CVE-2018-0495
MediumAdvisory
Published 13 Jun 2018In the index since 6 Sept 2026
- Severity
- Medium
- worst across findings
- CVSS
- 4.7
- base score, highest
- EPSS
- 0.009
- 57th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 177
- of 17,781 indexed, latest versions
- Container images
- 133
- deployed by those charts
- Fix available
- 6 of 6
- affected packages
libgcrypt20 - security update
Carried by container images the latest versions of 177 of 17,781 indexed charts deploy, on 133 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| libgcrypt20deb | 1.6.3-2+deb8u1, 1.6.3-2+deb8u2, 1.6.3-2+deb8u3, 1.6.3-2+deb8u4+6 more | 1.6.3-2+deb8u5, 1.6.5-2ubuntu0.5, 1.7.6-2+deb9u3, 1.8.1-4ubuntu1.1 | 96 |
| libresslapk | 2.6.3-r0 | 2.6.5-r0 | 29 |
| openssldeb | 1.0.1f-1ubuntu2.5, 1.0.1f-1ubuntu2.8, 1.0.1f-1ubuntu2.22, 1.0.1f-1ubuntu2.25+6 more | 1.0.1f-1ubuntu2.26, 1.0.2g-1ubuntu4.13 | 22 |
| nssdeb | 2:3.17.1-0ubuntu0.14.04.1, 2:3.28.4-0ubuntu0.14.04.3, 2:3.28.4-0ubuntu0.16.04.3 | 2:3.28.4-0ubuntu0.14.04.4, 2:3.28.4-0ubuntu0.16.04.4 | 9 |
| libgcrypt11deb | 1.5.3-2ubuntu4.1, 1.5.3-2ubuntu4.5 | 1.5.3-2ubuntu4.6 | 6 |
| libgcryptapk | 1.8.1-r0 | 1.8.3-r0 | 5 |
- OSV records
- ALPINE-CVE-2018-0495UBUNTU-CVE-2018-0495DLA-1405-1DSA-4231-1
- Also known as
- USN-3689-1, USN-3692-1, USN-3850-1
Charts affected
177 by stars
Container images carrying it
133 by charts deploying them
A fixed version is listed for 6 of the 6 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| conduction/ | d8e23f10e882 | libgcrypt20 | 1.7.6-2+deb9u3 | 1 |
| conduction/ | 583d2cd8476c | libgcrypt20 | 1.7.6-2+deb9u3 | 1 |
| conduction/ | d9b38e234de9 | libgcrypt20 | 1.7.6-2+deb9u3 | 1 |
| conduction/ | 353dc46303ac | libgcrypt20 | 1.7.6-2+deb9u3 | 1 |
| conduction/ | 08524d8327b8 | libgcrypt20 | 1.7.6-2+deb9u3 | 1 |
| conduction/ | cf163d2b95b5 | libgcrypt20 | 1.7.6-2+deb9u3 | 1 |
| conduction/ | af3e9f551ad1 | libgcrypt20 | 1.7.6-2+deb9u3 | 1 |
| datalust/ | 9c731bb207a6 | libgcrypt20 openssl | 1.6.5-2ubuntu0.5 1.0.2g-1ubuntu4.13 | 1 |
| dstacademy/ | 46487aa079b0 | libgcrypt20 | 1.7.6-2+deb9u3 | 1 |
| ethereumex/ | a7603aa8df4c | libgcrypt20 openssl | 1.6.5-2ubuntu0.5 1.0.2g-1ubuntu4.13 | 1 |
| fiware/ | 3e3ec88d59ed | libgcrypt20 | 1.6.3-2+deb8u5 | 1 |
| fourcube/ | 5091df635f7e | libressl | 2.6.5-r0 | 1 |
| galaxy/ | 0267bad550e6 | libgcrypt11 nss openssl | 1.5.3-2ubuntu4.6 2:3.28.4-0ubuntu0.14.04.4 1.0.1f-1ubuntu2.26 | 1 |
| galaxy/ | 8e577a626dfd | libgcrypt11 nss openssl | 1.5.3-2ubuntu4.6 2:3.28.4-0ubuntu0.14.04.4 1.0.1f-1ubuntu2.26 | 1 |
| google/ | 815386ebbe9a | libressl | 2.6.5-r0 | 1 |
| gopinatht/ | 632cb2e9c399 | libgcrypt20 | 1.6.5-2ubuntu0.5 | 1 |
| grafana/ | a6b37f9afdd9 | libgcrypt20 | 1.7.6-2+deb9u3 | 1 |
| graylog2/ | 8ff28c66e6c1 | libgcrypt20 | 1.6.3-2+deb8u5 | 1 |
| hickey/ | c1148a09ef20 | libgcrypt20 | 1.6.3-2+deb8u5 | 1 |
| hyperledger/ | c65891b6c237 | nss | 2:3.28.4-0ubuntu0.16.04.4 | 1 |
| ibmcom/ | 2dcde9774493 | libgcrypt20 | 1.6.3-2+deb8u5 | 1 |
| ibmcom/ | b5d8c6714dbc | libgcrypt20 openssl | 1.6.5-2ubuntu0.5 1.0.2g-1ubuntu4.13 | 1 |
| ibmcom/ | 75617f2944d1 | libressl | 2.6.5-r0 | 1 |
| ibmcom/ | e17bdccc5030 | libgcrypt20 openssl | 1.6.5-2ubuntu0.5 1.0.2g-1ubuntu4.13 | 1 |
| jenkinsci/ | a1f33f004659 | libgcrypt20 | 1.7.6-2+deb9u3 | 1 |
| jorgeacetozi/ | b851dab88101 | libgcrypt20 | 1.6.3-2+deb8u5 | 1 |
| kanisterio/ | acdcf182417b | libressl | 2.6.5-r0 | 1 |
| konradkleine/ | 181aad54ee64 | libgcrypt20 | 1.6.3-2+deb8u5 | 1 |
| library/ | 6ffe55dcc100 | libressl | 2.6.5-r0 | 1 |
| library/ | 6d7bde6a8949 | libressl | 2.6.5-r0 | 1 |
| library/ | 3e00936a4fbd | libgcrypt20 | 1.6.3-2+deb8u5 | 1 |
| library/ | 691c55aabb3c | libgcrypt20 | 1.7.6-2+deb9u3 | 1 |
| library/ | a9a5b559f882 | libgcrypt20 | 1.6.3-2+deb8u5 | 1 |
| library/ | c8f03238ca17 | libgcrypt20 | 1.6.3-2+deb8u5 | 1 |
| library/ | d5d7f368de4a | libgcrypt20 | 1.6.3-2+deb8u5 | 1 |
| library/ | 2f2b1f4d9d83 | libgcrypt20 | 1.6.3-2+deb8u5 | 1 |
| library/ | 0e773022cd65 | libgcrypt20 | 1.6.3-2+deb8u5 | 1 |
| library/ | e507029ca6a1 | libgcrypt20 | 1.6.3-2+deb8u5 | 1 |
| markbnj/ | 3f0933685982 | libressl | 2.6.5-r0 | 1 |
| muluder/ | 43b597a93da7 | libgcrypt20 openssl | 1.6.5-2ubuntu0.5 1.0.2g-1ubuntu4.13 | 1 |
| mumoshu/ | 02808a23186b | libgcrypt20 | 1.7.6-2+deb9u3 | 1 |
| ncsapolyglot/ | c44b22eb58bb | libgcrypt20 | 1.7.6-2+deb9u3 | 1 |
| ncsapolyglot/ | 2ba4af461d51 | libgcrypt20 | 1.6.3-2+deb8u5 | 1 |
| neilpeterson/ | fb47732ef36b | libgcrypt20 | 1.7.6-2+deb9u3 | 1 |
| neilpeterson/ | 3a8877032972 | libgcrypt20 | 1.7.6-2+deb9u3 | 1 |
| neilpeterson/ | 64fd8dab075f | libgcrypt20 | 1.7.6-2+deb9u3 | 1 |
| neilpeterson/ | 8b645ac1a23e | libgcrypt20 | 1.6.3-2+deb8u5 | 1 |
| neilpeterson/ | 6527b05d5d03 | libgcrypt20 | 1.6.3-2+deb8u5 | 1 |
| neilpeterson/ | f4940e84ed05 | libgcrypt20 | 1.6.3-2+deb8u5 | 1 |
| neilpeterson/ | 5859d68a6c9f | libgcrypt20 | 1.6.3-2+deb8u5 | 1 |