CVE-2017-16997
HighAdvisory
Published 17 Dec 2017In the index since 6 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 7.8
- base score, highest
- EPSS
- 0.027
- 85th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 22
- of 17,781 indexed, latest versions
- Container images
- 16
- deployed by those charts
- Fix available
- 2 of 2
- affected packages
The matching OSV records carry no description.
Carried by container images the latest versions of 22 of 17,781 indexed charts deploy, on 16 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| glibcdeb | 2.23-0ubuntu5, 2.23-0ubuntu7, 2.23-0ubuntu9 | 2.23-0ubuntu10 | 13 |
| eglibcdeb | 2.19-0ubuntu6.3, 2.19-0ubuntu6.6, 2.19-0ubuntu6.13 | 2.19-0ubuntu6.14 | 3 |
- OSV records
- UBUNTU-CVE-2017-16997
- Also known as
- USN-3534-1
Charts affected
22 by stars
Container images carrying it
16 by charts deploying them
A fixed version is listed for 2 of the 2 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| oomk8s/ | 7daa08b81954 | glibc | 2.23-0ubuntu10 | 6 |
| wurstmeister/ | 7a7fd44a7210 | eglibc | 2.19-0ubuntu6.14 | 2 |
| gcr.io/ | fbe12aa24de6 | glibc | 2.23-0ubuntu10 | 2 |
| citizenstig/ | b81c818ccb86 | glibc | 2.23-0ubuntu10 | 1 |
| ethereumex/ | a7603aa8df4c | glibc | 2.23-0ubuntu10 | 1 |
| ibmcom/ | e17bdccc5030 | glibc | 2.23-0ubuntu10 | 1 |
| muluder/ | 43b597a93da7 | glibc | 2.23-0ubuntu10 | 1 |
| omecproject/ | 5715e5648aa0 | glibc | 2.23-0ubuntu10 | 1 |
| oomk8s/ | 3adf3d21ad3b | glibc | 2.23-0ubuntu10 | 1 |
| pposkrobko/ | eaf260341dba | glibc | 2.23-0ubuntu10 | 1 |
| resouer/ | e2f198b49ba7 | eglibc | 2.19-0ubuntu6.14 | 1 |
| timothyclarke/ | 22c41e5ca7e2 | glibc | 2.23-0ubuntu10 | 1 |
| tpdock/ | 3da600c95a49 | glibc | 2.23-0ubuntu10 | 1 |
| voltha/ | 59ab2a00f712 | eglibc | 2.19-0ubuntu6.14 | 1 |
| gcr.io/ | 10f4dbc8eeeb | glibc | 2.23-0ubuntu10 | 1 |
| gcr.io/ | cb5c1bddd1b5 | glibc | 2.23-0ubuntu10 | 1 |