CVE-2013-4235

Medium

Advisory

Published 3 Dec 2019In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 4.7; base score, highest
EPSS: 0.003; 23rd percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 563; of 17,787 indexed, latest versions
Container images: 508; deployed by those charts
Fix available: 2 of 2; affected packages

libsubid-devel-4.11.1-1.1 on GA media

Carried by container images the latest versions of 563 of 17,787 indexed charts deploy, on 508 images.

Affected package	Affected versions	Fixed in	Images
shadowdeb	1:4.1.5.1-1ubuntu9, 1:4.1.5.1-1ubuntu9.5, 1:4.2-3.1ubuntu5, 1:4.2-3.1ubuntu5.2+13 more	1:4.1.5.1-1ubuntu9.5+esm3, 1:4.2-3.1ubuntu5.5+esm3, 1:4.5-1ubuntu2.5, 1:4.8.1-1ubuntu5.20.04.4+1 more	506
shadowrpm	4.6-lp151.2.3.2	4.11.1-1.1	2

OSV records: UBUNTU-CVE-2013-4235 openSUSE-SU-2024:11749-1
Also known as: USN-5745-1, USN-5745-2

Charts affected

563 by stars

Chart

Latest

Affected images

Radar Score

kube-monitoring-telegram-botviento-repository

1.0.0

1 of 1 See more

kube-monitoring-telegram-bot viento-repository 1.0.0

1 of the 1 container images this version deploys carry CVE-2013-4235.

Container image	Digest	Package	Fixed in
vientoprojects/kubernetes-monitoring-telegram-bot :latest	eb2a71531741	shadow@1:4.5-1ubuntu2	1:4.5-1ubuntu2.5

Open the chart page →

7,892

kongwallarm

4.6.3

1 of 7 See more

kong wallarm 4.6.3

1 of the 7 container images this version deploys carry CVE-2013-4235.

Container image	Digest	Package	Fixed in
wallarm/kong :3.1.0-ubuntu-4.6.0	ea9608c82e40	shadow@1:4.8.1-1ubuntu5.20.04.4	no fix listed

Open the chart page →

11,444

pageswalter

1.0.0

2 of 3 See more

pages walter 1.0.0

2 of the 3 container images this version deploys carry CVE-2013-4235.

Container image	Digest	Package	Fixed in
dellcloud/pages :monitor	6ba7b22caacd	shadow@1:4.8.1-1ubuntu5.20.04	1:4.8.1-1ubuntu5.20.04.4
flyway/flyway :6.4.4	22d97ceb0c47	shadow@1:4.5-1ubuntu2	1:4.5-1ubuntu2.5

Open the chart page →

20,233

wazuh-manager-filebeatwazuh-manager-filebeat

0.1.0-gamma

1 of 1 See more

wazuh-manager-filebeat wazuh-manager-filebeat 0.1.0-gamma

1 of the 1 container images this version deploys carry CVE-2013-4235.

Container image	Digest	Package	Fixed in
iosifache/wazuh-manager-filebeat :latest	85df3f04b5da	shadow@1:4.8.1-1ubuntu5.20.04.1	1:4.8.1-1ubuntu5.20.04.4

Open the chart page →

11,167

wbaas-backupwbstack

0.1.0

1 of 1 See more

wbaas-backup wbstack 0.1.0

1 of the 1 container images this version deploys carry CVE-2013-4235.

Container image	Digest	Package	Fixed in
ghcr.io/wmde/wbaas-backup :v0.1.7	8e6a9516eac0	shadow@1:4.5-1ubuntu2.2	1:4.5-1ubuntu2.5

Open the chart page →

9,748

myweatherhelmwebapp1

1.3.50

1 of 8 See more

myweatherhelm webapp1 1.3.50

1 of the 8 container images this version deploys carry CVE-2013-4235.

Container image	Digest	Package	Fixed in
mcr.microsoft.com/azure-sql-edge :latest	902628a8be89	shadow@1:4.8.1-1ubuntu5.20.04.4	no fix listed

Open the chart page →

9,225

myweatherhelm-schedulingwebapp1

1.3.92

1 of 9 See more

myweatherhelm-scheduling webapp1 1.3.92

1 of the 9 container images this version deploys carry CVE-2013-4235.

Container image	Digest	Package	Fixed in
mcr.microsoft.com/azure-sql-edge :latest	902628a8be89	shadow@1:4.8.1-1ubuntu5.20.04.4	no fix listed

Open the chart page →

9,225

webhookiewebhookie

0.1.2

1 of 1 See more

webhookie webhookie 0.1.2

1 of the 1 container images this version deploys carry CVE-2013-4235.

Container image	Digest	Package	Fixed in
hookiesolutions/webhookie :latest	0629694246ba	shadow@1:4.8.1-1ubuntu5.20.04.1	1:4.8.1-1ubuntu5.20.04.4

Open the chart page →

14,420

webhookie-allwebhookie

0.1.2

2 of 3 See more

webhookie-all webhookie 0.1.2

2 of the 3 container images this version deploys carry CVE-2013-4235.

Container image	Digest	Package	Fixed in
hookiesolutions/webhookie :latest	0629694246ba	shadow@1:4.8.1-1ubuntu5.20.04.1	1:4.8.1-1ubuntu5.20.04.4
library/mongo :4.4	4be76f674fc4	shadow@1:4.8.1-1ubuntu5.20.04.5	no fix listed

Open the chart page →

28,699

emissary-ingresswenerme

8.12.2

1 of 2 See more

emissary-ingress wenerme 8.12.2

1 of the 2 container images this version deploys carry CVE-2013-4235.

Container image	Digest	Package	Fixed in
istio/kubectl :1.5.10	dbb7726d1bf0	shadow@1:4.5-1ubuntu2	1:4.5-1ubuntu2.5

Open the chart page →

10,857

longhornwenerme

1.2.3

1 of 2 See more

longhorn wenerme 1.2.3

1 of the 2 container images this version deploys carry CVE-2013-4235.

Container image	Digest	Package	Fixed in
longhornio/longhorn-manager :v1.2.3	dca34321452c	shadow@1:4.8.1-1ubuntu5.20.04.1	1:4.8.1-1ubuntu5.20.04.4

Open the chart page →

15,287

kibanawiremind

8.5.23

1 of 2 See more

kibana wiremind 8.5.23

1 of the 2 container images this version deploys carry CVE-2013-4235.

Container image	Digest	Package	Fixed in
library/kibana :8.18.0	04c0fc150f3a	shadow@1:4.8.1-1ubuntu5.20.04.5	no fix listed

Open the chart page →

6,323

clickhousezloi-space

1.2.0

2 of 3 See more

clickhouse zloi-space 1.2.0

2 of the 3 container images this version deploys carry CVE-2013-4235.

Container image	Digest	Package	Fixed in
yandex/clickhouse-client :21.3	863f94a0f607	shadow@1:4.5-1ubuntu2	1:4.5-1ubuntu2.5
yandex/clickhouse-server :21.3.20	4eccfffb01d7	shadow@1:4.8.1-1ubuntu5.20.04.1	1:4.8.1-1ubuntu5.20.04.4

Open the chart page →

9,250

Container images carrying it

508 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
voltha/voltha-cli :1.6.0	c4e41e92f046	shadow@1:4.2-3.1ubuntu5.3	1:4.2-3.1ubuntu5.5+esm3	1
voltha/voltha-envoy :1.6.0	59ab2a00f712	shadow@1:4.1.5.1-1ubuntu9.5	1:4.1.5.1-1ubuntu9.5+esm3	1
voltha/voltha-netconf :1.6.0	37f80524c207	shadow@1:4.2-3.1ubuntu5.3	1:4.2-3.1ubuntu5.5+esm3	1
voltha/voltha-ofagent :1.6.0	9ee8c1f4428c	shadow@1:4.2-3.1ubuntu5.3	1:4.2-3.1ubuntu5.5+esm3	1
voltha/voltha-onos :5.1.8	e038acb950d3	shadow@1:4.5-1ubuntu2	1:4.5-1ubuntu2.5	1
voltha/voltha-tester :1.7.0	655c3048a602	shadow@1:4.2-3.1ubuntu5.4	1:4.2-3.1ubuntu5.5+esm3	1
voltha/voltha-voltha :1.6.0	ff596b62de59	shadow@1:4.2-3.1ubuntu5.3	1:4.2-3.1ubuntu5.5+esm3	1
wallarm/kong :3.1.0-ubuntu-4.6.0	ea9608c82e40	shadow@1:4.8.1-1ubuntu5.20.04.4	no fix listed	1
wavefronthq/proxy :9.2	d1064d28f6eb	shadow@1:4.5-1ubuntu2	1:4.5-1ubuntu2.5	1
wazuh/wazuh-dashboard :4.4.1	1787550d2358	shadow@1:4.8.1-1ubuntu5.20.04.4	no fix listed	1
wazuh/wazuh-manager :4.4.1	21994f40e0da	shadow@1:4.8.1-1ubuntu5.20.04.4	no fix listed	1
wekanteam/wekan :v4.22	68a51f0327df	shadow@1:4.8.1-1ubuntu5.20.04	1:4.8.1-1ubuntu5.20.04.4	1
wistefan/mvf :latest	e0887302b2d8	shadow@1:4.8.1-2ubuntu2	1:4.8.1-2ubuntu2.1	1
woojoong/wowza :latest	ec230db19652	shadow@1:4.5-1ubuntu1	1:4.5-1ubuntu2.5	1
xeladock/mysql_dns :latest	4baf531453f1	shadow@1:4.8.1-2ubuntu2	1:4.8.1-2ubuntu2.1	1
xeladock/nginx2 :latest	c259a67b1dff	shadow@1:4.8.1-2ubuntu2	1:4.8.1-2ubuntu2.1	1
xeotek/kadeck :4.2.9	4c6b04d9ce55	shadow@1:4.8.1-1ubuntu5.20.04.4	no fix listed	1
xingse/kubernetes-oom-event-generator :v1.2.0	9f9d5492e4bf	shadow@1:4.2-3.1ubuntu5.4	1:4.2-3.1ubuntu5.5+esm3	1
yandex/clickhouse-client :21.3	863f94a0f607	shadow@1:4.5-1ubuntu2	1:4.5-1ubuntu2.5	1
yandex/clickhouse-server :latest	1cbf75aabe1e	shadow@1:4.8.1-1ubuntu5.20.04.1	1:4.8.1-1ubuntu5.20.04.4	1
yandex/clickhouse-server :21.3.20	4eccfffb01d7	shadow@1:4.8.1-1ubuntu5.20.04.1	1:4.8.1-1ubuntu5.20.04.4	1
yandex/clickhouse-server :19.17	ab1738a64b70	shadow@1:4.5-1ubuntu2	1:4.5-1ubuntu2.5	1
yandex/clickhouse-server :19.14	ccf9c2b5e3f2	shadow@1:4.5-1ubuntu2	1:4.5-1ubuntu2.5	1
yandex/clickhouse-server :19.16	d210dc69321e	shadow@1:4.5-1ubuntu2	1:4.5-1ubuntu2.5	1
zabbix/zabbix-agent :ubuntu-5.4.6	2127168cab03	shadow@1:4.8.1-1ubuntu5.20.04.1	1:4.8.1-1ubuntu5.20.04.4	1
zabbix/zabbix-agent2 :ubuntu-6.0.8	e5b594057c9c	shadow@1:4.8.1-2ubuntu2	1:4.8.1-2ubuntu2.1	1
zabbix/zabbix-server-pgsql :ubuntu-5.4.6	6c946b1f45cd	shadow@1:4.8.1-1ubuntu5.20.04.1	1:4.8.1-1ubuntu5.20.04.4	1
zabbix/zabbix-server-pgsql :ubuntu-6.0.8	d59ffa07f615	shadow@1:4.8.1-2ubuntu2	1:4.8.1-2ubuntu2.1	1
zabbix/zabbix-web-nginx-pgsql :ubuntu-5.4.6	01de79c31391	shadow@1:4.8.1-1ubuntu5.20.04.1	1:4.8.1-1ubuntu5.20.04.4	1
zabbix/zabbix-web-nginx-pgsql :ubuntu-6.0.8	99e9a090b516	shadow@1:4.8.1-2ubuntu2	1:4.8.1-2ubuntu2.1	1
zabbix/zabbix-web-service :ubuntu-6.0.8	ee4baa872280	shadow@1:4.8.1-2ubuntu2	1:4.8.1-2ubuntu2.1	1
gcr.io/flink-operator/deployer :webhook-cert	809338a69bd5	shadow@1:4.5-1ubuntu2	1:4.5-1ubuntu2.5	1
gcr.io/google-containers/echoserver :1.9	10f4dbc8eeeb	shadow@1:4.2-3.1ubuntu5.3	1:4.2-3.1ubuntu5.5+esm3	1
gcr.io/google_containers/echoserver :1.10	cb5c1bddd1b5	shadow@1:4.2-3.1ubuntu5.3	1:4.2-3.1ubuntu5.5+esm3	1
gcr.io/istio-release/pilot :release-1.0-latest-daily	5ea7b7f3632a	shadow@1:4.2-3.1ubuntu5.4	1:4.2-3.1ubuntu5.5+esm3	1
gcr.io/istio-release/pilot :1.11.1	c552478f8f11	shadow@1:4.8.1-1ubuntu5.20.04.1	1:4.8.1-1ubuntu5.20.04.4	1
gcr.io/istio-release/proxyv2 :release-1.0-latest-daily	8f9ff98fdbef	shadow@1:4.2-3.1ubuntu5.4	1:4.2-3.1ubuntu5.5+esm3	1
gcr.io/istio-release/proxyv2 :1.11.1	9538fabe49fd	shadow@1:4.8.1-1ubuntu5.20.04.1	1:4.8.1-1ubuntu5.20.04.4	1
gcr.io/ml-pipeline/metadata-envoy :2.0.0-alpha.5	e8bc6cf08613	shadow@1:4.2-3.1ubuntu5.4	1:4.2-3.1ubuntu5.5+esm3	1
gcr.io/ml-pipeline/metadata-envoy :2.3.0	e8e263a919ff	shadow@1:4.8.1-1ubuntu5.20.04.4	no fix listed	1
gcr.io/tfx-oss-public/ml_metadata_store_server :1.14.0	51404ef4419c	shadow@1:4.8.1-1ubuntu5.20.04.4	no fix listed	1
gcr.io/tfx-oss-public/ml_metadata_store_server :1.5.0	db8691752b4c	shadow@1:4.5-1ubuntu2	1:4.5-1ubuntu2.5	1
ghcr.io/98jan/smalland-server/smalland-server :dev	eb7be822d5b2	shadow@1:4.5-1ubuntu2.5	no fix listed	1
ghcr.io/brittonhayes/arma-reforger :latest	6fde1edc0983	shadow@1:4.8.1-1ubuntu5.20.04.4	no fix listed	1
ghcr.io/dask/dask :2024.1.0	080150de7d86	shadow@1:4.8.1-1ubuntu5.20.04.4	no fix listed	1
ghcr.io/data-fair/elasticsearch :7.17.1	aa45adaf59a7	shadow@1:4.8.1-1ubuntu5.20.04.1	1:4.8.1-1ubuntu5.20.04.4	1
ghcr.io/edgelesssys/coordinator :v0.5.0	bcd5b8d4c45c	shadow@1:4.5-1ubuntu2	1:4.5-1ubuntu2.5	1
ghcr.io/edgelesssys/edgelessdb-sgx-1gb :v0.3.2	7e1d7a11a11a	shadow@1:4.8.1-1ubuntu5.20.04.2	1:4.8.1-1ubuntu5.20.04.4	1
ghcr.io/ferama/vipien :v0.5.3	923a3f704b21	shadow@1:4.8.1-1ubuntu5.20.04.1	1:4.8.1-1ubuntu5.20.04.4	1
ghcr.io/haveagitgat/tdarr :2.00.18.2	3fbe4c29d14c	shadow@1:4.8.1-1ubuntu5.20.04.1	1:4.8.1-1ubuntu5.20.04.4	1