StackRadar

CVE-2015-2156

High

Advisory

Published 30 Jun 2020In the index since 6 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.052
92nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
27
of 17,781 indexed, latest versions
Container images
21
deployed by those charts
Fix available
1 of 1
affected package

Information Exposure in Netty

Carried by container images the latest versions of 27 of 17,781 indexed charts deploy, on 21 images.

Affected packageAffected versionsFixed inImages
nettymaven3.2.6.Final, 3.2.10.Final, 3.6.1.Final, 3.6.2.Final+5 more3.9.8.Final21
OSV records
GHSA-xfv3-rrfm-f2rv

Charts affected

27 by stars
ChartLatestAffected imagesRadar Score
budibasebudibase0.0.0-master1 of 7See more

budibase budibase 0.0.0-master

1 of the 7 container images this version deploys carry CVE-2015-2156.

Container imageDigestPackageFixed in
budibase/database:2.1.0d90f656261c9
netty@3.2.10.Final
3.9.8.Final

Open the chart page →

10,775
hivedmwm-bigdataVerified publisher0.1.63 of 5See more

hive dmwm-bigdata 0.1.6

3 of the 5 container images this version deploys carry CVE-2015-2156.

Container imageDigestPackageFixed in
bde2020/hive:2.3.2-postgresql-metastore620267768985
netty@3.6.2.Final
3.9.8.Final
gradiant/hdfs:2.7.73b28784ba41f
netty@3.6.2.Final
3.9.8.Final
gradiant/hive:2.3.2-postgresql-metastoreaae4f8a21f8b
netty@3.6.2.Final
3.9.8.Final

Open the chart page →

20,837
hive-metastoreheva-helm-chartsVerified publisher0.2.01 of 2See more

hive-metastore heva-helm-charts 0.2.0

1 of the 2 container images this version deploys carry CVE-2015-2156.

Container imageDigestPackageFixed in
sslhep/hive-metastore:3.1.39e80af083079
netty@3.6.2.Final
3.9.8.Final

Open the chart page →

7,335
hive-metastoreslamdev0.0.51 of 2See more

hive-metastore slamdev 0.0.5

1 of the 2 container images this version deploys carry CVE-2015-2156.

Container imageDigestPackageFixed in
slamdev/apache-hive:2.3.9-2.10.1b4b029c9b15f
netty@3.6.2.Final
3.9.8.Final

Open the chart page →

8,198
hadoopcloudnativeapp1.1.01 of 1See more

hadoop cloudnativeapp 1.1.0

1 of the 1 container images this version deploys carry CVE-2015-2156.

Container imageDigestPackageFixed in
danisla/hadoop:2.9.0255ba2dd739b
netty@3.6.2.Final
3.9.8.Final

Open the chart page →

5,772
ignitecloudnativeapp1.0.01 of 1See more

ignite cloudnativeapp 1.0.0

1 of the 1 container images this version deploys carry CVE-2015-2156.

Container imageDigestPackageFixed in
apacheignite/ignite:2.7.0d7deab68b8fa
netty@3.9.0.Final
3.9.8.Final

Open the chart page →

7,891
hbasedmwm-bigdataVerified publisher0.1.61 of 5See more

hbase dmwm-bigdata 0.1.6

1 of the 5 container images this version deploys carry CVE-2015-2156.

Container imageDigestPackageFixed in
gradiant/hdfs:2.7.73b28784ba41f
netty@3.6.2.Final
3.9.8.Final

Open the chart page →

13,392
hive-metastoredmwm-bigdataVerified publisher0.1.31 of 2See more

hive-metastore dmwm-bigdata 0.1.3

1 of the 2 container images this version deploys carry CVE-2015-2156.

Container imageDigestPackageFixed in
bde2020/hive:2.3.2-postgresql-metastore620267768985
netty@3.6.2.Final
3.9.8.Final

Open the chart page →

6,882
opentsdbdmwm-bigdataVerified publisher0.1.71 of 6See more

opentsdb dmwm-bigdata 0.1.7

1 of the 6 container images this version deploys carry CVE-2015-2156.

Container imageDigestPackageFixed in
gradiant/hdfs:2.7.73b28784ba41f
netty@3.6.2.Final
3.9.8.Final

Open the chart page →

17,511
hbasegradiant-bigdataVerified publisher0.1.61 of 5See more

hbase gradiant-bigdata 0.1.6

1 of the 5 container images this version deploys carry CVE-2015-2156.

Container imageDigestPackageFixed in
gradiant/hdfs:2.7.73b28784ba41f
netty@3.6.2.Final
3.9.8.Final

Open the chart page →

13,392
stormgresearch1.2.01 of 3See more

storm gresearch 1.2.0

1 of the 3 container images this version deploys carry CVE-2015-2156.

Container imageDigestPackageFixed in
library/storm:2.4.0bd5d420506d6
netty@3.6.2.Final
3.9.8.Final

Open the chart page →

6,165
gridgaingridgainOfficialVerified publisher1.0.61 of 1See more

gridgain gridgain 1.0.6

1 of the 1 container images this version deploys carry CVE-2015-2156.

Container imageDigestPackageFixed in
gridgain/community:8.9.11d32d182a0e6a
netty@3.7.0.Final
3.9.8.Final

Open the chart page →

4,679
hadoopmiuler1.2.21 of 1See more

hadoop miuler 1.2.2

1 of the 1 container images this version deploys carry CVE-2015-2156.

Container imageDigestPackageFixed in
danisla/hadoop:2.9.0255ba2dd739b
netty@3.6.2.Final
3.9.8.Final

Open the chart page →

5,772
authorizationassist-iot-authorisation0.1.01 of 2See more

authorization assist-iot-authorisation 0.1.0

1 of the 2 container images this version deploys carry CVE-2015-2156.

Container imageDigestPackageFixed in
assistiot/authorization_svr:latestdb9361dad79b
netty@3.7.0.Final
3.9.8.Final

Open the chart page →

5,537
event-store-servicechoerodon0.8.01 of 2See more

event-store-service choerodon 0.8.0

1 of the 2 container images this version deploys carry CVE-2015-2156.

Container imageDigestPackageFixed in
choerodon/event-store-service:0.8.03c94c97f6f69
netty@3.7.0.Final
3.9.8.Final

Open the chart page →

9,808
riemanncloudnativeapp0.1.21 of 1See more

riemann cloudnativeapp 0.1.2

1 of the 1 container images this version deploys carry CVE-2015-2156.

Container imageDigestPackageFixed in
raykrueger/riemann:0.2.14c8baf3de57bb
netty@3.6.1.Final
3.9.8.Final

Open the chart page →

6,497
hdfsgradiant-bigdataVerified publisher0.1.101 of 2See more

hdfs gradiant-bigdata 0.1.10

1 of the 2 container images this version deploys carry CVE-2015-2156.

Container imageDigestPackageFixed in
gradiant/hdfs:2.7.73b28784ba41f
netty@3.6.2.Final
3.9.8.Final

Open the chart page →

7,073
hivegradiant-bigdataVerified publisher0.1.63 of 5See more

hive gradiant-bigdata 0.1.6

3 of the 5 container images this version deploys carry CVE-2015-2156.

Container imageDigestPackageFixed in
bde2020/hive:2.3.2-postgresql-metastore620267768985
netty@3.6.2.Final
3.9.8.Final
gradiant/hdfs:2.7.73b28784ba41f
netty@3.6.2.Final
3.9.8.Final
gradiant/hive:2.3.2-postgresql-metastoreaae4f8a21f8b
netty@3.6.2.Final
3.9.8.Final

Open the chart page →

20,837
hive-metastoregradiant-bigdataVerified publisher0.1.31 of 2See more

hive-metastore gradiant-bigdata 0.1.3

1 of the 2 container images this version deploys carry CVE-2015-2156.

Container imageDigestPackageFixed in
bde2020/hive:2.3.2-postgresql-metastore620267768985
netty@3.6.2.Final
3.9.8.Final

Open the chart page →

6,882
opentsdbgradiant-bigdataVerified publisher0.1.71 of 6See more

opentsdb gradiant-bigdata 0.1.7

1 of the 6 container images this version deploys carry CVE-2015-2156.

Container imageDigestPackageFixed in
gradiant/hdfs:2.7.73b28784ba41f
netty@3.6.2.Final
3.9.8.Final

Open the chart page →

17,511
ibm-business-automation-insights-devibm-charts3.2.01 of 6See more

ibm-business-automation-insights-dev ibm-charts 3.2.0

1 of the 6 container images this version deploys carry CVE-2015-2156.

Container imageDigestPackageFixed in
ibmcom/bai-flink-dev:19.0.2e31ff09e8aad
netty@3.6.2.Final
3.9.8.Final

Open the chart page →

39,349
pinotinseefrlab0.2.01 of 2See more

pinot inseefrlab 0.2.0

1 of the 2 container images this version deploys carry CVE-2015-2156.

Container imageDigestPackageFixed in
apachepinot/pinot:latest-jdk110018bb04ced7
netty@3.9.6.Final
3.9.8.Final

Open the chart page →

10,777
comacopencord1.0.01 of 9See more

comac opencord 1.0.0

1 of the 9 container images this version deploys carry CVE-2015-2156.

Container imageDigestPackageFixed in
omecproject/onos-progran:1.0.05715e5648aa0
netty@3.9.2.Final
3.9.8.Final

Open the chart page →

88,546
omec-control-planeopencord0.1.312 of 8See more

omec-control-plane opencord 0.1.31

2 of the 8 container images this version deploys carry CVE-2015-2156.

Container imageDigestPackageFixed in
library/cassandra:2.1.20cb079c0d7a57
netty@3.9.0.Final
3.9.8.Final
omecproject/c3po-hssdb:master-latest28a90cc26716
netty@3.9.0.Final
3.9.8.Final

Open the chart page →

40,715
onos-progranopencord1.2.71 of 2See more

onos-progran opencord 1.2.7

1 of the 2 container images this version deploys carry CVE-2015-2156.

Container imageDigestPackageFixed in
muluder/prograncontrollermcord:0.1.843b597a93da7
netty@3.9.2.Final
3.9.8.Final

Open the chart page →

38,865
archivaslamdev0.0.71 of 2See more

archiva slamdev 0.0.7

1 of the 2 container images this version deploys carry CVE-2015-2156.

Container imageDigestPackageFixed in
xetusoss/archiva:v2.2.588f25242b9ee
netty@3.6.6.Final
3.9.8.Final

Open the chart page →

6,907
trinostatcan1.23.41 of 2See more

trino statcan 1.23.4

1 of the 2 container images this version deploys carry CVE-2015-2156.

Container imageDigestPackageFixed in
trinodb/trino:405ee80ab5eeab2
netty@3.2.6.Final
3.9.8.Final

Open the chart page →

13,767

Container images carrying it

21 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
gradiant/hdfs:2.7.73b28784ba41f
netty@3.6.2.Final
3.9.8.Final
7
bde2020/hive:2.3.2-postgresql-metastore620267768985
netty@3.6.2.Final
3.9.8.Final
4
danisla/hadoop:2.9.0255ba2dd739b
netty@3.6.2.Final
3.9.8.Final
2
gradiant/hive:2.3.2-postgresql-metastoreaae4f8a21f8b
netty@3.6.2.Final
3.9.8.Final
2
apacheignite/ignite:2.7.0d7deab68b8fa
netty@3.9.0.Final
3.9.8.Final
1
apachepinot/pinot:latest-jdk110018bb04ced7
netty@3.9.6.Final
3.9.8.Final
1
assistiot/authorization_svr:latestdb9361dad79b
netty@3.7.0.Final
3.9.8.Final
1
budibase/database:2.1.0d90f656261c9
netty@3.2.10.Final
3.9.8.Final
1
choerodon/event-store-service:0.8.03c94c97f6f69
netty@3.7.0.Final
3.9.8.Final
1
gridgain/community:8.9.11d32d182a0e6a
netty@3.7.0.Final
3.9.8.Final
1
ibmcom/bai-flink-dev:19.0.2e31ff09e8aad
netty@3.6.2.Final
3.9.8.Final
1
library/cassandra:2.1.20cb079c0d7a57
netty@3.9.0.Final
3.9.8.Final
1
library/storm:2.4.0bd5d420506d6
netty@3.6.2.Final
3.9.8.Final
1
muluder/prograncontrollermcord:0.1.843b597a93da7
netty@3.9.2.Final
3.9.8.Final
1
omecproject/c3po-hssdb:master-latest28a90cc26716
netty@3.9.0.Final
3.9.8.Final
1
omecproject/onos-progran:1.0.05715e5648aa0
netty@3.9.2.Final
3.9.8.Final
1
raykrueger/riemann:0.2.14c8baf3de57bb
netty@3.6.1.Final
3.9.8.Final
1
slamdev/apache-hive:2.3.9-2.10.1b4b029c9b15f
netty@3.6.2.Final
3.9.8.Final
1
sslhep/hive-metastore:3.1.39e80af083079
netty@3.6.2.Final
3.9.8.Final
1
trinodb/trino:405ee80ab5eeab2
netty@3.2.6.Final
3.9.8.Final
1
xetusoss/archiva:v2.2.588f25242b9ee
netty@3.6.6.Final
3.9.8.Final
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.