StackRadar

CVE-2014-3577

Medium

Advisory

Published 17 Oct 2018In the index since 6 Sept 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
0.091
95th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
19
of 17,781 indexed, latest versions
Container images
28
deployed by those charts
Fix available
1 of 1
affected package

Improper Verification of Cryptographic Signature in org.apache.httpcomponents:httpclient

Carried by container images the latest versions of 19 of 17,781 indexed charts deploy, on 28 images.

Affected packageAffected versionsFixed inImages
httpclientmaven4.0.1, 4.0.2, 4.1.3, 4.2.5+4 more4.3.528
OSV records
GHSA-cfh5-3ghh-wfjx

Charts affected

19 by stars
ChartLatestAffected imagesRadar Score
hivedmwm-bigdataVerified publisher0.1.63 of 5See more

hive dmwm-bigdata 0.1.6

3 of the 5 container images this version deploys carry CVE-2014-3577.

Container imageDigestPackageFixed in
bde2020/hive:2.3.2-postgresql-metastore620267768985
httpclient@4.2.5
4.3.5
gradiant/hdfs:2.7.73b28784ba41f
httpclient@4.2.5
4.3.5
gradiant/hive:2.3.2-postgresql-metastoreaae4f8a21f8b
httpclient@4.2.5
4.3.5

Open the chart page →

20,837
ignitecloudnativeapp1.0.01 of 1See more

ignite cloudnativeapp 1.0.0

1 of the 1 container images this version deploys carry CVE-2014-3577.

Container imageDigestPackageFixed in
apacheignite/ignite:2.7.0d7deab68b8fa
httpclient@4.3.3
4.3.5

Open the chart page →

7,891
hbasedmwm-bigdataVerified publisher0.1.61 of 5See more

hbase dmwm-bigdata 0.1.6

1 of the 5 container images this version deploys carry CVE-2014-3577.

Container imageDigestPackageFixed in
gradiant/hdfs:2.7.73b28784ba41f
httpclient@4.2.5
4.3.5

Open the chart page →

13,392
hive-metastoredmwm-bigdataVerified publisher0.1.31 of 2See more

hive-metastore dmwm-bigdata 0.1.3

1 of the 2 container images this version deploys carry CVE-2014-3577.

Container imageDigestPackageFixed in
bde2020/hive:2.3.2-postgresql-metastore620267768985
httpclient@4.2.5
4.3.5

Open the chart page →

6,882
opentsdbdmwm-bigdataVerified publisher0.1.72 of 6See more

opentsdb dmwm-bigdata 0.1.7

2 of the 6 container images this version deploys carry CVE-2014-3577.

Container imageDigestPackageFixed in
gradiant/hdfs:2.7.73b28784ba41f
httpclient@4.2.5
4.3.5
gradiant/opentsdb:2.4.0c33d53913869
httpclient@4.3.1
4.3.5

Open the chart page →

17,511
hbasegradiant-bigdataVerified publisher0.1.61 of 5See more

hbase gradiant-bigdata 0.1.6

1 of the 5 container images this version deploys carry CVE-2014-3577.

Container imageDigestPackageFixed in
gradiant/hdfs:2.7.73b28784ba41f
httpclient@4.2.5
4.3.5

Open the chart page →

13,392
openhab-cloudandibraeuVerified publisher1.2.61 of 1See more

openhab-cloud andibraeu 1.2.6

1 of the 1 container images this version deploys carry CVE-2014-3577.

Container imageDigestPackageFixed in
openhab/openhab-cloud:a8138a329dd2bac8c4b
httpclient@4.3-beta1
4.3.5

Open the chart page →

3,437
cassandra-reapercloudnativeapp0.2.01 of 1See more

cassandra-reaper cloudnativeapp 0.2.0

1 of the 1 container images this version deploys carry CVE-2014-3577.

Container imageDigestPackageFixed in
thelastpickle/cassandra-reaper:1.3.09c53996c457d
httpclient@4.2.5
4.3.5

Open the chart page →

5,078
cosbenchcloudnativeapp1.0.11 of 1See more

cosbench cloudnativeapp 1.0.1

1 of the 1 container images this version deploys carry CVE-2014-3577.

Container imageDigestPackageFixed in
zenko/zenko-cosbench:0.0.6386a1f48ec0e
httpclient@4.1.3
4.3.5

Open the chart page →

4,906
rundeckcloudnativeapp0.1.01 of 2See more

rundeck cloudnativeapp 0.1.0

1 of the 2 container images this version deploys carry CVE-2014-3577.

Container imageDigestPackageFixed in
rundeck/rundeck:3.0.16b13e8059ad72
httpclient@4.0.1
4.3.5

Open the chart page →

23,665
spark-shuffleduyet0.2.01 of 1See more

spark-shuffle duyet 0.2.0

1 of the 1 container images this version deploys carry CVE-2014-3577.

Container imageDigestPackageFixed in
snappydatainc/spark-shuffle:v2.2.0-kubernetes-0.5.1fd4b2070466f
httpclient@4.0.1
4.3.5

Open the chart page →

5,639
openkmgeek-cookbookVerified publisher4.2.01 of 1See more

openkm geek-cookbook 4.2.0

1 of the 1 container images this version deploys carry CVE-2014-3577.

Container imageDigestPackageFixed in
openkm/openkm-ce:6.3.113bc465a7461b
httpclient@4.0.1
4.3.5

Open the chart page →

27,949
hdfsgradiant-bigdataVerified publisher0.1.101 of 2See more

hdfs gradiant-bigdata 0.1.10

1 of the 2 container images this version deploys carry CVE-2014-3577.

Container imageDigestPackageFixed in
gradiant/hdfs:2.7.73b28784ba41f
httpclient@4.2.5
4.3.5

Open the chart page →

7,073
hivegradiant-bigdataVerified publisher0.1.63 of 5See more

hive gradiant-bigdata 0.1.6

3 of the 5 container images this version deploys carry CVE-2014-3577.

Container imageDigestPackageFixed in
bde2020/hive:2.3.2-postgresql-metastore620267768985
httpclient@4.2.5
4.3.5
gradiant/hdfs:2.7.73b28784ba41f
httpclient@4.2.5
4.3.5
gradiant/hive:2.3.2-postgresql-metastoreaae4f8a21f8b
httpclient@4.2.5
4.3.5

Open the chart page →

20,837
hive-metastoregradiant-bigdataVerified publisher0.1.31 of 2See more

hive-metastore gradiant-bigdata 0.1.3

1 of the 2 container images this version deploys carry CVE-2014-3577.

Container imageDigestPackageFixed in
bde2020/hive:2.3.2-postgresql-metastore620267768985
httpclient@4.2.5
4.3.5

Open the chart page →

6,882
opentsdbgradiant-bigdataVerified publisher0.1.72 of 6See more

opentsdb gradiant-bigdata 0.1.7

2 of the 6 container images this version deploys carry CVE-2014-3577.

Container imageDigestPackageFixed in
gradiant/hdfs:2.7.73b28784ba41f
httpclient@4.2.5
4.3.5
gradiant/opentsdb:2.4.0c33d53913869
httpclient@4.3.1
4.3.5

Open the chart page →

17,511
ibm-microclimateibm-charts0.1.02 of 8See more

ibm-microclimate ibm-charts 0.1.0

2 of the 8 container images this version deploys carry CVE-2014-3577.

Container imageDigestPackageFixed in
ibmcom/microclimate-file-watcher:latestab3fd1fdfa18
httpclient@4.0.2
4.3.5
ibmcom/microclimate-theia:lateste17bdccc5030
httpclient@4.0.2
4.3.5

Open the chart page →

57,669
MINTmint8.0.21 of 15See more

MINT mint 8.0.2

1 of the 15 container images this version deploys carry CVE-2014-3577.

Container imageDigestPackageFixed in
mintproject/model-catalog-endpoint:29256555a6fbaefae4729d5cd259564708a4ab04ffbb13f20465
httpclient@4.2.6
4.3.5

Open the chart page →

43,341
polyglotncsaVerified publisher0.1.114 of 18See more

polyglot ncsa 0.1.1

14 of the 18 container images this version deploys carry CVE-2014-3577.

Container imageDigestPackageFixed in
craigwillis/c2metadata-bd:latestae317d7e4724
httpclient@4.3.1
4.3.5
ncsapolyglot/converters-avconv:latestc44b22eb58bb
httpclient@4.3.1
4.3.5
ncsapolyglot/converters-ebook-convert:latest438d82cdbdb5
httpclient@4.3.1
4.3.5
ncsapolyglot/converters-ffmpeg:latest48c852c1204b
httpclient@4.3.1
4.3.5
ncsapolyglot/converters-flac:latest072cf5bc6f99
httpclient@4.3.1
4.3.5
ncsapolyglot/converters-gdal:latestf746049515c1
httpclient@4.3.1
4.3.5
ncsapolyglot/converters-ghostscript:latestf350da56dd55
httpclient@4.3.1
4.3.5
ncsapolyglot/converters-htmldoc:latest317dd9e56922
httpclient@4.3.1
4.3.5
ncsapolyglot/converters-imagemagick:latestd244ea8c32ac
httpclient@4.3.1
4.3.5
ncsapolyglot/converters-openjpeg:latest2ba4af461d51
httpclient@4.3.1
4.3.5
ncsapolyglot/converters-txt2html:latest30ee96508c0b
httpclient@4.3.1
4.3.5
ncsapolyglot/converters-unoconv:latest1d9cebe3022b
httpclient@4.3.1
4.3.5
ncsapolyglot/converters-zip:latestf889fe30e2c7
httpclient@4.3.1
4.3.5
ncsapolyglot/polyglot:2.4.097a8c01c076e
httpclient@4.3.1
4.3.5

Open the chart page →

55,726

Container images carrying it

28 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
gradiant/hdfs:2.7.73b28784ba41f
httpclient@4.2.5
4.3.5
7
bde2020/hive:2.3.2-postgresql-metastore620267768985
httpclient@4.2.5
4.3.5
4
gradiant/hive:2.3.2-postgresql-metastoreaae4f8a21f8b
httpclient@4.2.5
4.3.5
2
gradiant/opentsdb:2.4.0c33d53913869
httpclient@4.3.1
4.3.5
2
apacheignite/ignite:2.7.0d7deab68b8fa
httpclient@4.3.3
4.3.5
1
craigwillis/c2metadata-bd:latestae317d7e4724
httpclient@4.3.1
4.3.5
1
ibmcom/microclimate-file-watcher:latestab3fd1fdfa18
httpclient@4.0.2
4.3.5
1
ibmcom/microclimate-theia:lateste17bdccc5030
httpclient@4.0.2
4.3.5
1
mintproject/model-catalog-endpoint:29256555a6fbaefae4729d5cd259564708a4ab04ffbb13f20465
httpclient@4.2.6
4.3.5
1
ncsapolyglot/converters-avconv:latestc44b22eb58bb
httpclient@4.3.1
4.3.5
1
ncsapolyglot/converters-ebook-convert:latest438d82cdbdb5
httpclient@4.3.1
4.3.5
1
ncsapolyglot/converters-ffmpeg:latest48c852c1204b
httpclient@4.3.1
4.3.5
1
ncsapolyglot/converters-flac:latest072cf5bc6f99
httpclient@4.3.1
4.3.5
1
ncsapolyglot/converters-gdal:latestf746049515c1
httpclient@4.3.1
4.3.5
1
ncsapolyglot/converters-ghostscript:latestf350da56dd55
httpclient@4.3.1
4.3.5
1
ncsapolyglot/converters-htmldoc:latest317dd9e56922
httpclient@4.3.1
4.3.5
1
ncsapolyglot/converters-imagemagick:latestd244ea8c32ac
httpclient@4.3.1
4.3.5
1
ncsapolyglot/converters-openjpeg:latest2ba4af461d51
httpclient@4.3.1
4.3.5
1
ncsapolyglot/converters-txt2html:latest30ee96508c0b
httpclient@4.3.1
4.3.5
1
ncsapolyglot/converters-unoconv:latest1d9cebe3022b
httpclient@4.3.1
4.3.5
1
ncsapolyglot/converters-zip:latestf889fe30e2c7
httpclient@4.3.1
4.3.5
1
ncsapolyglot/polyglot:2.4.097a8c01c076e
httpclient@4.3.1
4.3.5
1
openhab/openhab-cloud:a8138a329dd2bac8c4b
httpclient@4.3-beta1
4.3.5
1
openkm/openkm-ce:6.3.113bc465a7461b
httpclient@4.0.1
4.3.5
1
rundeck/rundeck:3.0.16b13e8059ad72
httpclient@4.0.1
4.3.5
1
snappydatainc/spark-shuffle:v2.2.0-kubernetes-0.5.1fd4b2070466f
httpclient@4.0.1
4.3.5
1
thelastpickle/cassandra-reaper:1.3.09c53996c457d
httpclient@4.2.5
4.3.5
1
zenko/zenko-cosbench:0.0.6386a1f48ec0e
httpclient@4.1.3
4.3.5
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.