CVE-2018-0495
MediumAdvisory
Published 13 Jun 2018In the index since 6 Sept 2026
- Severity
- Medium
- worst across findings
- CVSS
- 4.7
- base score, highest
- EPSS
- 0.009
- 57th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 177
- of 17,781 indexed, latest versions
- Container images
- 133
- deployed by those charts
- Fix available
- 6 of 6
- affected packages
libgcrypt20 - security update
Carried by container images the latest versions of 177 of 17,781 indexed charts deploy, on 133 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| libgcrypt20deb | 1.6.3-2+deb8u1, 1.6.3-2+deb8u2, 1.6.3-2+deb8u3, 1.6.3-2+deb8u4+6 more | 1.6.3-2+deb8u5, 1.6.5-2ubuntu0.5, 1.7.6-2+deb9u3, 1.8.1-4ubuntu1.1 | 96 |
| libresslapk | 2.6.3-r0 | 2.6.5-r0 | 29 |
| openssldeb | 1.0.1f-1ubuntu2.5, 1.0.1f-1ubuntu2.8, 1.0.1f-1ubuntu2.22, 1.0.1f-1ubuntu2.25+6 more | 1.0.1f-1ubuntu2.26, 1.0.2g-1ubuntu4.13 | 22 |
| nssdeb | 2:3.17.1-0ubuntu0.14.04.1, 2:3.28.4-0ubuntu0.14.04.3, 2:3.28.4-0ubuntu0.16.04.3 | 2:3.28.4-0ubuntu0.14.04.4, 2:3.28.4-0ubuntu0.16.04.4 | 9 |
| libgcrypt11deb | 1.5.3-2ubuntu4.1, 1.5.3-2ubuntu4.5 | 1.5.3-2ubuntu4.6 | 6 |
| libgcryptapk | 1.8.1-r0 | 1.8.3-r0 | 5 |
- OSV records
- ALPINE-CVE-2018-0495UBUNTU-CVE-2018-0495DLA-1405-1DSA-4231-1
- Also known as
- USN-3689-1, USN-3692-1, USN-3850-1
Charts affected
177 by stars
Container images carrying it
133 by charts deploying them
A fixed version is listed for 6 of the 6 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| appropriate/ | c8bf5bbec639 | libressl | 2.6.5-r0 | 9 |
| marcelmay/ | 6292c0a41ffa | libressl | 2.6.5-r0 | 8 |
| library/ | 5284ba74a106 | libgcrypt20 | 1.6.3-2+deb8u5 | 7 |
| oomk8s/ | 7daa08b81954 | libgcrypt20 openssl | 1.6.5-2ubuntu0.5 1.0.2g-1ubuntu4.13 | 6 |
| spdigital/ | e916950138ee | libressl | 2.6.5-r0 | 5 |
| bde2020/ | 620267768985 | libgcrypt20 | 1.6.3-2+deb8u5 | 4 |
| cachethq/ | a61ff0f67ea7 | libgcrypt libressl | 1.8.3-r0 2.6.5-r0 | 4 |
| hyperledger/ | 4ce6f43ded2e | nss | 2:3.28.4-0ubuntu0.16.04.4 | 4 |
| kodekloud/ | 741e3aaaa812 | libgcrypt20 | 1.7.6-2+deb9u3 | 4 |
| library/ | 6216f64ab88f | libgcrypt20 | 1.6.3-2+deb8u5 | 4 |
| osixia/ | 1ab629698ae0 | libgcrypt20 | 1.7.6-2+deb9u3 | 4 |
| mautic/ | a954c5868d76 | libgcrypt20 | 1.6.3-2+deb8u5 | 3 |
| subfuzion/ | 7e808e84a631 | libressl | 2.6.5-r0 | 3 |
| banzaicloud/ | 0e9c12290509 | libressl | 2.6.5-r0 | 2 |
| danisla/ | 255ba2dd739b | libgcrypt20 | 1.6.3-2+deb8u5 | 2 |
| gitea/ | 146196cbc344 | libressl | 2.6.5-r0 | 2 |
| gradiant/ | aae4f8a21f8b | libgcrypt20 | 1.6.3-2+deb8u5 | 2 |
| jfindley/ | 8dbae22f4fe7 | libgcrypt20 | 1.6.3-2+deb8u5 | 2 |
| library/ | d969194a7c4d | libgcrypt20 | 1.6.3-2+deb8u5 | 2 |
| library/ | b1d09e971889 | libgcrypt20 | 1.7.6-2+deb9u3 | 2 |
| library/ | b06cdddba62f | libgcrypt libressl | 1.8.3-r0 2.6.5-r0 | 2 |
| migmartri/ | 486aacfd5aa9 | libgcrypt20 | 1.6.3-2+deb8u5 | 2 |
| negz/ | 5fce210b3a81 | libressl | 2.6.5-r0 | 2 |
| neilpeterson/ | 84062718347c | libgcrypt20 | 1.7.6-2+deb9u3 | 2 |
| ngick8stesting/ | 1e764eab77b4 | libgcrypt20 | 1.8.1-4ubuntu1.1 | 2 |
| spoonest/ | fd2b754a5d37 | libgcrypt20 | 1.6.3-2+deb8u5 | 2 |
| weaveworks/ | 2887407cb701 | libressl | 2.6.5-r0 | 2 |
| wurstmeister/ | 7a7fd44a7210 | libgcrypt11 nss openssl | 1.5.3-2ubuntu4.6 2:3.28.4-0ubuntu0.14.04.4 1.0.1f-1ubuntu2.26 | 2 |
| gcr.io/ | fbe12aa24de6 | libgcrypt20 openssl | 1.6.5-2ubuntu0.5 1.0.2g-1ubuntu4.13 | 2 |
| a5huynh/ | 0c7307d31ca8 | libgcrypt20 | 1.6.3-2+deb8u5 | 1 |
| alpine/ | e996738d3921 | libressl | 2.6.5-r0 | 1 |
| apacherocketmq/ | 24799aff6cf8 | libgcrypt20 | 1.6.3-2+deb8u5 | 1 |
| astefanutti/ | 4ccf515e61eb | libgcrypt libressl | 1.8.3-r0 2.6.5-r0 | 1 |
| billimek/ | 801bba1228ac | libgcrypt20 | 1.6.3-2+deb8u5 | 1 |
| billimek/ | 5814f0bcf5ba | libressl | 2.6.5-r0 | 1 |
| billimek/ | bf8158556035 | libgcrypt20 | 1.6.3-2+deb8u5 | 1 |
| bivas/ | 05545994f806 | libgcrypt20 | 1.7.6-2+deb9u3 | 1 |
| boostport/ | f7d2b92ee617 | libressl | 2.6.5-r0 | 1 |
| bryanalves/ | 95f73dce8b21 | libgcrypt20 | 1.7.6-2+deb9u3 | 1 |
| buoyantio/ | f4048edaca6f | libgcrypt20 | 1.6.3-2+deb8u5 | 1 |
| camptocamp/ | 9dec019e4c62 | libgcrypt20 | 1.6.3-2+deb8u5 | 1 |
| camptocamp/ | 5e55370dd292 | libgcrypt20 | 1.6.3-2+deb8u5 | 1 |
| camptocamp/ | 073be594d145 | libgcrypt20 | 1.6.3-2+deb8u5 | 1 |
| cheyang/ | 46cc34755493 | libgcrypt20 nss openssl | 1.6.5-2ubuntu0.5 2:3.28.4-0ubuntu0.16.04.4 1.0.2g-1ubuntu4.13 | 1 |
| citizenstig/ | b81c818ccb86 | libgcrypt20 openssl | 1.6.5-2ubuntu0.5 1.0.2g-1ubuntu4.13 | 1 |
| cloudve/ | f07f843f82e8 | libgcrypt libressl | 1.8.3-r0 2.6.5-r0 | 1 |
| codylundquist/ | 630ab586b8c1 | libgcrypt20 | 1.6.3-2+deb8u5 | 1 |
| conduction/ | e1c176458aaf | libgcrypt20 | 1.7.6-2+deb9u3 | 1 |
| conduction/ | 9e24264ea8f3 | libgcrypt20 | 1.7.6-2+deb9u3 | 1 |
| conduction/ | d3577ddd5c67 | libgcrypt20 | 1.7.6-2+deb9u3 | 1 |