CVE-2016-8858

High

Advisory

Published 9 Dec 2016In the index since 6 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.295; 98th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 37; of 17,781 indexed, latest versions
Container images: 20; deployed by those charts
Fix available: None; affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 37 of 17,781 indexed charts deploy, on 20 images.

Affected package	Affected versions	Fixed in	Images
opensshdeb	1:6.6p1-2ubuntu2, 1:6.6p1-2ubuntu2.13, 1:7.2p2-4ubuntu2.2, 1:7.2p2-4ubuntu2.4+4 more	no fix listed	20

OSV records: UBUNTU-CVE-2016-8858

Charts affected

37 by stars

Chart

Latest

Affected images

Radar Score

oesopsmx

4.0.32

1 of 25 See more

oes opsmx 4.0.32

1 of the 25 container images this version deploys carry CVE-2016-8858.

Container image	Digest	Package	Fixed in
quay.io/opsmxpublic/spin-sample-pipeline :v1.0.1	c6a934439421	openssh@1:7.2p2-4ubuntu2.10	no fix listed

Open the chart page →

107,811

dltbrokerassist-iot-distributed-broker

0.2.0

2 of 9 See more

dltbroker assist-iot-distributed-broker 0.2.0

2 of the 9 container images this version deploys carry CVE-2016-8858.

Container image	Digest	Package	Fixed in
hyperledger/fabric-ca-tools :latest	4ce6f43ded2e	openssh@1:7.2p2-4ubuntu2.4	no fix listed
hyperledger/fabric-couchdb :0.4.15	f6c724592abf	openssh@1:7.2p2-4ubuntu2.8	no fix listed

Open the chart page →

77,706

dltloggingassist-iot-logging-auditing

0.2.0

2 of 9 See more

dltlogging assist-iot-logging-auditing 0.2.0

2 of the 9 container images this version deploys carry CVE-2016-8858.

Container image	Digest	Package	Fixed in
hyperledger/fabric-ca-tools :latest	4ce6f43ded2e	openssh@1:7.2p2-4ubuntu2.4	no fix listed
hyperledger/fabric-couchdb :0.4.15	f6c724592abf	openssh@1:7.2p2-4ubuntu2.8	no fix listed

Open the chart page →

77,687

kafka-devwikimedia

0.2.0

1 of 1 See more

kafka-dev wikimedia 0.2.0

1 of the 1 container images this version deploys carry CVE-2016-8858.

Container image	Digest	Package	Fixed in
wurstmeister/zookeeper :latest	7a7fd44a7210	openssh@1:6.6p1-2ubuntu2	no fix listed

Open the chart page →

41,427

dltkvassist-iot-data-integrity-verification

0.2.0

2 of 9 See more

dltkv assist-iot-data-integrity-verification 0.2.0

2 of the 9 container images this version deploys carry CVE-2016-8858.

Container image	Digest	Package	Fixed in
hyperledger/fabric-ca-tools :latest	4ce6f43ded2e	openssh@1:7.2p2-4ubuntu2.4	no fix listed
hyperledger/fabric-couchdb :0.4.15	f6c724592abf	openssh@1:7.2p2-4ubuntu2.8	no fix listed

Open the chart page →

77,706

dltflassist-iot-dlt-based-fl

0.2.0

2 of 9 See more

dltfl assist-iot-dlt-based-fl 0.2.0

2 of the 9 container images this version deploys carry CVE-2016-8858.

Container image	Digest	Package	Fixed in
hyperledger/fabric-ca-tools :latest	4ce6f43ded2e	openssh@1:7.2p2-4ubuntu2.4	no fix listed
hyperledger/fabric-couchdb :0.4.15	f6c724592abf	openssh@1:7.2p2-4ubuntu2.8	no fix listed

Open the chart page →

77,706

opensipschetan-opensips

0.1.0

1 of 1 See more

opensips chetan-opensips 0.1.0

1 of the 1 container images this version deploys carry CVE-2016-8858.

Container image	Digest	Package	Fixed in
chetangautamm/repo :Opensips_Build	b4b94155ff5a	openssh@1:6.6p1-2ubuntu2.13	no fix listed

Open the chart page →

30,140

ethereumcloudnativeapp

1.0.0

1 of 3 See more

ethereum cloudnativeapp 1.0.0

1 of the 3 container images this version deploys carry CVE-2016-8858.

Container image	Digest	Package	Fixed in
ethereumex/eth-stats-dashboard :v0.0.1	a7603aa8df4c	openssh@1:7.2p2-4ubuntu2.2	no fix listed

Open the chart page →

27,417

guestbookcloudnativeapp

0.2.0

1 of 3 See more

guestbook cloudnativeapp 0.2.0

1 of the 3 container images this version deploys carry CVE-2016-8858.

Container image	Digest	Package	Fixed in
resouer/redis-slave :v2	e2f198b49ba7	openssh@1:6.6p1-2ubuntu2	no fix listed

Open the chart page →

36,839

hlf-couchdbcloudnativeapp

1.0.6

1 of 1 See more

hlf-couchdb cloudnativeapp 1.0.6

1 of the 1 container images this version deploys carry CVE-2016-8858.

Container image	Digest	Package	Fixed in
hyperledger/fabric-couchdb :0.4.10	c65891b6c237	openssh@1:7.2p2-4ubuntu2.4	no fix listed

Open the chart page →

33,963

rundeckcloudnativeapp

0.1.0

1 of 2 See more

rundeck cloudnativeapp 0.1.0

1 of the 2 container images this version deploys carry CVE-2016-8858.

Container image	Digest	Package	Fixed in
rundeck/rundeck :3.0.16	b13e8059ad72	openssh@1:7.2p2-4ubuntu2.6	no fix listed

Open the chart page →

23,665

rundeckdwardu-helm-charts

0.3.4

1 of 2 See more

rundeck dwardu-helm-charts 0.3.4

1 of the 2 container images this version deploys carry CVE-2016-8858.

Container image	Digest	Package	Fixed in
rundeck/rundeck :3.2.7	4d64fe56f767	openssh@1:7.2p2-4ubuntu2.8	no fix listed

Open the chart page →

19,802

ibm-microclimateibm-charts

0.1.0

1 of 8 See more

ibm-microclimate ibm-charts 0.1.0

1 of the 8 container images this version deploys carry CVE-2016-8858.

Container image	Digest	Package	Fixed in
ibmcom/microclimate-theia :latest	e17bdccc5030	openssh@1:7.2p2-4ubuntu2.2	no fix listed

Open the chart page →

57,669

ibm-swift-sampleibm-charts

1.1.2

1 of 1 See more

ibm-swift-sample ibm-charts 1.1.2

1 of the 1 container images this version deploys carry CVE-2016-8858.

Container image	Digest	Package	Fixed in
ibmcom/icp-swift-sample :latest	b5d8c6714dbc	openssh@1:7.2p2-4ubuntu2.4	no fix listed

Open the chart page →

25,160

zookeeper-helm-chartnotesprojectchart

0.1.0

1 of 1 See more

zookeeper-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2016-8858.

Container image	Digest	Package	Fixed in
wurstmeister/zookeeper :latest	7a7fd44a7210	openssh@1:6.6p1-2ubuntu2	no fix listed

Open the chart page →

41,427

comacopencord

1.0.0

3 of 9 See more

comac opencord 1.0.0

3 of the 9 container images this version deploys carry CVE-2016-8858.

Container image	Digest	Package	Fixed in
omecproject/mcord-synchronizer :comac-1.0.0	cfdb566dd949	openssh@1:7.2p2-4ubuntu2.7	no fix listed
omecproject/onos-progran :1.0.0	5715e5648aa0	openssh@1:7.2p2-4ubuntu2.4	no fix listed
omecproject/progran-synchronizer :comac-1.0.0	d109a8e57e71	openssh@1:7.2p2-4ubuntu2.7	no fix listed

Open the chart page →

88,546

comac-platformopencord

0.0.17

1 of 11 See more

comac-platform opencord 0.0.17

1 of the 11 container images this version deploys carry CVE-2016-8858.

Container image	Digest	Package	Fixed in
omecproject/mcord-synchronizer :comac-1.0.0	cfdb566dd949	openssh@1:7.2p2-4ubuntu2.7	no fix listed

Open the chart page →

26,211

onos-progranopencord

1.2.7

1 of 2 See more

onos-progran opencord 1.2.7

1 of the 2 container images this version deploys carry CVE-2016-8858.

Container image	Digest	Package	Fixed in
muluder/prograncontrollermcord :0.1.8	43b597a93da7	openssh@1:7.2p2-4ubuntu2.4	no fix listed

Open the chart page →

38,865

sebaopencord

1.0.0

1 of 17 See more

seba opencord 1.0.0

1 of the 17 container images this version deploys carry CVE-2016-8858.

Container image	Digest	Package	Fixed in
voltha/voltha-cli :1.6.0	c4e41e92f046	openssh@1:7.2p2-4ubuntu2.6	no fix listed

Open the chart page →

93,855

seldon-core-loadtestingseldon

0.2.0

1 of 1 See more

seldon-core-loadtesting seldon 0.2.0

1 of the 1 container images this version deploys carry CVE-2016-8858.

Container image	Digest	Package	Fixed in
seldonio/locust-core :0.8	1d0da98a2d76	openssh@1:7.2p2-4ubuntu2.8	no fix listed

Open the chart page →

23,007

aafsmo-helm-chart

6.0.0

1 of 14 See more

aaf smo-helm-chart 6.0.0

1 of the 14 container images this version deploys carry CVE-2016-8858.

Container image	Digest	Package	Fixed in
oomk8s/readiness-check :2.0.2	875814cc853d	openssh@1:7.2p2-4ubuntu2.8	no fix listed

Open the chart page →

25,769

aaismo-helm-chart

6.0.0

1 of 14 See more

aai smo-helm-chart 6.0.0

1 of the 14 container images this version deploys carry CVE-2016-8858.

Container image	Digest	Package	Fixed in
oomk8s/readiness-check :2.0.2	875814cc853d	openssh@1:7.2p2-4ubuntu2.8	no fix listed

Open the chart page →

25,803

dgbuildersmo-helm-chart

6.0.0

1 of 3 See more

dgbuilder smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2016-8858.

Container image	Digest	Package	Fixed in
oomk8s/readiness-check :2.0.0	7daa08b81954	openssh@1:7.2p2-4ubuntu2.4	no fix listed

Open the chart page →

28,470

dmaap-listenersmo-helm-chart

6.0.0

1 of 3 See more

dmaap-listener smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2016-8858.

Container image	Digest	Package	Fixed in
oomk8s/readiness-check :2.0.2	875814cc853d	openssh@1:7.2p2-4ubuntu2.8	no fix listed

Open the chart page →

25,769

elasticsearchsmo-helm-chart

6.0.0

1 of 5 See more

elasticsearch smo-helm-chart 6.0.0

1 of the 5 container images this version deploys carry CVE-2016-8858.

Container image	Digest	Package	Fixed in
oomk8s/readiness-check :2.0.2	875814cc853d	openssh@1:7.2p2-4ubuntu2.8	no fix listed

Open the chart page →

24,776

logsmo-helm-chart

6.0.0

1 of 6 See more

log smo-helm-chart 6.0.0

1 of the 6 container images this version deploys carry CVE-2016-8858.

Container image	Digest	Package	Fixed in
oomk8s/readiness-check :2.0.0	7daa08b81954	openssh@1:7.2p2-4ubuntu2.4	no fix listed

Open the chart page →

29,220

mariadb-initsmo-helm-chart

6.0.0

1 of 2 See more

mariadb-init smo-helm-chart 6.0.0

1 of the 2 container images this version deploys carry CVE-2016-8858.

Container image	Digest	Package	Fixed in
oomk8s/readiness-check :2.0.2	875814cc853d	openssh@1:7.2p2-4ubuntu2.8	no fix listed

Open the chart page →

24,776

msbsmo-helm-chart

6.0.0

1 of 6 See more

msb smo-helm-chart 6.0.0

1 of the 6 container images this version deploys carry CVE-2016-8858.

Container image	Digest	Package	Fixed in
oomk8s/readiness-check :2.0.0	7daa08b81954	openssh@1:7.2p2-4ubuntu2.4	no fix listed

Open the chart page →

27,477

pndasmo-helm-chart

6.0.0

1 of 3 See more

pnda smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2016-8858.

Container image	Digest	Package	Fixed in
oomk8s/readiness-check :2.0.0	7daa08b81954	openssh@1:7.2p2-4ubuntu2.4	no fix listed

Open the chart page →

27,477

pombasmo-helm-chart

6.0.0

1 of 17 See more

pomba smo-helm-chart 6.0.0

1 of the 17 container images this version deploys carry CVE-2016-8858.

Container image	Digest	Package	Fixed in
oomk8s/readiness-check :2.0.0	7daa08b81954	openssh@1:7.2p2-4ubuntu2.4	no fix listed

Open the chart page →

29,220

portalsmo-helm-chart

6.0.0

1 of 8 See more

portal smo-helm-chart 6.0.0

1 of the 8 container images this version deploys carry CVE-2016-8858.

Container image	Digest	Package	Fixed in
oomk8s/readiness-check :2.0.0	7daa08b81954	openssh@1:7.2p2-4ubuntu2.4	no fix listed

Open the chart page →

27,477

sdcsmo-helm-chart

6.0.0

1 of 14 See more

sdc smo-helm-chart 6.0.0

1 of the 14 container images this version deploys carry CVE-2016-8858.

Container image	Digest	Package	Fixed in
oomk8s/readiness-check :2.0.2	875814cc853d	openssh@1:7.2p2-4ubuntu2.8	no fix listed

Open the chart page →

25,769

sdnc-ansible-serversmo-helm-chart

6.0.0

1 of 3 See more

sdnc-ansible-server smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2016-8858.

Container image	Digest	Package	Fixed in
oomk8s/readiness-check :2.0.2	875814cc853d	openssh@1:7.2p2-4ubuntu2.8	no fix listed

Open the chart page →

25,769

sdnc-portalsmo-helm-chart

6.0.0

1 of 3 See more

sdnc-portal smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2016-8858.

Container image	Digest	Package	Fixed in
oomk8s/readiness-check :2.0.2	875814cc853d	openssh@1:7.2p2-4ubuntu2.8	no fix listed

Open the chart page →

25,769

sdnc-promsmo-helm-chart

6.0.0

1 of 2 See more

sdnc-prom smo-helm-chart 6.0.0

1 of the 2 container images this version deploys carry CVE-2016-8858.

Container image	Digest	Package	Fixed in
oomk8s/readiness-check :2.0.2	875814cc853d	openssh@1:7.2p2-4ubuntu2.8	no fix listed

Open the chart page →

24,776

sdnc-websmo-helm-chart

6.0.0

1 of 3 See more

sdnc-web smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2016-8858.

Container image	Digest	Package	Fixed in
oomk8s/readiness-check :2.0.2	875814cc853d	openssh@1:7.2p2-4ubuntu2.8	no fix listed

Open the chart page →

24,776

ueb-listenersmo-helm-chart

6.0.0

1 of 3 See more

ueb-listener smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2016-8858.

Container image	Digest	Package	Fixed in
oomk8s/readiness-check :2.0.2	875814cc853d	openssh@1:7.2p2-4ubuntu2.8	no fix listed

Open the chart page →

25,769

Container images carrying it

20 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
oomk8s/readiness-check :2.0.2	875814cc853d	openssh@1:7.2p2-4ubuntu2.8	no fix listed	11
oomk8s/readiness-check :2.0.0	7daa08b81954	openssh@1:7.2p2-4ubuntu2.4	no fix listed	6
hyperledger/fabric-ca-tools :latest	4ce6f43ded2e	openssh@1:7.2p2-4ubuntu2.4	no fix listed	4
hyperledger/fabric-couchdb :0.4.15	f6c724592abf	openssh@1:7.2p2-4ubuntu2.8	no fix listed	4
omecproject/mcord-synchronizer :comac-1.0.0	cfdb566dd949	openssh@1:7.2p2-4ubuntu2.7	no fix listed	2
wurstmeister/zookeeper :latest	7a7fd44a7210	openssh@1:6.6p1-2ubuntu2	no fix listed	2
chetangautamm/repo :Opensips_Build	b4b94155ff5a	openssh@1:6.6p1-2ubuntu2.13	no fix listed	1
ethereumex/eth-stats-dashboard :v0.0.1	a7603aa8df4c	openssh@1:7.2p2-4ubuntu2.2	no fix listed	1
hyperledger/fabric-couchdb :0.4.10	c65891b6c237	openssh@1:7.2p2-4ubuntu2.4	no fix listed	1
ibmcom/icp-swift-sample :latest	b5d8c6714dbc	openssh@1:7.2p2-4ubuntu2.4	no fix listed	1
ibmcom/microclimate-theia :latest	e17bdccc5030	openssh@1:7.2p2-4ubuntu2.2	no fix listed	1
muluder/prograncontrollermcord :0.1.8	43b597a93da7	openssh@1:7.2p2-4ubuntu2.4	no fix listed	1
omecproject/onos-progran :1.0.0	5715e5648aa0	openssh@1:7.2p2-4ubuntu2.4	no fix listed	1
omecproject/progran-synchronizer :comac-1.0.0	d109a8e57e71	openssh@1:7.2p2-4ubuntu2.7	no fix listed	1
resouer/redis-slave :v2	e2f198b49ba7	openssh@1:6.6p1-2ubuntu2	no fix listed	1
rundeck/rundeck :3.2.7	4d64fe56f767	openssh@1:7.2p2-4ubuntu2.8	no fix listed	1
rundeck/rundeck :3.0.16	b13e8059ad72	openssh@1:7.2p2-4ubuntu2.6	no fix listed	1
seldonio/locust-core :0.8	1d0da98a2d76	openssh@1:7.2p2-4ubuntu2.8	no fix listed	1
voltha/voltha-cli :1.6.0	c4e41e92f046	openssh@1:7.2p2-4ubuntu2.6	no fix listed	1
quay.io/opsmxpublic/spin-sample-pipeline :v1.0.1	c6a934439421	openssh@1:7.2p2-4ubuntu2.10	no fix listed	1