StackRadarChart IndexLive demo

CVE-2016-1000352

High

Advisory

Published 17 Oct 2018In the index since 6 Sept 2026

Severity: High; worst across findings
CVSS: 7.4; base score, highest
EPSS: 0.022; 82nd percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 21; of 17,781 indexed, latest versions
Container images: 22; deployed by those charts
Fix available: 1 of 1; affected package

In Bouncy Castle JCE Provider the ECIES implementation allowed the use of ECB mode

Carried by container images the latest versions of 21 of 17,781 indexed charts deploy, on 22 images.

Affected package	Affected versions	Fixed in	Images
bcprov-jdk15onmaven	1.50, 1.51, 1.52, 1.53+2 more	1.56	22

OSV records: GHSA-w285-wf9q-5w69

Charts affected

21 by stars

Chart

Latest

Affected images

Radar Score

sparkmicrosoft

1 of 3 See more

spark microsoft 1.0.4

1 of the 3 container images this version deploys carry CVE-2016-1000352.

Container image	Digest	Package	Fixed in
dbanda/livy :0.8	0ca125e68e53	bcprov-jdk15on@1.51	1.56

Open the chart page →

13,738

skywalkingkubesphere-test

1 of 4 See more

skywalking kubesphere-test 3.1.0

1 of the 4 container images this version deploys carry CVE-2016-1000352.

Container image	Digest	Package	Fixed in
apache/skywalking-ui :8.1.0	67d50e4deff4	bcprov-jdk15on@1.55	1.56

Open the chart page →

18,042

event-store-servicechoerodon

1 of 2 See more

event-store-service choerodon 0.8.0

1 of the 2 container images this version deploys carry CVE-2016-1000352.

Container image	Digest	Package	Fixed in
choerodon/event-store-service :0.8.0	3c94c97f6f69	bcprov-jdk15on@1.55	1.56

Open the chart page →

9,808

prestocloudnativeapp

1 of 1 See more

presto cloudnativeapp 0.1.1

1 of the 1 container images this version deploys carry CVE-2016-1000352.

Container image	Digest	Package	Fixed in
bivas/presto :0.196	05545994f806	bcprov-jdk15on@1.51	1.56

Open the chart page →

7,226

rundeckcloudnativeapp

1 of 2 See more

rundeck cloudnativeapp 0.1.0

1 of the 2 container images this version deploys carry CVE-2016-1000352.

Container image	Digest	Package	Fixed in
rundeck/rundeck :3.0.16	b13e8059ad72	bcprov-jdk15on@1.51	1.56

Open the chart page →

23,665

1 of 7 See more

amundsen duyet 1.1.0

1 of the 7 container images this version deploys carry CVE-2016-1000352.

Container image	Digest	Package	Fixed in
library/neo4j :3.3.0	d4eaa8484246	bcprov-jdk15on@1.53	1.56

Open the chart page →

11,174

spark-shuffleduyet

1 of 1 See more

spark-shuffle duyet 0.2.0

1 of the 1 container images this version deploys carry CVE-2016-1000352.

Container image	Digest	Package	Fixed in
snappydatainc/spark-shuffle :v2.2.0-kubernetes-0.5.1	fd4b2070466f	bcprov-jdk15on@1.54	1.56

Open the chart page →

5,639

my-chartfleet-web-app

1 of 6 See more

my-chart fleet-web-app 0.1.0

1 of the 6 container images this version deploys carry CVE-2016-1000352.

Container image	Digest	Package	Fixed in
richardchesterwood/k8s-fleetman-api-gateway :release2	518f946b9f05	bcprov-jdk15on@1.55	1.56

Open the chart page →

24,296

openkmgeek-cookbook

1 of 1 See more

openkm geek-cookbook 4.2.0

1 of the 1 container images this version deploys carry CVE-2016-1000352.

Container image	Digest	Package	Fixed in
openkm/openkm-ce :6.3.11	3bc465a7461b	bcprov-jdk15on@1.52	1.56

Open the chart page →

27,949

ubooquityhalkeye

1 of 1 See more

ubooquity halkeye 0.1.1

1 of the 1 container images this version deploys carry CVE-2016-1000352.

Container image	Digest	Package	Fixed in
linuxserver/ubooquity :2.1.2-ls36	9932d6759112	bcprov-jdk15on@1.53	1.56

Open the chart page →

4,303

ibm-microclimateibm-charts

2 of 8 See more

ibm-microclimate ibm-charts 0.1.0

2 of the 8 container images this version deploys carry CVE-2016-1000352.

Container image	Digest	Package	Fixed in
ibmcom/microclimate-file-watcher :latest	ab3fd1fdfa18	bcprov-jdk15on@1.55	1.56
ibmcom/microclimate-theia :latest	e17bdccc5030	bcprov-jdk15on@1.55	1.56

Open the chart page →

57,669

jenkinsjenkins-x

1 of 2 See more

jenkins jenkins-x 0.10.38

1 of the 2 container images this version deploys carry CVE-2016-1000352.

Container image	Digest	Package	Fixed in
jenkinsci/jenkins :2.67	a1f33f004659	bcprov-jdk15on@1.54	1.56

Open the chart page →

10,682

bpjstk-serviceopenshift

2 of 6 See more

bpjstk-service openshift 1.0.0

2 of the 6 container images this version deploys carry CVE-2016-1000352.

Container image	Digest	Package	Fixed in
andrianrf/iso-client :latest	ba560086ce15	bcprov-jdk15on@1.51	1.56
andrianrf/iso-server :latest	7da47f525c7d	bcprov-jdk15on@1.51	1.56

Open the chart page →

34,671

smsf-configurationopenshift

1 of 1 See more

smsf-configuration openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2016-1000352.

Container image	Digest	Package	Fixed in
gurolakman/smsf-configuration :1.0.4	9abb3882bcbd	bcprov-jdk15on@1.50	1.56

Open the chart page →

13,607

smsf-dispatcheropenshift

1 of 1 See more

smsf-dispatcher openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2016-1000352.

Container image	Digest	Package	Fixed in
gurolakman/smsf-dispatcher :1.0.4	6537e8ed8de8	bcprov-jdk15on@1.50	1.56

Open the chart page →

11,738

smsf-momtopenshift

1 of 1 See more

smsf-momt openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2016-1000352.

Container image	Digest	Package	Fixed in
gurolakman/smsf-momt :1.0.4	ce23b20a8a17	bcprov-jdk15on@1.50	1.56

Open the chart page →

13,568

smsf-registrationopenshift

1 of 1 See more

smsf-registration openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2016-1000352.

Container image	Digest	Package	Fixed in
gurolakman/smsf-registration :1.0.4	b22e746edd5d	bcprov-jdk15on@1.50	1.56

Open the chart page →

13,551

ussigw-configurationopenshift

1 of 1 See more

ussigw-configuration openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2016-1000352.

Container image	Digest	Package	Fixed in
gurolakman/ussigw-configuration :1.0.4	bf18525c5ad9	bcprov-jdk15on@1.50	1.56

Open the chart page →

13,455

ussigw-coreopenshift

1 of 1 See more

ussigw-core openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2016-1000352.

Container image	Digest	Package	Fixed in
gurolakman/ussigw-core :1.0.4	8739565c3ea2	bcprov-jdk15on@1.50	1.56

Open the chart page →

13,100

atlassian-jirasomeblackmagic

1 of 1 See more

atlassian-jira someblackmagic 3.3.2

1 of the 1 container images this version deploys carry CVE-2016-1000352.

Container image	Digest	Package	Fixed in
atlassian/jira-software :8.14.0	37bc46cbec1a	bcprov-jdk15on@1.50	1.56

Open the chart page →

13,079

ubooquityvhdirk

1 of 1 See more

ubooquity vhdirk 0.1.3

1 of the 1 container images this version deploys carry CVE-2016-1000352.

Container image	Digest	Package	Fixed in
linuxserver/ubooquity :2.1.2-ls36	9932d6759112	bcprov-jdk15on@1.53	1.56

Open the chart page →

4,303

Container images carrying it

22 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
linuxserver/ubooquity :2.1.2-ls36	9932d6759112	bcprov-jdk15on@1.53	1.56	2
andrianrf/iso-client :latest	ba560086ce15	bcprov-jdk15on@1.51	1.56	1
andrianrf/iso-server :latest	7da47f525c7d	bcprov-jdk15on@1.51	1.56	1
apache/skywalking-ui :8.1.0	67d50e4deff4	bcprov-jdk15on@1.55	1.56	1
atlassian/jira-software :8.14.0	37bc46cbec1a	bcprov-jdk15on@1.50	1.56	1
bivas/presto :0.196	05545994f806	bcprov-jdk15on@1.51	1.56	1
choerodon/event-store-service :0.8.0	3c94c97f6f69	bcprov-jdk15on@1.55	1.56	1
dbanda/livy :0.8	0ca125e68e53	bcprov-jdk15on@1.51	1.56	1
gurolakman/smsf-configuration :1.0.4	9abb3882bcbd	bcprov-jdk15on@1.50	1.56	1
gurolakman/smsf-dispatcher :1.0.4	6537e8ed8de8	bcprov-jdk15on@1.50	1.56	1
gurolakman/smsf-momt :1.0.4	ce23b20a8a17	bcprov-jdk15on@1.50	1.56	1
gurolakman/smsf-registration :1.0.4	b22e746edd5d	bcprov-jdk15on@1.50	1.56	1
gurolakman/ussigw-configuration :1.0.4	bf18525c5ad9	bcprov-jdk15on@1.50	1.56	1
gurolakman/ussigw-core :1.0.4	8739565c3ea2	bcprov-jdk15on@1.50	1.56	1
ibmcom/microclimate-file-watcher :latest	ab3fd1fdfa18	bcprov-jdk15on@1.55	1.56	1
ibmcom/microclimate-theia :latest	e17bdccc5030	bcprov-jdk15on@1.55	1.56	1
jenkinsci/jenkins :2.67	a1f33f004659	bcprov-jdk15on@1.54	1.56	1
library/neo4j :3.3.0	d4eaa8484246	bcprov-jdk15on@1.53	1.56	1
openkm/openkm-ce :6.3.11	3bc465a7461b	bcprov-jdk15on@1.52	1.56	1
richardchesterwood/k8s-fleetman-api-gateway :release2	518f946b9f05	bcprov-jdk15on@1.55	1.56	1
rundeck/rundeck :3.0.16	b13e8059ad72	bcprov-jdk15on@1.51	1.56	1
snappydatainc/spark-shuffle :v2.2.0-kubernetes-0.5.1	fd4b2070466f	bcprov-jdk15on@1.54	1.56	1