5-1ubuntu2	1:4.5-1ubuntu2.5	1
haugene/transmission-openvpn :4.0	059216cfae4b	shadow@1:4.8.1-1ubuntu5.20.04.1	1:4.8.1-1ubuntu5.20.04.4	1
haveagitgat/tdarr :2.00.18	1256348872ce	shadow@1:4.8.1-1ubuntu5.20.04.1	1:4.8.1-1ubuntu5.20.04.4	1
haveagitgat/tdarr_node :2.00.10	1e3f9328327d	shadow@1:4.8.1-1ubuntu5.20.04	1:4.8.1-1ubuntu5.20.04.4	1
haveagitgat/tdarr_node :2.17.01	3ff0913202dd	shadow@1:4.8.1-1ubuntu5.20.04.4	no fix listed	1
helicone/clickhouse-migration-runner :v2025.03.05-1	4c69b971a7e4	shadow@1:4.8.1-1ubuntu5.20.04.5	no fix listed	1
housewrecker/gaps :latest	f417dd0a7547	shadow@1:4.8.1-1ubuntu5.20.04.1	1:4.8.1-1ubuntu5.20.04.4	1
huginn/huginn-single-process :4d17829cf6b15b004ad3f4be196303dca4944810	c794eddc7b47	shadow@1:4.5-1ubuntu2	1:4.5-1ubuntu2.5	1
hugohg34/toposervice :0.0.2	812a03b3f274	shadow@1:4.8.1-1ubuntu5.20.04.1	1:4.8.1-1ubuntu5.20.04.4	1
hyperledger/fabric-couchdb :0.4.10	c65891b6c237	shadow@1:4.2-3.1ubuntu5.3	1:4.2-3.1ubuntu5.5+esm3	1
hyperledger/fabric-orderer :1.3.0	6ee1abcfd840	shadow@1:4.2-3.1ubuntu5.3	1:4.2-3.1ubuntu5.5+esm3	1
hyperledger/fabric-peer :1.3.0	6756c7c48234	shadow@1:4.2-3.1ubuntu5.3	1:4.2-3.1ubuntu5.5+esm3	1
ibmcom/ibm-workload-scheduler-agent-dynamic-dev :9.4.0.04	7e4dc1e27cdf	shadow@1:4.2-3.1ubuntu5.3	1:4.2-3.1ubuntu5.5+esm3	1
ibmcom/icp-swift-sample :latest	b5d8c6714dbc	shadow@1:4.2-3.1ubuntu5.3	1:4.2-3.1ubuntu5.5+esm3	1
ibmcom/microclimate-theia :latest	e17bdccc5030	shadow@1:4.2-3.1ubuntu5.3	1:4.2-3.1ubuntu5.5+esm3	1
ibmcom/skydive :0.22.0	395e60cc6e3d	shadow@1:4.5-1ubuntu1	1:4.5-1ubuntu2.5	1
instructure/kinesalite :latest	34400d82f28f	shadow@1:4.8.1-1ubuntu5.20.04.5	no fix listed	1
intel/dlstreamer-pipeline-server :2022.1.1-ubuntu20	aa8f5483a2ef	shadow@1:4.8.1-1ubuntu5.20.04.2	1:4.8.1-1ubuntu5.20.04.4	1
intel/multimodal-data-visualization-streaming :3.0	1a89327e499b	shadow@1:4.8.1-1ubuntu5.20.04.2	1:4.8.1-1ubuntu5.20.04.4	1
intel/trusted-certificate-issuer :0.5.0	591a9db4a427	shadow@1:4.8.1-1ubuntu5.20.04.4	no fix listed	1
iofog/router :2.0.1	7260cf861479	shadow@1:4.5-1ubuntu2	1:4.5-1ubuntu2.5	1
iomesh/node-disk-manager :1.8.0	002c4b92fd34	shadow@1:4.8.1-1ubuntu5.20.04.1	1:4.8.1-1ubuntu5.20.04.4	1
iomesh/node-disk-operator :1.8.0	f6c76380db34	shadow@1:4.8.1-1ubuntu5.20.04.1	1:4.8.1-1ubuntu5.20.04.4	1
iosifache/wazuh-manager-filebeat :latest	85df3f04b5da	shadow@1:4.8.1-1ubuntu5.20.04.1	1:4.8.1-1ubuntu5.20.04.4	1
ironmansoftware/universal :3.3.1-ubuntu-20.04	1943c73cce31	shadow@1:4.8.1-1ubuntu5.20.04.2	1:4.8.1-1ubuntu5.20.04.4	1
istio/examples-bookinfo-reviews-v1 :1.17.0	b8f16a765eea	shadow@1:4.8.1-1ubuntu5.20.04.2	1:4.8.1-1ubuntu5.20.04.4	1
istio/examples-bookinfo-reviews-v2 :1.17.0	72f25a55f078	shadow@1:4.8.1-1ubuntu5.20.04.2	1:4.8.1-1ubuntu5.20.04.4	1
istio/examples-bookinfo-reviews-v3 :1.17.0	8f92fc1b6592	shadow@1:4.8.1-1ubuntu5.20.04.2	1:4.8.1-1ubuntu5.20.04.4	1
istio/install-cni :1.10.3	2232f365aed6	shadow@1:4.5-1ubuntu2	1:4.5-1ubuntu2.5	1
istio/node-agent-k8s :1.2.9	268ab879ea51	shadow@1:4.2-3.1ubuntu5.4	1:4.2-3.1ubuntu5.5+esm3	1
istio/operator :1.10.3	655eefa11c84	shadow@1:4.5-1ubuntu2	1:4.5-1ubuntu2.5	1
istio/operator :1.12.0	6cfce8a071b9	shadow@1:4.8.1-1ubuntu5.20.04.1	1:4.8.1-1ubuntu5.20.04.4	1
istio/pilot :1.10.0	294ca55bd1cc	shadow@1:4.5-1ubuntu2	1:4.5-1ubuntu2.5	1
istio/pilot :1.16.0	ac0284d75ec9	shadow@1:4.8.1-2ubuntu2	1:4.8.1-2ubuntu2.1	1
istio/pilot :1.2.9	c09319753454	shadow@1:4.2-3.1ubuntu5.4	1:4.2-3.1ubuntu5.5+esm3	1
istio/pilot :1.15.2	db08d6963975	shadow@1:4.8.1-2ubuntu2	1:4.8.1-2ubuntu2.1	1
istio/pilot :1.10.3	e7e110a421c2	shadow@1:4.5-1ubuntu2	1:4.5-1ubuntu2.5	1