CVE-2018-0495
MediumAdvisory
Published 13 Jun 2018In the index since 6 Sept 2026
- Severity
- Medium
- worst across findings
- CVSS
- 4.7
- base score, highest
- EPSS
- 0.009
- 57th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 177
- of 17,781 indexed, latest versions
- Container images
- 133
- deployed by those charts
- Fix available
- 6 of 6
- affected packages
libgcrypt20 - security update
Carried by container images the latest versions of 177 of 17,781 indexed charts deploy, on 133 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| libgcrypt20deb | 1.6.3-2+deb8u1, 1.6.3-2+deb8u2, 1.6.3-2+deb8u3, 1.6.3-2+deb8u4+6 more | 1.6.3-2+deb8u5, 1.6.5-2ubuntu0.5, 1.7.6-2+deb9u3, 1.8.1-4ubuntu1.1 | 96 |
| libresslapk | 2.6.3-r0 | 2.6.5-r0 | 29 |
| openssldeb | 1.0.1f-1ubuntu2.5, 1.0.1f-1ubuntu2.8, 1.0.1f-1ubuntu2.22, 1.0.1f-1ubuntu2.25+6 more | 1.0.1f-1ubuntu2.26, 1.0.2g-1ubuntu4.13 | 22 |
| nssdeb | 2:3.17.1-0ubuntu0.14.04.1, 2:3.28.4-0ubuntu0.14.04.3, 2:3.28.4-0ubuntu0.16.04.3 | 2:3.28.4-0ubuntu0.14.04.4, 2:3.28.4-0ubuntu0.16.04.4 | 9 |
| libgcrypt11deb | 1.5.3-2ubuntu4.1, 1.5.3-2ubuntu4.5 | 1.5.3-2ubuntu4.6 | 6 |
| libgcryptapk | 1.8.1-r0 | 1.8.3-r0 | 5 |
- OSV records
- ALPINE-CVE-2018-0495UBUNTU-CVE-2018-0495DLA-1405-1DSA-4231-1
- Also known as
- USN-3689-1, USN-3692-1, USN-3850-1
Charts affected
177 by stars
Container images carrying it
133 by charts deploying them
A fixed version is listed for 6 of the 6 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| neilpeterson/ | 29d229ab446e | libgcrypt20 | 1.6.3-2+deb8u5 | 1 |
| neilpeterson/ | 969af3cb8466 | libgcrypt20 | 1.6.3-2+deb8u5 | 1 |
| neilpeterson/ | 39ce9f92e899 | libgcrypt20 | 1.7.6-2+deb9u3 | 1 |
| omecproject/ | 5715e5648aa0 | libgcrypt20 openssl | 1.6.5-2ubuntu0.5 1.0.2g-1ubuntu4.13 | 1 |
| oomk8s/ | ba60171909c7 | libressl | 2.6.5-r0 | 1 |
| oomk8s/ | 3adf3d21ad3b | libgcrypt20 openssl | 1.6.5-2ubuntu0.5 1.0.2g-1ubuntu4.13 | 1 |
| opsmx11/ | 5c50ca123d88 | libgcrypt11 nss openssl | 1.5.3-2ubuntu4.6 2:3.28.4-0ubuntu0.14.04.4 1.0.1f-1ubuntu2.26 | 1 |
| osixia/ | 58cce1b08592 | libgcrypt20 | 1.7.6-2+deb9u3 | 1 |
| pcm32/ | 301fb89914ef | libgcrypt20 | 1.6.3-2+deb8u5 | 1 |
| percona/ | eaa3fcb7a5a2 | libgcrypt20 | 1.6.3-2+deb8u5 | 1 |
| polyakov/ | dbcef69146b8 | libgcrypt20 | 1.6.3-2+deb8u5 | 1 |
| pposkrobko/ | eaf260341dba | libgcrypt20 | 1.6.5-2ubuntu0.5 | 1 |
| radarbase/ | 1d2af7dd5a4e | libressl | 2.6.5-r0 | 1 |
| raykrueger/ | c8baf3de57bb | libgcrypt20 | 1.7.6-2+deb9u3 | 1 |
| resouer/ | e2f198b49ba7 | libgcrypt11 openssl | 1.5.3-2ubuntu4.6 1.0.1f-1ubuntu2.26 | 1 |
| richardchesterwood/ | 0b540a28f5a6 | libgcrypt20 | 1.7.6-2+deb9u3 | 1 |
| richardchesterwood/ | 36c43961214c | libgcrypt20 | 1.7.6-2+deb9u3 | 1 |
| richardchesterwood/ | ed7d720878ac | libgcrypt libressl | 1.8.3-r0 2.6.5-r0 | 1 |
| sismics/ | f4b0ef019cf1 | libgcrypt20 | 1.8.1-4ubuntu1.1 | 1 |
| snappydatainc/ | fd4b2070466f | libressl | 2.6.5-r0 | 1 |
| stakater/ | 5c0e01c23993 | libressl | 2.6.5-r0 | 1 |
| stakater/ | 4f8e409f30c2 | libgcrypt20 | 1.6.3-2+deb8u5 | 1 |
| tensorflow/ | 1e3172090703 | libgcrypt20 nss openssl | 1.6.5-2ubuntu0.5 2:3.28.4-0ubuntu0.16.04.4 1.0.2g-1ubuntu4.13 | 1 |
| timothyclarke/ | 22c41e5ca7e2 | libgcrypt20 nss openssl | 1.6.5-2ubuntu0.5 2:3.28.4-0ubuntu0.16.04.4 1.0.2g-1ubuntu4.13 | 1 |
| timothyclarke/ | 40a80ced8031 | libgcrypt20 | 1.6.3-2+deb8u5 | 1 |
| tpdock/ | 3da600c95a49 | libgcrypt20 openssl | 1.6.5-2ubuntu0.5 1.0.2g-1ubuntu4.13 | 1 |
| voltha/ | 59ab2a00f712 | libgcrypt11 openssl | 1.5.3-2ubuntu4.6 1.0.1f-1ubuntu2.26 | 1 |
| wiremind/ | b3d63ce7d198 | libressl | 2.6.5-r0 | 1 |
| zenko/ | 386a1f48ec0e | libgcrypt20 | 1.6.3-2+deb8u5 | 1 |
| gcr.io/ | 10f4dbc8eeeb | libgcrypt20 openssl | 1.6.5-2ubuntu0.5 1.0.2g-1ubuntu4.13 | 1 |
| gcr.io/ | cb5c1bddd1b5 | libgcrypt20 openssl | 1.6.5-2ubuntu0.5 1.0.2g-1ubuntu4.13 | 1 |
| ghcr.io/ | 41b45003c6b6 | libressl | 2.6.5-r0 | 1 |
| quay.io/ | 86b71e90319f | libgcrypt20 | 1.6.3-2+deb8u5 | 1 |