StackRadar

CVE-2017-1000257

Critical

Advisory

Published 23 Oct 2017In the index since 6 Sept 2026
Severity
Critical
worst across findings
CVSS
9.1
base score, highest
EPSS
0.062
93rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
35
of 17,781 indexed, latest versions
Container images
26
deployed by those charts
Fix available
2 of 2
affected packages

curl - security update

Carried by container images the latest versions of 35 of 17,781 indexed charts deploy, on 26 images.

Affected packageAffected versionsFixed inImages
curldeb7.35.0-1ubuntu2.1, 7.35.0-1ubuntu2.3, 7.38.0-4+deb8u4, 7.38.0-4+deb8u5+4 more7.35.0-1ubuntu2.12, 7.38.0-4+deb8u7, 7.47.0-1ubuntu2.4, 7.52.1-5+deb9u225
curlapk7.51.0-r07.55.0-r21
OSV records
ALPINE-CVE-2017-1000257UBUNTU-CVE-2017-1000257DSA-4007-1
Also known as
USN-3457-1

Charts affected

35 by stars
ChartLatestAffected imagesRadar Score
fadicetic0.3.11 of 25See more

fadi cetic 0.3.1

1 of the 25 container images this version deploys carry CVE-2017-1000257.

Container imageDigestPackageFixed in
osixia/phpldapadmin:0.7.11ab629698ae0
curl@7.52.1-5
7.52.1-5+deb9u2

Open the chart page →

52,919
dexwiremindVerified publisher2.15.71 of 2See more

dex wiremind 2.15.7

1 of the 2 container images this version deploys carry CVE-2017-1000257.

Container imageDigestPackageFixed in
gcr.io/google_containers/kubernetes-dashboard-init-amd64:v1.0.0fbe12aa24de6
curl@7.47.0-1ubuntu2.2
7.47.0-1ubuntu2.4

Open the chart page →

13,562
auto-deploy-appav1o-chartsVerified publisher0.15.41 of 1See more

auto-deploy-app av1o-charts 0.15.4

1 of the 1 container images this version deploys carry CVE-2017-1000257.

Container imageDigestPackageFixed in
gcr.io/google-containers/echoserver:1.910f4dbc8eeeb
curl@7.47.0-1ubuntu2.2
7.47.0-1ubuntu2.4

Open the chart page →

11,007
rocketmqgin1.1.01 of 2See more

rocketmq gin 1.1.0

1 of the 2 container images this version deploys carry CVE-2017-1000257.

Container imageDigestPackageFixed in
apacherocketmq/rocketmq-dashboard:1.0.024799aff6cf8
curl@7.38.0-4+deb8u5
7.38.0-4+deb8u7

Open the chart page →

9,154
openldapalphani-helm-chartsVerified publisher2.4.571 of 2See more

openldap alphani-helm-charts 2.4.57

1 of the 2 container images this version deploys carry CVE-2017-1000257.

Container imageDigestPackageFixed in
osixia/phpldapadmin:0.7.11ab629698ae0
curl@7.52.1-5
7.52.1-5+deb9u2

Open the chart page →

3,067
phpldapadminalphani-helm-chartsVerified publisher0.1.31 of 1See more

phpldapadmin alphani-helm-charts 0.1.3

1 of the 1 container images this version deploys carry CVE-2017-1000257.

Container imageDigestPackageFixed in
osixia/phpldapadmin:0.7.11ab629698ae0
curl@7.52.1-5
7.52.1-5+deb9u2

Open the chart page →

2,559
phpldapadmincetic0.1.41 of 1See more

phpldapadmin cetic 0.1.4

1 of the 1 container images this version deploys carry CVE-2017-1000257.

Container imageDigestPackageFixed in
osixia/phpldapadmin:0.7.11ab629698ae0
curl@7.52.1-5
7.52.1-5+deb9u2

Open the chart page →

2,559
hadoopcloudnativeapp1.1.01 of 1See more

hadoop cloudnativeapp 1.1.0

1 of the 1 container images this version deploys carry CVE-2017-1000257.

Container imageDigestPackageFixed in
danisla/hadoop:2.9.0255ba2dd739b
curl@7.38.0-4+deb8u5
7.38.0-4+deb8u7

Open the chart page →

5,772
perconacloudnativeapp1.0.01 of 2See more

percona cloudnativeapp 1.0.0

1 of the 2 container images this version deploys carry CVE-2017-1000257.

Container imageDigestPackageFixed in
library/percona:5.7.17d5d7f368de4a
curl@7.38.0-4+deb8u5
7.38.0-4+deb8u7

Open the chart page →

1,011
hadoopmiuler1.2.21 of 1See more

hadoop miuler 1.2.2

1 of the 1 container images this version deploys carry CVE-2017-1000257.

Container imageDigestPackageFixed in
danisla/hadoop:2.9.0255ba2dd739b
curl@7.38.0-4+deb8u5
7.38.0-4+deb8u7

Open the chart page →

5,772
kafka-devwikimedia0.2.01 of 1See more

kafka-dev wikimedia 0.2.0

1 of the 1 container images this version deploys carry CVE-2017-1000257.

Container imageDigestPackageFixed in
wurstmeister/zookeeper:latest7a7fd44a7210
curl@7.35.0-1ubuntu2.1
7.35.0-1ubuntu2.12

Open the chart page →

41,427
imap-mailbox-exportercamptocamp32.0.01 of 1See more

imap-mailbox-exporter camptocamp3 2.0.0

1 of the 1 container images this version deploys carry CVE-2017-1000257.

Container imageDigestPackageFixed in
camptocamp/imap-mailbox-exporter:latest9dec019e4c62
curl@7.38.0-4+deb8u5
7.38.0-4+deb8u7

Open the chart page →

2,234
ldap-search-exportercamptocamp31.0.01 of 1See more

ldap-search-exporter camptocamp3 1.0.0

1 of the 1 container images this version deploys carry CVE-2017-1000257.

Container imageDigestPackageFixed in
camptocamp/ldap-search-exporter:latest5e55370dd292
curl@7.38.0-4+deb8u5
7.38.0-4+deb8u7

Open the chart page →

2,234
choerodon-monitoringchoerodon0.7.31 of 8See more

choerodon-monitoring choerodon 0.7.3

1 of the 8 container images this version deploys carry CVE-2017-1000257.

Container imageDigestPackageFixed in
weaveworks/watch:master-5b2a6e5bb113953e19f
curl@7.51.0-r0
7.55.0-r2

Open the chart page →

1,226
guestbookcloudnativeapp0.2.01 of 3See more

guestbook cloudnativeapp 0.2.0

1 of the 3 container images this version deploys carry CVE-2017-1000257.

Container imageDigestPackageFixed in
resouer/redis-slave:v2e2f198b49ba7
curl@7.35.0-1ubuntu2.3
7.35.0-1ubuntu2.12

Open the chart page →

36,839
linkerdcloudnativeapp0.4.11 of 2See more

linkerd cloudnativeapp 0.4.1

1 of the 2 container images this version deploys carry CVE-2017-1000257.

Container imageDigestPackageFixed in
buoyantio/linkerd:1.1.2f4048edaca6f
curl@7.38.0-4+deb8u5
7.38.0-4+deb8u7

Open the chart page →

1,419
percona-xtradb-clustercloudnativeapp1.0.01 of 2See more

percona-xtradb-cluster cloudnativeapp 1.0.0

1 of the 2 container images this version deploys carry CVE-2017-1000257.

Container imageDigestPackageFixed in
percona/percona-xtradb-cluster:5.7.19eaa3fcb7a5a2
curl@7.38.0-4+deb8u6
7.38.0-4+deb8u7

Open the chart page →

1,086
puppet-forgecloudnativeapp0.1.81 of 2See more

puppet-forge cloudnativeapp 0.1.8

1 of the 2 container images this version deploys carry CVE-2017-1000257.

Container imageDigestPackageFixed in
hickey/puppet_forge:1.10.0c1148a09ef20
curl@7.38.0-4+deb8u6
7.38.0-4+deb8u7

Open the chart page →

4,086
rethinkdbcloudnativeapp1.0.01 of 1See more

rethinkdb cloudnativeapp 1.0.0

1 of the 1 container images this version deploys carry CVE-2017-1000257.

Container imageDigestPackageFixed in
codylundquist/helm-rethinkdb-cluster:0.1.0630ab586b8c1
curl@7.38.0-4+deb8u5
7.38.0-4+deb8u7

Open the chart page →

1,011
riemanncloudnativeapp0.1.21 of 1See more

riemann cloudnativeapp 0.1.2

1 of the 1 container images this version deploys carry CVE-2017-1000257.

Container imageDigestPackageFixed in
raykrueger/riemann:0.2.14c8baf3de57bb
curl@7.52.1-5+deb9u1
7.52.1-5+deb9u2

Open the chart page →

6,497
openldapcloud-native-toolkit0.1.91 of 3See more

openldap cloud-native-toolkit 0.1.9

1 of the 3 container images this version deploys carry CVE-2017-1000257.

Container imageDigestPackageFixed in
osixia/phpldapadmin:0.7.058cce1b08592
curl@7.52.1-5
7.52.1-5+deb9u2

Open the chart page →

2,782
my-chartfleet-web-app0.1.02 of 6See more

my-chart fleet-web-app 0.1.0

2 of the 6 container images this version deploys carry CVE-2017-1000257.

Container imageDigestPackageFixed in
richardchesterwood/k8s-fleetman-position-simulator:release20b540a28f5a6
curl@7.52.1-5
7.52.1-5+deb9u2
richardchesterwood/k8s-fleetman-position-tracker:release336c43961214c
curl@7.52.1-5
7.52.1-5+deb9u2

Open the chart page →

24,296
hapi-fhirhapi-fhirVerified publisher0.1.01 of 1See more

hapi-fhir hapi-fhir 0.1.0

1 of the 1 container images this version deploys carry CVE-2017-1000257.

Container imageDigestPackageFixed in
polyakov/hapi-fhir-jpaserver-example:latestdbcef69146b8
curl@7.38.0-4+deb8u4
7.38.0-4+deb8u7

Open the chart page →

6,362
jenkinsjenkins-x0.10.381 of 2See more

jenkins jenkins-x 0.10.38

1 of the 2 container images this version deploys carry CVE-2017-1000257.

Container imageDigestPackageFixed in
jenkinsci/jenkins:2.67a1f33f004659
curl@7.52.1-5
7.52.1-5+deb9u2

Open the chart page →

10,682
monocularjenkins-x0.6.41 of 4See more

monocular jenkins-x 0.6.4

1 of the 4 container images this version deploys carry CVE-2017-1000257.

Container imageDigestPackageFixed in
migmartri/prerender:latest486aacfd5aa9
curl@7.38.0-4+deb8u5
7.38.0-4+deb8u7

Open the chart page →

4,614
oauth2-proxyjenkins-x0.2.31 of 1See more

oauth2-proxy jenkins-x 0.2.3

1 of the 1 container images this version deploys carry CVE-2017-1000257.

Container imageDigestPackageFixed in
a5huynh/oauth2_proxy:2.20c7307d31ca8
curl@7.38.0-4+deb8u5
7.38.0-4+deb8u7

Open the chart page →

2,392
dexmesosphere-stable2.14.11 of 5See more

dex mesosphere-stable 2.14.1

1 of the 5 container images this version deploys carry CVE-2017-1000257.

Container imageDigestPackageFixed in
gcr.io/google_containers/kubernetes-dashboard-init-amd64:v1.0.0fbe12aa24de6
curl@7.47.0-1ubuntu2.2
7.47.0-1ubuntu2.4

Open the chart page →

19,214
monocularmonocular1.4.151 of 5See more

monocular monocular 1.4.15

1 of the 5 container images this version deploys carry CVE-2017-1000257.

Container imageDigestPackageFixed in
migmartri/prerender:latest486aacfd5aa9
curl@7.38.0-4+deb8u5
7.38.0-4+deb8u7

Open the chart page →

7,048
polyglotncsaVerified publisher0.1.11 of 18See more

polyglot ncsa 0.1.1

1 of the 18 container images this version deploys carry CVE-2017-1000257.

Container imageDigestPackageFixed in
ncsapolyglot/converters-openjpeg:latest2ba4af461d51
curl@7.38.0-4+deb8u5
7.38.0-4+deb8u7

Open the chart page →

55,726
zookeeper-helm-chartnotesprojectchart0.1.01 of 1See more

zookeeper-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2017-1000257.

Container imageDigestPackageFixed in
wurstmeister/zookeeper:latest7a7fd44a7210
curl@7.35.0-1ubuntu2.1
7.35.0-1ubuntu2.12

Open the chart page →

41,427
standard-applicationthebitgram1.0.121 of 1See more

standard-application thebitgram 1.0.12

1 of the 1 container images this version deploys carry CVE-2017-1000257.

Container imageDigestPackageFixed in
gcr.io/google_containers/echoserver:1.10cb5c1bddd1b5
curl@7.47.0-1ubuntu2.2
7.47.0-1ubuntu2.4

Open the chart page →

11,007
voteappvoting-app-helm-charts-repoVerified publisher1.0.01 of 5See more

voteapp voting-app-helm-charts-repo 1.0.0

1 of the 5 container images this version deploys carry CVE-2017-1000257.

Container imageDigestPackageFixed in
kodekloud/examplevotingapp_worker:v1741e3aaaa812
curl@7.52.1-5+deb9u1
7.52.1-5+deb9u2

Open the chart page →

8,262
workerappvoting-app-helm-charts-repoVerified publisher1.0.01 of 1See more

workerapp voting-app-helm-charts-repo 1.0.0

1 of the 1 container images this version deploys carry CVE-2017-1000257.

Container imageDigestPackageFixed in
kodekloud/examplevotingapp_worker:v1741e3aaaa812
curl@7.52.1-5+deb9u1
7.52.1-5+deb9u2

Open the chart page →

3,329
voteappvoting-app-helm-charts-repo-cloudVerified publisher1.0.01 of 5See more

voteapp voting-app-helm-charts-repo-cloud 1.0.0

1 of the 5 container images this version deploys carry CVE-2017-1000257.

Container imageDigestPackageFixed in
kodekloud/examplevotingapp_worker:v1741e3aaaa812
curl@7.52.1-5+deb9u1
7.52.1-5+deb9u2

Open the chart page →

8,262
workerappvoting-app-helm-charts-repo-cloudVerified publisher1.0.01 of 1See more

workerapp voting-app-helm-charts-repo-cloud 1.0.0

1 of the 1 container images this version deploys carry CVE-2017-1000257.

Container imageDigestPackageFixed in
kodekloud/examplevotingapp_worker:v1741e3aaaa812
curl@7.52.1-5+deb9u1
7.52.1-5+deb9u2

Open the chart page →

3,329

Container images carrying it

26 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
kodekloud/examplevotingapp_worker:v1741e3aaaa812
curl@7.52.1-5+deb9u1
7.52.1-5+deb9u2
4
osixia/phpldapadmin:0.7.11ab629698ae0
curl@7.52.1-5
7.52.1-5+deb9u2
4
danisla/hadoop:2.9.0255ba2dd739b
curl@7.38.0-4+deb8u5
7.38.0-4+deb8u7
2
migmartri/prerender:latest486aacfd5aa9
curl@7.38.0-4+deb8u5
7.38.0-4+deb8u7
2
wurstmeister/zookeeper:latest7a7fd44a7210
curl@7.35.0-1ubuntu2.1
7.35.0-1ubuntu2.12
2
gcr.io/google_containers/kubernetes-dashboard-init-amd64:v1.0.0fbe12aa24de6
curl@7.47.0-1ubuntu2.2
7.47.0-1ubuntu2.4
2
a5huynh/oauth2_proxy:2.20c7307d31ca8
curl@7.38.0-4+deb8u5
7.38.0-4+deb8u7
1
apacherocketmq/rocketmq-dashboard:1.0.024799aff6cf8
curl@7.38.0-4+deb8u5
7.38.0-4+deb8u7
1
buoyantio/linkerd:1.1.2f4048edaca6f
curl@7.38.0-4+deb8u5
7.38.0-4+deb8u7
1
camptocamp/imap-mailbox-exporter:latest9dec019e4c62
curl@7.38.0-4+deb8u5
7.38.0-4+deb8u7
1
camptocamp/ldap-search-exporter:latest5e55370dd292
curl@7.38.0-4+deb8u5
7.38.0-4+deb8u7
1
codylundquist/helm-rethinkdb-cluster:0.1.0630ab586b8c1
curl@7.38.0-4+deb8u5
7.38.0-4+deb8u7
1
hickey/puppet_forge:1.10.0c1148a09ef20
curl@7.38.0-4+deb8u6
7.38.0-4+deb8u7
1
jenkinsci/jenkins:2.67a1f33f004659
curl@7.52.1-5
7.52.1-5+deb9u2
1
library/percona:5.7.17d5d7f368de4a
curl@7.38.0-4+deb8u5
7.38.0-4+deb8u7
1
ncsapolyglot/converters-openjpeg:latest2ba4af461d51
curl@7.38.0-4+deb8u5
7.38.0-4+deb8u7
1
osixia/phpldapadmin:0.7.058cce1b08592
curl@7.52.1-5
7.52.1-5+deb9u2
1
percona/percona-xtradb-cluster:5.7.19eaa3fcb7a5a2
curl@7.38.0-4+deb8u6
7.38.0-4+deb8u7
1
polyakov/hapi-fhir-jpaserver-example:latestdbcef69146b8
curl@7.38.0-4+deb8u4
7.38.0-4+deb8u7
1
raykrueger/riemann:0.2.14c8baf3de57bb
curl@7.52.1-5+deb9u1
7.52.1-5+deb9u2
1
resouer/redis-slave:v2e2f198b49ba7
curl@7.35.0-1ubuntu2.3
7.35.0-1ubuntu2.12
1
richardchesterwood/k8s-fleetman-position-simulator:release20b540a28f5a6
curl@7.52.1-5
7.52.1-5+deb9u2
1
richardchesterwood/k8s-fleetman-position-tracker:release336c43961214c
curl@7.52.1-5
7.52.1-5+deb9u2
1
weaveworks/watch:master-5b2a6e5bb113953e19f
curl@7.51.0-r0
7.55.0-r2
1
gcr.io/google-containers/echoserver:1.910f4dbc8eeeb
curl@7.47.0-1ubuntu2.2
7.47.0-1ubuntu2.4
1
gcr.io/google_containers/echoserver:1.10cb5c1bddd1b5
curl@7.47.0-1ubuntu2.2
7.47.0-1ubuntu2.4
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.