StackRadar

CVE-2018-0495

Medium

Advisory

Published 13 Jun 2018In the index since 6 Sept 2026
Severity
Medium
worst across findings
CVSS
4.7
base score, highest
EPSS
0.009
57th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
177
of 17,781 indexed, latest versions
Container images
133
deployed by those charts
Fix available
6 of 6
affected packages

libgcrypt20 - security update

Carried by container images the latest versions of 177 of 17,781 indexed charts deploy, on 133 images.

Affected packageAffected versionsFixed inImages
libgcrypt20deb1.6.3-2+deb8u1, 1.6.3-2+deb8u2, 1.6.3-2+deb8u3, 1.6.3-2+deb8u4+6 more1.6.3-2+deb8u5, 1.6.5-2ubuntu0.5, 1.7.6-2+deb9u3, 1.8.1-4ubuntu1.196
libresslapk2.6.3-r02.6.5-r029
openssldeb1.0.1f-1ubuntu2.5, 1.0.1f-1ubuntu2.8, 1.0.1f-1ubuntu2.22, 1.0.1f-1ubuntu2.25+6 more1.0.1f-1ubuntu2.26, 1.0.2g-1ubuntu4.1322
nssdeb2:3.17.1-0ubuntu0.14.04.1, 2:3.28.4-0ubuntu0.14.04.3, 2:3.28.4-0ubuntu0.16.04.32:3.28.4-0ubuntu0.14.04.4, 2:3.28.4-0ubuntu0.16.04.49
libgcrypt11deb1.5.3-2ubuntu4.1, 1.5.3-2ubuntu4.51.5.3-2ubuntu4.66
libgcryptapk1.8.1-r01.8.3-r05
OSV records
ALPINE-CVE-2018-0495UBUNTU-CVE-2018-0495DLA-1405-1DSA-4231-1
Also known as
USN-3689-1, USN-3692-1, USN-3850-1

Charts affected

177 by stars
ChartLatestAffected imagesRadar Score
httpbinrgnu1.0.01 of 1See more

httpbin rgnu 1.0.0

1 of the 1 container images this version deploys carry CVE-2018-0495.

Container imageDigestPackageFixed in
citizenstig/httpbin:latestb81c818ccb86
libgcrypt20@1.6.5-2ubuntu0.2
openssl@1.0.2g-1ubuntu4.5
1.6.5-2ubuntu0.5
1.0.2g-1ubuntu4.13

Open the chart page →

11,422
mauticromholdings0.1.31 of 3See more

mautic romholdings 0.1.3

1 of the 3 container images this version deploys carry CVE-2018-0495.

Container imageDigestPackageFixed in
mautic/mautic:2.13-apachea954c5868d76
libgcrypt20@1.6.3-2+deb8u4
1.6.3-2+deb8u5

Open the chart page →

2,939
sentry-dbsentry0.9.41 of 10See more

sentry-db sentry 0.9.4

1 of the 10 container images this version deploys carry CVE-2018-0495.

Container imageDigestPackageFixed in
spoonest/clickhouse-tabix-web-client:stablefd2b754a5d37
libgcrypt20@1.6.3-2+deb8u4
1.6.3-2+deb8u5

Open the chart page →

10,967
cachetsergiotocaliniVerified publisher1.0.01 of 1See more

cachet sergiotocalini 1.0.0

1 of the 1 container images this version deploys carry CVE-2018-0495.

Container imageDigestPackageFixed in
cachethq/docker:2.3.15a61ff0f67ea7
libgcrypt@1.8.1-r0
libressl@2.6.3-r0
1.8.3-r0
2.6.5-r0

Open the chart page →

1,896
trilliansigstoreVerified publisher0.3.171 of 5See more

trillian sigstore 0.3.17

1 of the 5 container images this version deploys carry CVE-2018-0495.

Container imageDigestPackageFixed in
subfuzion/netcatdigest-pinned7e808e84a631
libressl@2.6.3-r0
2.6.5-r0

Open the chart page →

2,808
Wordresssix0.2.01 of 2See more

Wordress six 0.2.0

1 of the 2 container images this version deploys carry CVE-2018-0495.

Container imageDigestPackageFixed in
library/wordpress:4.8-apache6216f64ab88f
libgcrypt20@1.6.3-2+deb8u4
1.6.3-2+deb8u5

Open the chart page →

1,339
consulsmo-helm-chart6.0.02 of 2See more

consul smo-helm-chart 6.0.0

2 of the 2 container images this version deploys carry CVE-2018-0495.

Container imageDigestPackageFixed in
library/consul:1.0.66ffe55dcc100
libressl@2.6.3-r0
2.6.5-r0
oomk8s/consul:1.0.0ba60171909c7
libressl@2.6.3-r0
2.6.5-r0

Open the chart page →

1,284
dgbuildersmo-helm-chart6.0.01 of 3See more

dgbuilder smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2018-0495.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.07daa08b81954
libgcrypt20@1.6.5-2ubuntu0.3
openssl@1.0.2g-1ubuntu4.10
1.6.5-2ubuntu0.5
1.0.2g-1ubuntu4.13

Open the chart page →

28,470
logsmo-helm-chart6.0.01 of 6See more

log smo-helm-chart 6.0.0

1 of the 6 container images this version deploys carry CVE-2018-0495.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.07daa08b81954
libgcrypt20@1.6.5-2ubuntu0.3
openssl@1.0.2g-1ubuntu4.10
1.6.5-2ubuntu0.5
1.0.2g-1ubuntu4.13

Open the chart page →

29,220
msbsmo-helm-chart6.0.01 of 6See more

msb smo-helm-chart 6.0.0

1 of the 6 container images this version deploys carry CVE-2018-0495.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.07daa08b81954
libgcrypt20@1.6.5-2ubuntu0.3
openssl@1.0.2g-1ubuntu4.10
1.6.5-2ubuntu0.5
1.0.2g-1ubuntu4.13

Open the chart page →

27,477
multicloudsmo-helm-chart6.0.01 of 14See more

multicloud smo-helm-chart 6.0.0

1 of the 14 container images this version deploys carry CVE-2018-0495.

Container imageDigestPackageFixed in
oomk8s/ubuntu-init:1.0.03adf3d21ad3b
libgcrypt20@1.6.5-2ubuntu0.2
openssl@1.0.2g-1ubuntu4.6
1.6.5-2ubuntu0.5
1.0.2g-1ubuntu4.13

Open the chart page →

9,436
pndasmo-helm-chart6.0.01 of 3See more

pnda smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2018-0495.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.07daa08b81954
libgcrypt20@1.6.5-2ubuntu0.3
openssl@1.0.2g-1ubuntu4.10
1.6.5-2ubuntu0.5
1.0.2g-1ubuntu4.13

Open the chart page →

27,477
pombasmo-helm-chart6.0.01 of 17See more

pomba smo-helm-chart 6.0.0

1 of the 17 container images this version deploys carry CVE-2018-0495.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.07daa08b81954
libgcrypt20@1.6.5-2ubuntu0.3
openssl@1.0.2g-1ubuntu4.10
1.6.5-2ubuntu0.5
1.0.2g-1ubuntu4.13

Open the chart page →

29,220
portalsmo-helm-chart6.0.01 of 8See more

portal smo-helm-chart 6.0.0

1 of the 8 container images this version deploys carry CVE-2018-0495.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.07daa08b81954
libgcrypt20@1.6.5-2ubuntu0.3
openssl@1.0.2g-1ubuntu4.10
1.6.5-2ubuntu0.5
1.0.2g-1ubuntu4.13

Open the chart page →

27,477
umsappstacksimplifyVerified publisher1.0.01 of 3See more

umsapp stacksimplify 1.0.0

1 of the 3 container images this version deploys carry CVE-2018-0495.

Container imageDigestPackageFixed in
ghcr.io/stacksimplify/kube-usermgmt-webapp:1.0.0-mysqldb41b45003c6b6
libressl@2.6.3-r0
2.6.5-r0

Open the chart page →

6,101
logrotatestakaterVerified publisher1.0.191 of 1See more

logrotate stakater 1.0.19

1 of the 1 container images this version deploys carry CVE-2018-0495.

Container imageDigestPackageFixed in
stakater/logrotate:3.13.05c0e01c23993
libressl@2.6.3-r0
2.6.5-r0

Open the chart page →

1,011
rabbitmqstakaterVerified publisher1.0.11 of 1See more

rabbitmq stakater 1.0.1

1 of the 1 container images this version deploys carry CVE-2018-0495.

Container imageDigestPackageFixed in
jorgeacetozi/rabbitmq-stomp:latestb851dab88101
libgcrypt20@1.6.3-2+deb8u2
1.6.3-2+deb8u5

Open the chart page →

559
restful-distributed-lock-managerstakaterVerified publisher1.0.41 of 1See more

restful-distributed-lock-manager stakater 1.0.4

1 of the 1 container images this version deploys carry CVE-2018-0495.

Container imageDigestPackageFixed in
stakater/restful-distributed-lock-manager:0.5.34f8e409f30c2
libgcrypt20@1.6.3-2+deb8u4
1.6.3-2+deb8u5

Open the chart page →

3,116
sonarqubestakaterVerified publisher0.10.31 of 2See more

sonarqube stakater 0.10.3

1 of the 2 container images this version deploys carry CVE-2018-0495.

Container imageDigestPackageFixed in
library/postgres:9.6.25284ba74a106
libgcrypt20@1.6.3-2+deb8u2
1.6.3-2+deb8u5

Open the chart page →

11,841
democharttech-challenge0.1.01 of 4See more

demochart tech-challenge 0.1.0

1 of the 4 container images this version deploys carry CVE-2018-0495.

Container imageDigestPackageFixed in
grafana/grafana:5.1.0a6b37f9afdd9
libgcrypt20@1.7.6-2+deb9u2
1.7.6-2+deb9u3

Open the chart page →

3,632
standard-applicationthebitgram1.0.121 of 1See more

standard-application thebitgram 1.0.12

1 of the 1 container images this version deploys carry CVE-2018-0495.

Container imageDigestPackageFixed in
gcr.io/google_containers/echoserver:1.10cb5c1bddd1b5
libgcrypt20@1.6.5-2ubuntu0.3
openssl@1.0.2g-1ubuntu4.8
1.6.5-2ubuntu0.5
1.0.2g-1ubuntu4.13

Open the chart page →

11,007
Wordressuvaise-wordpress0.2.01 of 2See more

Wordress uvaise-wordpress 0.2.0

1 of the 2 container images this version deploys carry CVE-2018-0495.

Container imageDigestPackageFixed in
library/wordpress:4.8-apache6216f64ab88f
libgcrypt20@1.6.3-2+deb8u4
1.6.3-2+deb8u5

Open the chart page →

1,339
voteappvoting-app-helm-charts-repoVerified publisher1.0.01 of 5See more

voteapp voting-app-helm-charts-repo 1.0.0

1 of the 5 container images this version deploys carry CVE-2018-0495.

Container imageDigestPackageFixed in
kodekloud/examplevotingapp_worker:v1741e3aaaa812
libgcrypt20@1.7.6-2+deb9u2
1.7.6-2+deb9u3

Open the chart page →

8,262
workerappvoting-app-helm-charts-repoVerified publisher1.0.01 of 1See more

workerapp voting-app-helm-charts-repo 1.0.0

1 of the 1 container images this version deploys carry CVE-2018-0495.

Container imageDigestPackageFixed in
kodekloud/examplevotingapp_worker:v1741e3aaaa812
libgcrypt20@1.7.6-2+deb9u2
1.7.6-2+deb9u3

Open the chart page →

3,329
voteappvoting-app-helm-charts-repo-cloudVerified publisher1.0.01 of 5See more

voteapp voting-app-helm-charts-repo-cloud 1.0.0

1 of the 5 container images this version deploys carry CVE-2018-0495.

Container imageDigestPackageFixed in
kodekloud/examplevotingapp_worker:v1741e3aaaa812
libgcrypt20@1.7.6-2+deb9u2
1.7.6-2+deb9u3

Open the chart page →

8,262
workerappvoting-app-helm-charts-repo-cloudVerified publisher1.0.01 of 1See more

workerapp voting-app-helm-charts-repo-cloud 1.0.0

1 of the 1 container images this version deploys carry CVE-2018-0495.

Container imageDigestPackageFixed in
kodekloud/examplevotingapp_worker:v1741e3aaaa812
libgcrypt20@1.7.6-2+deb9u2
1.7.6-2+deb9u3

Open the chart page →

3,329
Wordresswordpress0.2.01 of 2See more

Wordress wordpress 0.2.0

1 of the 2 container images this version deploys carry CVE-2018-0495.

Container imageDigestPackageFixed in
library/wordpress:4.8-apache6216f64ab88f
libgcrypt20@1.6.3-2+deb8u4
1.6.3-2+deb8u5

Open the chart page →

1,339

Container images carrying it

133 by charts deploying them

A fixed version is listed for 6 of the 6 affected packages.

Container imageDigestPackageFixed inUsed by
conduction/cgrc-nginx:devd8e23f10e882
libgcrypt20@1.7.6-2+deb9u2
1.7.6-2+deb9u3
1
conduction/checkin-component-nginx:dev583d2cd8476c
libgcrypt20@1.7.6-2+deb9u2
1.7.6-2+deb9u3
1
conduction/conduction-ui-nginx:devd9b38e234de9
libgcrypt20@1.7.6-2+deb9u2
1.7.6-2+deb9u3
1
conduction/contactmoment-component-nginx:dev353dc46303ac
libgcrypt20@1.7.6-2+deb9u2
1.7.6-2+deb9u3
1
conduction/docparser-nginx:dev08524d8327b8
libgcrypt20@1.7.6-2+deb9u2
1.7.6-2+deb9u3
1
conduction/kvk-nginx:devcf163d2b95b5
libgcrypt20@1.7.6-2+deb9u2
1.7.6-2+deb9u3
1
conduction/pan-nginx:devaf3e9f551ad1
libgcrypt20@1.7.6-2+deb9u2
1.7.6-2+deb9u3
1
datalust/seq:5.0.832-pre9c731bb207a6
libgcrypt20@1.6.5-2ubuntu0.3
openssl@1.0.2g-1ubuntu4.10
1.6.5-2ubuntu0.5
1.0.2g-1ubuntu4.13
1
dstacademy/dontstarvetogether:latest46487aa079b0
libgcrypt20@1.7.6-2+deb9u2
1.7.6-2+deb9u3
1
ethereumex/eth-stats-dashboard:v0.0.1a7603aa8df4c
libgcrypt20@1.6.5-2ubuntu0.3
openssl@1.0.2g-1ubuntu4.10
1.6.5-2ubuntu0.5
1.0.2g-1ubuntu4.13
1
fiware/bae-activation-service:v0.0.33e3ec88d59ed
libgcrypt20@1.6.3-2+deb8u4
1.6.3-2+deb8u5
1
fourcube/openiban:1.0.15091df635f7e
libressl@2.6.3-r0
2.6.5-r0
1
galaxy/galaxy-init:v18.010267bad550e6
libgcrypt11@1.5.3-2ubuntu4.5
nss@2:3.28.4-0ubuntu0.14.04.3
openssl@1.0.1f-1ubuntu2.25
1.5.3-2ubuntu4.6
2:3.28.4-0ubuntu0.14.04.4
1.0.1f-1ubuntu2.26
1
galaxy/galaxy-stable:v18.018e577a626dfd
libgcrypt11@1.5.3-2ubuntu4.5
nss@2:3.28.4-0ubuntu0.14.04.3
openssl@1.0.1f-1ubuntu2.25
1.5.3-2ubuntu4.6
2:3.28.4-0ubuntu0.14.04.4
1.0.1f-1ubuntu2.26
1
google/cadvisor:latest815386ebbe9a
libressl@2.6.3-r0
2.6.5-r0
1
gopinatht/ovs-plugin-installer:latest632cb2e9c399
libgcrypt20@1.6.5-2ubuntu0.4
1.6.5-2ubuntu0.5
1
grafana/grafana:5.1.0a6b37f9afdd9
libgcrypt20@1.7.6-2+deb9u2
1.7.6-2+deb9u3
1
graylog2/server:2.4.3-38ff28c66e6c1
libgcrypt20@1.6.3-2+deb8u4
1.6.3-2+deb8u5
1
hickey/puppet_forge:1.10.0c1148a09ef20
libgcrypt20@1.6.3-2+deb8u4
1.6.3-2+deb8u5
1
hyperledger/fabric-couchdb:0.4.10c65891b6c237
nss@2:3.28.4-0ubuntu0.16.04.3
2:3.28.4-0ubuntu0.16.04.4
1
ibmcom/galera-mariadb:10.2.142dcde9774493
libgcrypt20@1.6.3-2+deb8u4
1.6.3-2+deb8u5
1
ibmcom/icp-swift-sample:latestb5d8c6714dbc
libgcrypt20@1.6.5-2ubuntu0.4
openssl@1.0.2g-1ubuntu4.12
1.6.5-2ubuntu0.5
1.0.2g-1ubuntu4.13
1
ibmcom/microclimate-devops:latest75617f2944d1
libressl@2.6.3-r0
2.6.5-r0
1
ibmcom/microclimate-theia:lateste17bdccc5030
libgcrypt20@1.6.5-2ubuntu0.3
openssl@1.0.2g-1ubuntu4.10
1.6.5-2ubuntu0.5
1.0.2g-1ubuntu4.13
1
jenkinsci/jenkins:2.67a1f33f004659
libgcrypt20@1.7.6-2+deb9u2
1.7.6-2+deb9u3
1
jorgeacetozi/rabbitmq-stomp:latestb851dab88101
libgcrypt20@1.6.3-2+deb8u2
1.6.3-2+deb8u5
1
kanisterio/controller:0.10.0acdcf182417b
libressl@2.6.3-r0
2.6.5-r0
1
konradkleine/docker-registry-frontend:v2181aad54ee64
libgcrypt20@1.6.3-2+deb8u4
1.6.3-2+deb8u5
1
library/consul:1.0.66ffe55dcc100
libressl@2.6.3-r0
2.6.5-r0
1
library/memcached:1.5.6-alpine6d7bde6a8949
libressl@2.6.3-r0
2.6.5-r0
1
library/mongo:3.6.5-jessie3e00936a4fbd
libgcrypt20@1.6.3-2+deb8u4
1.6.3-2+deb8u5
1
library/mysql:5.7.21691c55aabb3c
libgcrypt20@1.7.6-2+deb9u2
1.7.6-2+deb9u3
1
library/mysql:5.7.13a9a5b559f882
libgcrypt20@1.6.3-2+deb8u1
1.6.3-2+deb8u5
1
library/mysql:5.7.14c8f03238ca17
libgcrypt20@1.6.3-2+deb8u1
1.6.3-2+deb8u5
1
library/percona:5.7.17d5d7f368de4a
libgcrypt20@1.6.3-2+deb8u2
1.6.3-2+deb8u5
1
library/postgres:9.6.52f2b1f4d9d83
libgcrypt20@1.6.3-2+deb8u4
1.6.3-2+deb8u5
1
library/redis:4.0.60e773022cd65
libgcrypt20@1.6.3-2+deb8u4
1.6.3-2+deb8u5
1
library/redis:2.8.23e507029ca6a1
libgcrypt20@1.6.3-2+deb8u1
1.6.3-2+deb8u5
1
markbnj/unbound-docker:0.1.03f0933685982
libressl@2.6.3-r0
2.6.5-r0
1
muluder/prograncontrollermcord:0.1.843b597a93da7
libgcrypt20@1.6.5-2ubuntu0.3
openssl@1.0.2g-1ubuntu4.10
1.6.5-2ubuntu0.5
1.0.2g-1ubuntu4.13
1
mumoshu/kube-magic-ip-assigner:0.9.0-1.9.802808a23186b
libgcrypt20@1.7.6-2+deb9u2
1.7.6-2+deb9u3
1
ncsapolyglot/converters-avconv:latestc44b22eb58bb
libgcrypt20@1.7.6-2+deb9u2
1.7.6-2+deb9u3
1
ncsapolyglot/converters-openjpeg:latest2ba4af461d51
libgcrypt20@1.6.3-2+deb8u3
1.6.3-2+deb8u5
1
neilpeterson/aks-helloworld:v1fb47732ef36b
libgcrypt20@1.7.6-2+deb9u2
1.7.6-2+deb9u3
1
neilpeterson/burst-scheduler:v1.23a8877032972
libgcrypt20@1.7.6-2+deb9u2
1.7.6-2+deb9u3
1
neilpeterson/chart-tweet:latest64fd8dab075f
libgcrypt20@1.7.6-2+deb9u2
1.7.6-2+deb9u3
1
neilpeterson/get-tweet:v28b645ac1a23e
libgcrypt20@1.6.3-2+deb8u4
1.6.3-2+deb8u5
1
neilpeterson/osba-container-instances-demo:latest6527b05d5d03
libgcrypt20@1.6.3-2+deb8u4
1.6.3-2+deb8u5
1
neilpeterson/osba-cosmos-mongodb-demo:latestf4940e84ed05
libgcrypt20@1.6.3-2+deb8u4
1.6.3-2+deb8u5
1
neilpeterson/osba-mysql-demo:latest5859d68a6c9f
libgcrypt20@1.6.3-2+deb8u4
1.6.3-2+deb8u5
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.