CVE-2017-1000158

Critical

Advisory

Published 17 Nov 2017In the index since 8 Sept 2026

Severity: Critical; worst across findings
CVSS: 9.8; base score, highest
EPSS: 0.079; 94th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 7; of 17,781 indexed, latest versions
Container images: 6; deployed by those charts
Fix available: 4 of 4; affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 7 of 17,781 indexed charts deploy, on 6 images.

Affected package	Affected versions	Fixed in	Images
python3.4deb	3.4.0-2ubuntu1, 3.4.3-1ubuntu1~14.04.5	3.4.3-1ubuntu1~14.04.6	3
python2apk	2.7.13-r0	2.7.14-r0	2
python2.7deb	2.7.6-8	2.7.6-8ubuntu0.4	2
python3.5deb	3.5.2-2ubuntu0~16.04.1	3.5.2-2ubuntu0~16.04.4	1

OSV records: ALPINE-CVE-2017-1000158 UBUNTU-CVE-2017-1000158
Also known as: USN-3496-1, USN-3496-3

Charts affected

7 by stars

Chart

Latest

Affected images

Radar Score

kafka-devwikimedia

0.2.0

1 of 1 See more

kafka-dev wikimedia 0.2.0

1 of the 1 container images this version deploys carry CVE-2017-1000158.

Container image	Digest	Package	Fixed in
wurstmeister/zookeeper :latest	7a7fd44a7210	python2.7@2.7.6-8 python3.4@3.4.0-2ubuntu1	2.7.6-8ubuntu0.4 3.4.3-1ubuntu1~14.04.6

Open the chart page →

41,427

sickragebryanalves

0.1.0

1 of 1 See more

sickrage bryanalves 0.1.0

1 of the 1 container images this version deploys carry CVE-2017-1000158.

Container image	Digest	Package	Fixed in
bryanalves/sickrage :latest	42f0a130001d	python2@2.7.13-r0	2.7.14-r0

Open the chart page →

923

guestbookcloudnativeapp

0.2.0

1 of 3 See more

guestbook cloudnativeapp 0.2.0

1 of the 3 container images this version deploys carry CVE-2017-1000158.

Container image	Digest	Package	Fixed in
resouer/redis-slave :v2	e2f198b49ba7	python2.7@2.7.6-8 python3.4@3.4.0-2ubuntu1	2.7.6-8ubuntu0.4 3.4.3-1ubuntu1~14.04.6

Open the chart page →

36,839

zookeeper-helm-chartnotesprojectchart

0.1.0

1 of 1 See more

zookeeper-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2017-1000158.

Container image	Digest	Package	Fixed in
wurstmeister/zookeeper :latest	7a7fd44a7210	python2.7@2.7.6-8 python3.4@3.4.0-2ubuntu1	2.7.6-8ubuntu0.4 3.4.3-1ubuntu1~14.04.6

Open the chart page →

41,427

sebaopencord

1.0.0

1 of 17 See more

seba opencord 1.0.0

1 of the 17 container images this version deploys carry CVE-2017-1000158.

Container image	Digest	Package	Fixed in
voltha/voltha-envoy :1.6.0	59ab2a00f712	python3.4@3.4.3-1ubuntu1~14.04.5	3.4.3-1ubuntu1~14.04.6

Open the chart page →

93,855

httpbinrgnu

1.0.0

1 of 1 See more

httpbin rgnu 1.0.0

1 of the 1 container images this version deploys carry CVE-2017-1000158.

Container image	Digest	Package	Fixed in
citizenstig/httpbin :latest	b81c818ccb86	python3.5@3.5.2-2ubuntu0~16.04.1	3.5.2-2ubuntu0~16.04.4

Open the chart page →

11,422

pypiwiremind

0.2.1

1 of 1 See more

pypi wiremind 0.2.1

1 of the 1 container images this version deploys carry CVE-2017-1000158.

Container image	Digest	Package	Fixed in
codekoala/pypi :1.2.1	4a999b2cfff2	python2@2.7.13-r0	2.7.14-r0

Open the chart page →

423

Container images carrying it

6 by charts deploying them

A fixed version is listed for 4 of the 4 affected packages.

Container image	Digest	Package	Fixed in	Used by
wurstmeister/zookeeper :latest	7a7fd44a7210	python2.7@2.7.6-8 python3.4@3.4.0-2ubuntu1	2.7.6-8ubuntu0.4 3.4.3-1ubuntu1~14.04.6	2
bryanalves/sickrage :latest	42f0a130001d	python2@2.7.13-r0	2.7.14-r0	1
citizenstig/httpbin :latest	b81c818ccb86	python3.5@3.5.2-2ubuntu0~16.04.1	3.5.2-2ubuntu0~16.04.4	1
codekoala/pypi :1.2.1	4a999b2cfff2	python2@2.7.13-r0	2.7.14-r0	1
resouer/redis-slave :v2	e2f198b49ba7	python2.7@2.7.6-8 python3.4@3.4.0-2ubuntu1	2.7.6-8ubuntu0.4 3.4.3-1ubuntu1~14.04.6	1
voltha/voltha-envoy :1.6.0	59ab2a00f712	python3.4@3.4.3-1ubuntu1~14.04.5	3.4.3-1ubuntu1~14.04.6	1