StackRadar

CVE-2018-1000035

High

Advisory

Published 9 Feb 2018In the index since 6 Sept 2026
Severity
High
worst across findings
CVSS
7.8
base score, highest
EPSS
0.300
98th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
34
of 17,781 indexed, latest versions
Container images
28
deployed by those charts
Fix available
1 of 1
affected package

unzip - security update

Carried by container images the latest versions of 34 of 17,781 indexed charts deploy, on 28 images.

Affected packageAffected versionsFixed inImages
unzipdeb6.0-9ubuntu1, 6.0-9ubuntu1.3, 6.0-16+deb8u2, 6.0-16+deb8u3+2 more6.0-9ubuntu1.6, 6.0-16+deb8u6, 6.0-20ubuntu1.1, 6.0-21ubuntu1.128
OSV records
UBUNTU-CVE-2018-1000035DLA-2082-1
Also known as
USN-4672-1

Charts affected

34 by stars
ChartLatestAffected imagesRadar Score
rocketmqgin1.1.01 of 2See more

rocketmq gin 1.1.0

1 of the 2 container images this version deploys carry CVE-2018-1000035.

Container imageDigestPackageFixed in
apacherocketmq/rocketmq-dashboard:1.0.024799aff6cf8
unzip@6.0-16+deb8u2
6.0-16+deb8u6

Open the chart page →

9,154
dltbrokerassist-iot-distributed-broker0.2.02 of 9See more

dltbroker assist-iot-distributed-broker 0.2.0

2 of the 9 container images this version deploys carry CVE-2018-1000035.

Container imageDigestPackageFixed in
hyperledger/fabric-ca-tools:latest4ce6f43ded2e
unzip@6.0-20ubuntu1
6.0-20ubuntu1.1
hyperledger/fabric-couchdb:0.4.15f6c724592abf
unzip@6.0-20ubuntu1
6.0-20ubuntu1.1

Open the chart page →

77,706
dltloggingassist-iot-logging-auditing0.2.02 of 9See more

dltlogging assist-iot-logging-auditing 0.2.0

2 of the 9 container images this version deploys carry CVE-2018-1000035.

Container imageDigestPackageFixed in
hyperledger/fabric-ca-tools:latest4ce6f43ded2e
unzip@6.0-20ubuntu1
6.0-20ubuntu1.1
hyperledger/fabric-couchdb:0.4.15f6c724592abf
unzip@6.0-20ubuntu1
6.0-20ubuntu1.1

Open the chart page →

77,687
hadoopcloudnativeapp1.1.01 of 1See more

hadoop cloudnativeapp 1.1.0

1 of the 1 container images this version deploys carry CVE-2018-1000035.

Container imageDigestPackageFixed in
danisla/hadoop:2.9.0255ba2dd739b
unzip@6.0-16+deb8u2
6.0-16+deb8u6

Open the chart page →

5,772
tensorflow-notebookcloudnativeapp0.1.21 of 1See more

tensorflow-notebook cloudnativeapp 0.1.2

1 of the 1 container images this version deploys carry CVE-2018-1000035.

Container imageDigestPackageFixed in
tensorflow/tensorflow:1.6.0-devel1e3172090703
unzip@6.0-20ubuntu1
6.0-20ubuntu1.1

Open the chart page →

36,094
hadoopmiuler1.2.21 of 1See more

hadoop miuler 1.2.2

1 of the 1 container images this version deploys carry CVE-2018-1000035.

Container imageDigestPackageFixed in
danisla/hadoop:2.9.0255ba2dd739b
unzip@6.0-16+deb8u2
6.0-16+deb8u6

Open the chart page →

5,772
graylogt3n1.0.01 of 3See more

graylog t3n 1.0.0

1 of the 3 container images this version deploys carry CVE-2018-1000035.

Container imageDigestPackageFixed in
graylog2/server:2.4.3-38ff28c66e6c1
unzip@6.0-16+deb8u3
6.0-16+deb8u6

Open the chart page →

8,063
kafka-devwikimedia0.2.01 of 1See more

kafka-dev wikimedia 0.2.0

1 of the 1 container images this version deploys carry CVE-2018-1000035.

Container imageDigestPackageFixed in
wurstmeister/zookeeper:latest7a7fd44a7210
unzip@6.0-9ubuntu1
6.0-9ubuntu1.6

Open the chart page →

41,427
dltkvassist-iot-data-integrity-verification0.2.02 of 9See more

dltkv assist-iot-data-integrity-verification 0.2.0

2 of the 9 container images this version deploys carry CVE-2018-1000035.

Container imageDigestPackageFixed in
hyperledger/fabric-ca-tools:latest4ce6f43ded2e
unzip@6.0-20ubuntu1
6.0-20ubuntu1.1
hyperledger/fabric-couchdb:0.4.15f6c724592abf
unzip@6.0-20ubuntu1
6.0-20ubuntu1.1

Open the chart page →

77,706
dltflassist-iot-dlt-based-fl0.2.02 of 9See more

dltfl assist-iot-dlt-based-fl 0.2.0

2 of the 9 container images this version deploys carry CVE-2018-1000035.

Container imageDigestPackageFixed in
hyperledger/fabric-ca-tools:latest4ce6f43ded2e
unzip@6.0-20ubuntu1
6.0-20ubuntu1.1
hyperledger/fabric-couchdb:0.4.15f6c724592abf
unzip@6.0-20ubuntu1
6.0-20ubuntu1.1

Open the chart page →

77,706
cosbenchcloudnativeapp1.0.11 of 1See more

cosbench cloudnativeapp 1.0.1

1 of the 1 container images this version deploys carry CVE-2018-1000035.

Container imageDigestPackageFixed in
zenko/zenko-cosbench:0.0.6386a1f48ec0e
unzip@6.0-16+deb8u2
6.0-16+deb8u6

Open the chart page →

4,906
distributed-tensorflowcloudnativeapp0.1.11 of 1See more

distributed-tensorflow cloudnativeapp 0.1.1

1 of the 1 container images this version deploys carry CVE-2018-1000035.

Container imageDigestPackageFixed in
cheyang/distributed-tf:1.6.046cc34755493
unzip@6.0-20ubuntu1
6.0-20ubuntu1.1

Open the chart page →

36,094
guestbookcloudnativeapp0.2.01 of 3See more

guestbook cloudnativeapp 0.2.0

1 of the 3 container images this version deploys carry CVE-2018-1000035.

Container imageDigestPackageFixed in
resouer/redis-slave:v2e2f198b49ba7
unzip@6.0-9ubuntu1.3
6.0-9ubuntu1.6

Open the chart page →

36,839
hlf-couchdbcloudnativeapp1.0.61 of 1See more

hlf-couchdb cloudnativeapp 1.0.6

1 of the 1 container images this version deploys carry CVE-2018-1000035.

Container imageDigestPackageFixed in
hyperledger/fabric-couchdb:0.4.10c65891b6c237
unzip@6.0-20ubuntu1
6.0-20ubuntu1.1

Open the chart page →

33,963
linkerdcloudnativeapp0.4.11 of 2See more

linkerd cloudnativeapp 0.4.1

1 of the 2 container images this version deploys carry CVE-2018-1000035.

Container imageDigestPackageFixed in
buoyantio/linkerd:1.1.2f4048edaca6f
unzip@6.0-16+deb8u3
6.0-16+deb8u6

Open the chart page →

1,419
webpagetest-servercloudnativeapp0.2.11 of 1See more

webpagetest-server cloudnativeapp 0.2.1

1 of the 1 container images this version deploys carry CVE-2018-1000035.

Container imageDigestPackageFixed in
timothyclarke/wptserver:2018-03-0840a80ced8031
unzip@6.0-16+deb8u3
6.0-16+deb8u6

Open the chart page →

3,716
datacubedatacube-charts0.18.21 of 1See more

datacube datacube-charts 0.18.2

1 of the 1 container images this version deploys carry CVE-2018-1000035.

Container imageDigestPackageFixed in
opendatacube/wms:latest1b90cdf68831
unzip@6.0-21ubuntu1
6.0-21ubuntu1.1

Open the chart page →

27,728
mauticdevtron0.1.31 of 3See more

mautic devtron 0.1.3

1 of the 3 container images this version deploys carry CVE-2018-1000035.

Container imageDigestPackageFixed in
mautic/mautic:2.13-apachea954c5868d76
unzip@6.0-16+deb8u3
6.0-16+deb8u6

Open the chart page →

2,939
mauticdevtron-labs0.1.31 of 3See more

mautic devtron-labs 0.1.3

1 of the 3 container images this version deploys carry CVE-2018-1000035.

Container imageDigestPackageFixed in
mautic/mautic:2.13-apachea954c5868d76
unzip@6.0-16+deb8u3
6.0-16+deb8u6

Open the chart page →

2,939
teedygeek-cookbookVerified publisher6.2.01 of 1See more

teedy geek-cookbook 6.2.0

1 of the 1 container images this version deploys carry CVE-2018-1000035.

Container imageDigestPackageFixed in
sismics/docs:v1.10f4b0ef019cf1
unzip@6.0-21ubuntu1
6.0-21ubuntu1.1

Open the chart page →

26,944
hapi-fhirhapi-fhirVerified publisher0.1.01 of 1See more

hapi-fhir hapi-fhir 0.1.0

1 of the 1 container images this version deploys carry CVE-2018-1000035.

Container imageDigestPackageFixed in
polyakov/hapi-fhir-jpaserver-example:latestdbcef69146b8
unzip@6.0-16+deb8u2
6.0-16+deb8u6

Open the chart page →

6,362
ibm-ws-dyn-agent-devibm-charts1.0.01 of 1See more

ibm-ws-dyn-agent-dev ibm-charts 1.0.0

1 of the 1 container images this version deploys carry CVE-2018-1000035.

Container imageDigestPackageFixed in
ibmcom/ibm-workload-scheduler-agent-dynamic-dev:9.4.0.047e4dc1e27cdf
unzip@6.0-20ubuntu1
6.0-20ubuntu1.1

Open the chart page →

19,295
monocularjenkins-x0.6.41 of 4See more

monocular jenkins-x 0.6.4

1 of the 4 container images this version deploys carry CVE-2018-1000035.

Container imageDigestPackageFixed in
migmartri/prerender:latest486aacfd5aa9
unzip@6.0-16+deb8u2
6.0-16+deb8u6

Open the chart page →

4,614
ladeitladeit0.4.01 of 2See more

ladeit ladeit 0.4.0

1 of the 2 container images this version deploys carry CVE-2018-1000035.

Container imageDigestPackageFixed in
kubeoperator/webkubectl:v2.4.0be8f0d624640
unzip@6.0-21ubuntu1
6.0-21ubuntu1.1

Open the chart page →

26,356
monocularmonocular1.4.151 of 5See more

monocular monocular 1.4.15

1 of the 5 container images this version deploys carry CVE-2018-1000035.

Container imageDigestPackageFixed in
migmartri/prerender:latest486aacfd5aa9
unzip@6.0-16+deb8u2
6.0-16+deb8u6

Open the chart page →

7,048
polyglotncsaVerified publisher0.1.11 of 18See more

polyglot ncsa 0.1.1

1 of the 18 container images this version deploys carry CVE-2018-1000035.

Container imageDigestPackageFixed in
ncsapolyglot/converters-openjpeg:latest2ba4af461d51
unzip@6.0-16+deb8u3
6.0-16+deb8u6

Open the chart page →

55,726
zookeeper-helm-chartnotesprojectchart0.1.01 of 1See more

zookeeper-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2018-1000035.

Container imageDigestPackageFixed in
wurstmeister/zookeeper:latest7a7fd44a7210
unzip@6.0-9ubuntu1
6.0-9ubuntu1.6

Open the chart page →

41,427
cdn-remoteopencord0.2.41 of 3See more

cdn-remote opencord 0.2.4

1 of the 3 container images this version deploys carry CVE-2018-1000035.

Container imageDigestPackageFixed in
omecproject/cdn-antmedia:1.0.0b4ae7d0d6b74
unzip@6.0-21ubuntu1
6.0-21ubuntu1.1

Open the chart page →

63,223
comacopencord1.0.01 of 9See more

comac opencord 1.0.0

1 of the 9 container images this version deploys carry CVE-2018-1000035.

Container imageDigestPackageFixed in
omecproject/onos-progran:1.0.05715e5648aa0
unzip@6.0-20ubuntu1
6.0-20ubuntu1.1

Open the chart page →

88,546
onos-progranopencord1.2.71 of 2See more

onos-progran opencord 1.2.7

1 of the 2 container images this version deploys carry CVE-2018-1000035.

Container imageDigestPackageFixed in
muluder/prograncontrollermcord:0.1.843b597a93da7
unzip@6.0-20ubuntu1
6.0-20ubuntu1.1

Open the chart page →

38,865
openwhiskopenwhisk1.0.01 of 10See more

openwhisk openwhisk 1.0.0

1 of the 10 container images this version deploys carry CVE-2018-1000035.

Container imageDigestPackageFixed in
openwhisk/ow-utils:1.0.0c80dba0de3aa
unzip@6.0-21ubuntu1
6.0-21ubuntu1.1

Open the chart page →

36,215
bookinforgnu1.0.03 of 7See more

bookinfo rgnu 1.0.0

3 of the 7 container images this version deploys carry CVE-2018-1000035.

Container imageDigestPackageFixed in
istio/examples-bookinfo-reviews-v1:1.14.0ee156b8aefd6
unzip@6.0-20ubuntu1
6.0-20ubuntu1.1
istio/examples-bookinfo-reviews-v2:1.14.0eab80bcd2132
unzip@6.0-20ubuntu1
6.0-20ubuntu1.1
istio/examples-bookinfo-reviews-v3:1.14.01e37fca43550
unzip@6.0-20ubuntu1
6.0-20ubuntu1.1

Open the chart page →

20,462
istio-bookinforgnu1.0.23 of 7See more

istio-bookinfo rgnu 1.0.2

3 of the 7 container images this version deploys carry CVE-2018-1000035.

Container imageDigestPackageFixed in
istio/examples-bookinfo-reviews-v1:1.14.0ee156b8aefd6
unzip@6.0-20ubuntu1
6.0-20ubuntu1.1
istio/examples-bookinfo-reviews-v2:1.14.0eab80bcd2132
unzip@6.0-20ubuntu1
6.0-20ubuntu1.1
istio/examples-bookinfo-reviews-v3:1.14.01e37fca43550
unzip@6.0-20ubuntu1
6.0-20ubuntu1.1

Open the chart page →

20,462
mauticromholdings0.1.31 of 3See more

mautic romholdings 0.1.3

1 of the 3 container images this version deploys carry CVE-2018-1000035.

Container imageDigestPackageFixed in
mautic/mautic:2.13-apachea954c5868d76
unzip@6.0-16+deb8u3
6.0-16+deb8u6

Open the chart page →

2,939

Container images carrying it

28 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
hyperledger/fabric-ca-tools:latest4ce6f43ded2e
unzip@6.0-20ubuntu1
6.0-20ubuntu1.1
4
hyperledger/fabric-couchdb:0.4.15f6c724592abf
unzip@6.0-20ubuntu1
6.0-20ubuntu1.1
4
mautic/mautic:2.13-apachea954c5868d76
unzip@6.0-16+deb8u3
6.0-16+deb8u6
3
danisla/hadoop:2.9.0255ba2dd739b
unzip@6.0-16+deb8u2
6.0-16+deb8u6
2
istio/examples-bookinfo-reviews-v1:1.14.0ee156b8aefd6
unzip@6.0-20ubuntu1
6.0-20ubuntu1.1
2
istio/examples-bookinfo-reviews-v2:1.14.0eab80bcd2132
unzip@6.0-20ubuntu1
6.0-20ubuntu1.1
2
istio/examples-bookinfo-reviews-v3:1.14.01e37fca43550
unzip@6.0-20ubuntu1
6.0-20ubuntu1.1
2
migmartri/prerender:latest486aacfd5aa9
unzip@6.0-16+deb8u2
6.0-16+deb8u6
2
wurstmeister/zookeeper:latest7a7fd44a7210
unzip@6.0-9ubuntu1
6.0-9ubuntu1.6
2
apacherocketmq/rocketmq-dashboard:1.0.024799aff6cf8
unzip@6.0-16+deb8u2
6.0-16+deb8u6
1
buoyantio/linkerd:1.1.2f4048edaca6f
unzip@6.0-16+deb8u3
6.0-16+deb8u6
1
cheyang/distributed-tf:1.6.046cc34755493
unzip@6.0-20ubuntu1
6.0-20ubuntu1.1
1
graylog2/server:2.4.3-38ff28c66e6c1
unzip@6.0-16+deb8u3
6.0-16+deb8u6
1
hyperledger/fabric-couchdb:0.4.10c65891b6c237
unzip@6.0-20ubuntu1
6.0-20ubuntu1.1
1
ibmcom/ibm-workload-scheduler-agent-dynamic-dev:9.4.0.047e4dc1e27cdf
unzip@6.0-20ubuntu1
6.0-20ubuntu1.1
1
kubeoperator/webkubectl:v2.4.0be8f0d624640
unzip@6.0-21ubuntu1
6.0-21ubuntu1.1
1
muluder/prograncontrollermcord:0.1.843b597a93da7
unzip@6.0-20ubuntu1
6.0-20ubuntu1.1
1
ncsapolyglot/converters-openjpeg:latest2ba4af461d51
unzip@6.0-16+deb8u3
6.0-16+deb8u6
1
omecproject/cdn-antmedia:1.0.0b4ae7d0d6b74
unzip@6.0-21ubuntu1
6.0-21ubuntu1.1
1
omecproject/onos-progran:1.0.05715e5648aa0
unzip@6.0-20ubuntu1
6.0-20ubuntu1.1
1
opendatacube/wms:latest1b90cdf68831
unzip@6.0-21ubuntu1
6.0-21ubuntu1.1
1
openwhisk/ow-utils:1.0.0c80dba0de3aa
unzip@6.0-21ubuntu1
6.0-21ubuntu1.1
1
polyakov/hapi-fhir-jpaserver-example:latestdbcef69146b8
unzip@6.0-16+deb8u2
6.0-16+deb8u6
1
resouer/redis-slave:v2e2f198b49ba7
unzip@6.0-9ubuntu1.3
6.0-9ubuntu1.6
1
sismics/docs:v1.10f4b0ef019cf1
unzip@6.0-21ubuntu1
6.0-21ubuntu1.1
1
tensorflow/tensorflow:1.6.0-devel1e3172090703
unzip@6.0-20ubuntu1
6.0-20ubuntu1.1
1
timothyclarke/wptserver:2018-03-0840a80ced8031
unzip@6.0-16+deb8u3
6.0-16+deb8u6
1
zenko/zenko-cosbench:0.0.6386a1f48ec0e
unzip@6.0-16+deb8u2
6.0-16+deb8u6
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.