StackRadar

CVE-2018-1000301

Critical

Advisory

Published 16 May 2018In the index since 6 Sept 2026
Severity
Critical
worst across findings
CVSS
9.1
base score, highest
EPSS
0.060
93rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
99
of 17,781 indexed, latest versions
Container images
75
deployed by those charts
Fix available
2 of 2
affected packages

curl - security update

Carried by container images the latest versions of 99 of 17,781 indexed charts deploy, on 75 images.

Affected packageAffected versionsFixed inImages
curldeb7.35.0-1ubuntu2.1, 7.35.0-1ubuntu2.3, 7.38.0-4+deb8u4, 7.38.0-4+deb8u5+13 more7.35.0-1ubuntu2.16, 7.38.0-4+deb8u11, 7.47.0-1ubuntu2.8, 7.52.1-5+deb9u664
curlapk7.51.0-r0, 7.57.0-r0, 7.58.0-r0, 7.58.0-r1+1 more7.60.0-r011
OSV records
ALPINE-CVE-2018-1000301UBUNTU-CVE-2018-1000301DSA-4202-1
Also known as
USN-3648-1

Charts affected

99 by stars
ChartLatestAffected imagesRadar Score
mattermost-team-editionmattermostVerified publisher6.6.1061 of 4See more

mattermost-team-edition mattermost 6.6.106

1 of the 4 container images this version deploys carry CVE-2018-1000301.

Container imageDigestPackageFixed in
appropriate/curl:latestc8bf5bbec639
curl@7.59.0-r0
7.60.0-r0

Open the chart page →

1,475
fadicetic0.3.11 of 25See more

fadi cetic 0.3.1

1 of the 25 container images this version deploys carry CVE-2018-1000301.

Container imageDigestPackageFixed in
osixia/phpldapadmin:0.7.11ab629698ae0
curl@7.52.1-5
7.52.1-5+deb9u6

Open the chart page →

52,919
mattermostphntom3.24.01 of 2See more

mattermost phntom 3.24.0

1 of the 2 container images this version deploys carry CVE-2018-1000301.

Container imageDigestPackageFixed in
appropriate/curl:latestc8bf5bbec639
curl@7.59.0-r0
7.60.0-r0

Open the chart page →

8,722
dexwiremindVerified publisher2.15.71 of 2See more

dex wiremind 2.15.7

1 of the 2 container images this version deploys carry CVE-2018-1000301.

Container imageDigestPackageFixed in
gcr.io/google_containers/kubernetes-dashboard-init-amd64:v1.0.0fbe12aa24de6
curl@7.47.0-1ubuntu2.2
7.47.0-1ubuntu2.8

Open the chart page →

13,562
auto-deploy-appav1o-chartsVerified publisher0.15.41 of 1See more

auto-deploy-app av1o-charts 0.15.4

1 of the 1 container images this version deploys carry CVE-2018-1000301.

Container imageDigestPackageFixed in
gcr.io/google-containers/echoserver:1.910f4dbc8eeeb
curl@7.47.0-1ubuntu2.2
7.47.0-1ubuntu2.8

Open the chart page →

11,007
hivedmwm-bigdataVerified publisher0.1.62 of 5See more

hive dmwm-bigdata 0.1.6

2 of the 5 container images this version deploys carry CVE-2018-1000301.

Container imageDigestPackageFixed in
bde2020/hive:2.3.2-postgresql-metastore620267768985
curl@7.38.0-4+deb8u9
7.38.0-4+deb8u11
gradiant/hive:2.3.2-postgresql-metastoreaae4f8a21f8b
curl@7.38.0-4+deb8u9
7.38.0-4+deb8u11

Open the chart page →

20,837
rocketmqgin1.1.01 of 2See more

rocketmq gin 1.1.0

1 of the 2 container images this version deploys carry CVE-2018-1000301.

Container imageDigestPackageFixed in
apacherocketmq/rocketmq-dashboard:1.0.024799aff6cf8
curl@7.38.0-4+deb8u5
7.38.0-4+deb8u11

Open the chart page →

9,154
openldapalphani-helm-chartsVerified publisher2.4.571 of 2See more

openldap alphani-helm-charts 2.4.57

1 of the 2 container images this version deploys carry CVE-2018-1000301.

Container imageDigestPackageFixed in
osixia/phpldapadmin:0.7.11ab629698ae0
curl@7.52.1-5
7.52.1-5+deb9u6

Open the chart page →

3,067
phpldapadminalphani-helm-chartsVerified publisher0.1.31 of 1See more

phpldapadmin alphani-helm-charts 0.1.3

1 of the 1 container images this version deploys carry CVE-2018-1000301.

Container imageDigestPackageFixed in
osixia/phpldapadmin:0.7.11ab629698ae0
curl@7.52.1-5
7.52.1-5+deb9u6

Open the chart page →

2,559
phpldapadmincetic0.1.41 of 1See more

phpldapadmin cetic 0.1.4

1 of the 1 container images this version deploys carry CVE-2018-1000301.

Container imageDigestPackageFixed in
osixia/phpldapadmin:0.7.11ab629698ae0
curl@7.52.1-5
7.52.1-5+deb9u6

Open the chart page →

2,559
hadoopcloudnativeapp1.1.01 of 1See more

hadoop cloudnativeapp 1.1.0

1 of the 1 container images this version deploys carry CVE-2018-1000301.

Container imageDigestPackageFixed in
danisla/hadoop:2.9.0255ba2dd739b
curl@7.38.0-4+deb8u5
7.38.0-4+deb8u11

Open the chart page →

5,772
perconacloudnativeapp1.0.01 of 2See more

percona cloudnativeapp 1.0.0

1 of the 2 container images this version deploys carry CVE-2018-1000301.

Container imageDigestPackageFixed in
library/percona:5.7.17d5d7f368de4a
curl@7.38.0-4+deb8u5
7.38.0-4+deb8u11

Open the chart page →

1,011
tensorflow-notebookcloudnativeapp0.1.21 of 1See more

tensorflow-notebook cloudnativeapp 0.1.2

1 of the 1 container images this version deploys carry CVE-2018-1000301.

Container imageDigestPackageFixed in
tensorflow/tensorflow:1.6.0-devel1e3172090703
curl@7.47.0-1ubuntu2.6
7.47.0-1ubuntu2.8

Open the chart page →

36,094
hive-metastoredmwm-bigdataVerified publisher0.1.31 of 2See more

hive-metastore dmwm-bigdata 0.1.3

1 of the 2 container images this version deploys carry CVE-2018-1000301.

Container imageDigestPackageFixed in
bde2020/hive:2.3.2-postgresql-metastore620267768985
curl@7.38.0-4+deb8u9
7.38.0-4+deb8u11

Open the chart page →

6,882
mattermost-enterprise-editionmattermostVerified publisher2.6.1031 of 3See more

mattermost-enterprise-edition mattermost 2.6.103

1 of the 3 container images this version deploys carry CVE-2018-1000301.

Container imageDigestPackageFixed in
appropriate/curl:latestc8bf5bbec639
curl@7.59.0-r0
7.60.0-r0

Open the chart page →

3,600
hadoopmiuler1.2.21 of 1See more

hadoop miuler 1.2.2

1 of the 1 container images this version deploys carry CVE-2018-1000301.

Container imageDigestPackageFixed in
danisla/hadoop:2.9.0255ba2dd739b
curl@7.38.0-4+deb8u5
7.38.0-4+deb8u11

Open the chart page →

5,772
graylogt3n1.0.01 of 3See more

graylog t3n 1.0.0

1 of the 3 container images this version deploys carry CVE-2018-1000301.

Container imageDigestPackageFixed in
graylog2/server:2.4.3-38ff28c66e6c1
curl@7.38.0-4+deb8u10
7.38.0-4+deb8u11

Open the chart page →

8,063
kafka-devwikimedia0.2.01 of 1See more

kafka-dev wikimedia 0.2.0

1 of the 1 container images this version deploys carry CVE-2018-1000301.

Container imageDigestPackageFixed in
wurstmeister/zookeeper:latest7a7fd44a7210
curl@7.35.0-1ubuntu2.1
7.35.0-1ubuntu2.16

Open the chart page →

41,427
aks-helloworldazure-sample0.1.11 of 1See more

aks-helloworld azure-sample 0.1.1

1 of the 1 container images this version deploys carry CVE-2018-1000301.

Container imageDigestPackageFixed in
neilpeterson/aks-helloworld:v1fb47732ef36b
curl@7.52.1-5+deb9u3
7.52.1-5+deb9u6

Open the chart page →

4,269
azure-voteazure-sample0.1.11 of 2See more

azure-vote azure-sample 0.1.1

1 of the 2 container images this version deploys carry CVE-2018-1000301.

Container imageDigestPackageFixed in
neilpeterson/azure-vote-front:v384062718347c
curl@7.52.1-5+deb9u3
7.52.1-5+deb9u6

Open the chart page →

5,224
azure-vote-osbaazure-sample0.1.01 of 1See more

azure-vote-osba azure-sample 0.1.0

1 of the 1 container images this version deploys carry CVE-2018-1000301.

Container imageDigestPackageFixed in
neilpeterson/azure-vote-front:v384062718347c
curl@7.52.1-5+deb9u3
7.52.1-5+deb9u6

Open the chart page →

4,269
burst-schedulerazure-sample0.1.01 of 1See more

burst-scheduler azure-sample 0.1.0

1 of the 1 container images this version deploys carry CVE-2018-1000301.

Container imageDigestPackageFixed in
neilpeterson/burst-scheduler:v1.23a8877032972
curl@7.52.1-5+deb9u3
7.52.1-5+deb9u6

Open the chart page →

2,408
osba-container-instances-demoazure-sample0.1.01 of 1See more

osba-container-instances-demo azure-sample 0.1.0

1 of the 1 container images this version deploys carry CVE-2018-1000301.

Container imageDigestPackageFixed in
neilpeterson/osba-container-instances-demo:latest6527b05d5d03
curl@7.38.0-4+deb8u9
7.38.0-4+deb8u11

Open the chart page →

3,212
osba-cosmos-mongodb-demoazure-sample0.1.01 of 1See more

osba-cosmos-mongodb-demo azure-sample 0.1.0

1 of the 1 container images this version deploys carry CVE-2018-1000301.

Container imageDigestPackageFixed in
neilpeterson/osba-cosmos-mongodb-demo:latestf4940e84ed05
curl@7.38.0-4+deb8u9
7.38.0-4+deb8u11

Open the chart page →

2,904
osba-mysql-demoazure-sample0.1.01 of 1See more

osba-mysql-demo azure-sample 0.1.0

1 of the 1 container images this version deploys carry CVE-2018-1000301.

Container imageDigestPackageFixed in
neilpeterson/osba-mysql-demo:latest5859d68a6c9f
curl@7.38.0-4+deb8u9
7.38.0-4+deb8u11

Open the chart page →

2,895
osba-storage-demoazure-sample0.1.01 of 1See more

osba-storage-demo azure-sample 0.1.0

1 of the 1 container images this version deploys carry CVE-2018-1000301.

Container imageDigestPackageFixed in
neilpeterson/osba-storage-demo:latest29d229ab446e
curl@7.38.0-4+deb8u9
7.38.0-4+deb8u11

Open the chart page →

3,425
osba-text-analytics-demoazure-sample0.1.01 of 1See more

osba-text-analytics-demo azure-sample 0.1.0

1 of the 1 container images this version deploys carry CVE-2018-1000301.

Container imageDigestPackageFixed in
neilpeterson/osba-text-analytics-demo:latest969af3cb8466
curl@7.38.0-4+deb8u10
7.38.0-4+deb8u11

Open the chart page →

3,089
twitter-sentimentazure-sample0.1.03 of 3See more

twitter-sentiment azure-sample 0.1.0

3 of the 3 container images this version deploys carry CVE-2018-1000301.

Container imageDigestPackageFixed in
neilpeterson/chart-tweet:latest64fd8dab075f
curl@7.52.1-5+deb9u3
7.52.1-5+deb9u6
neilpeterson/get-tweet:v28b645ac1a23e
curl@7.38.0-4+deb8u10
7.38.0-4+deb8u11
neilpeterson/process-tweet:latest39ce9f92e899
curl@7.52.1-5+deb9u5
7.52.1-5+deb9u6

Open the chart page →

11,833
honeywell-exporterbryanalves0.1.11 of 1See more

honeywell-exporter bryanalves 0.1.1

1 of the 1 container images this version deploys carry CVE-2018-1000301.

Container imageDigestPackageFixed in
bryanalves/honeywell_exporter:0.0.1195f73dce8b21
curl@7.52.1-5+deb9u4
7.52.1-5+deb9u6

Open the chart page →

5,437
sickragebryanalves0.1.01 of 1See more

sickrage bryanalves 0.1.0

1 of the 1 container images this version deploys carry CVE-2018-1000301.

Container imageDigestPackageFixed in
bryanalves/sickrage:latest42f0a130001d
curl@7.57.0-r0
7.60.0-r0

Open the chart page →

923
imap-mailbox-exportercamptocamp32.0.01 of 1See more

imap-mailbox-exporter camptocamp3 2.0.0

1 of the 1 container images this version deploys carry CVE-2018-1000301.

Container imageDigestPackageFixed in
camptocamp/imap-mailbox-exporter:latest9dec019e4c62
curl@7.38.0-4+deb8u5
7.38.0-4+deb8u11

Open the chart page →

2,234
ldap-search-exportercamptocamp31.0.01 of 1See more

ldap-search-exporter camptocamp3 1.0.0

1 of the 1 container images this version deploys carry CVE-2018-1000301.

Container imageDigestPackageFixed in
camptocamp/ldap-search-exporter:latest5e55370dd292
curl@7.38.0-4+deb8u5
7.38.0-4+deb8u11

Open the chart page →

2,234
r10k-dashboardcamptocamp30.2.11 of 1See more

r10k-dashboard camptocamp3 0.2.1

1 of the 1 container images this version deploys carry CVE-2018-1000301.

Container imageDigestPackageFixed in
camptocamp/r10k-dashboard:0.2.6073be594d145
curl@7.38.0-4+deb8u10
7.38.0-4+deb8u11

Open the chart page →

971
choerodon-monitoringchoerodon0.7.31 of 8See more

choerodon-monitoring choerodon 0.7.3

1 of the 8 container images this version deploys carry CVE-2018-1000301.

Container imageDigestPackageFixed in
weaveworks/watch:master-5b2a6e5bb113953e19f
curl@7.51.0-r0
7.60.0-r0

Open the chart page →

1,226
cosbenchcloudnativeapp1.0.11 of 1See more

cosbench cloudnativeapp 1.0.1

1 of the 1 container images this version deploys carry CVE-2018-1000301.

Container imageDigestPackageFixed in
zenko/zenko-cosbench:0.0.6386a1f48ec0e
curl@7.38.0-4+deb8u10
7.38.0-4+deb8u11

Open the chart page →

4,906
distributed-tensorflowcloudnativeapp0.1.11 of 1See more

distributed-tensorflow cloudnativeapp 0.1.1

1 of the 1 container images this version deploys carry CVE-2018-1000301.

Container imageDigestPackageFixed in
cheyang/distributed-tf:1.6.046cc34755493
curl@7.47.0-1ubuntu2.6
7.47.0-1ubuntu2.8

Open the chart page →

36,094
ethereumcloudnativeapp1.0.01 of 3See more

ethereum cloudnativeapp 1.0.0

1 of the 3 container images this version deploys carry CVE-2018-1000301.

Container imageDigestPackageFixed in
ethereumex/eth-stats-dashboard:v0.0.1a7603aa8df4c
curl@7.47.0-1ubuntu2.5
7.47.0-1ubuntu2.8

Open the chart page →

27,417
guestbookcloudnativeapp0.2.01 of 3See more

guestbook cloudnativeapp 0.2.0

1 of the 3 container images this version deploys carry CVE-2018-1000301.

Container imageDigestPackageFixed in
resouer/redis-slave:v2e2f198b49ba7
curl@7.35.0-1ubuntu2.3
7.35.0-1ubuntu2.16

Open the chart page →

36,839
linkerdcloudnativeapp0.4.11 of 2See more

linkerd cloudnativeapp 0.4.1

1 of the 2 container images this version deploys carry CVE-2018-1000301.

Container imageDigestPackageFixed in
buoyantio/linkerd:1.1.2f4048edaca6f
curl@7.38.0-4+deb8u5
7.38.0-4+deb8u11

Open the chart page →

1,419
percona-xtradb-clustercloudnativeapp1.0.01 of 2See more

percona-xtradb-cluster cloudnativeapp 1.0.0

1 of the 2 container images this version deploys carry CVE-2018-1000301.

Container imageDigestPackageFixed in
percona/percona-xtradb-cluster:5.7.19eaa3fcb7a5a2
curl@7.38.0-4+deb8u6
7.38.0-4+deb8u11

Open the chart page →

1,086
prestocloudnativeapp0.1.11 of 1See more

presto cloudnativeapp 0.1.1

1 of the 1 container images this version deploys carry CVE-2018-1000301.

Container imageDigestPackageFixed in
bivas/presto:0.19605545994f806
curl@7.52.1-5+deb9u4
7.52.1-5+deb9u6

Open the chart page →

7,226
puppet-forgecloudnativeapp0.1.81 of 2See more

puppet-forge cloudnativeapp 0.1.8

1 of the 2 container images this version deploys carry CVE-2018-1000301.

Container imageDigestPackageFixed in
hickey/puppet_forge:1.10.0c1148a09ef20
curl@7.38.0-4+deb8u6
7.38.0-4+deb8u11

Open the chart page →

4,086
rethinkdbcloudnativeapp1.0.01 of 1See more

rethinkdb cloudnativeapp 1.0.0

1 of the 1 container images this version deploys carry CVE-2018-1000301.

Container imageDigestPackageFixed in
codylundquist/helm-rethinkdb-cluster:0.1.0630ab586b8c1
curl@7.38.0-4+deb8u5
7.38.0-4+deb8u11

Open the chart page →

1,011
riemanncloudnativeapp0.1.21 of 1See more

riemann cloudnativeapp 0.1.2

1 of the 1 container images this version deploys carry CVE-2018-1000301.

Container imageDigestPackageFixed in
raykrueger/riemann:0.2.14c8baf3de57bb
curl@7.52.1-5+deb9u1
7.52.1-5+deb9u6

Open the chart page →

6,497
seqcloudnativeapp1.0.01 of 1See more

seq cloudnativeapp 1.0.0

1 of the 1 container images this version deploys carry CVE-2018-1000301.

Container imageDigestPackageFixed in
datalust/seq:5.0.832-pre9c731bb207a6
curl@7.47.0-1ubuntu2.6
7.47.0-1ubuntu2.8

Open the chart page →

10,541
webpagetest-agentcloudnativeapp0.2.01 of 1See more

webpagetest-agent cloudnativeapp 0.2.0

1 of the 1 container images this version deploys carry CVE-2018-1000301.

Container imageDigestPackageFixed in
timothyclarke/wptagent:2018-01-2322c41e5ca7e2
curl@7.47.0-1ubuntu2.5
7.47.0-1ubuntu2.8

Open the chart page →

77,758
webpagetest-servercloudnativeapp0.2.11 of 1See more

webpagetest-server cloudnativeapp 0.2.1

1 of the 1 container images this version deploys carry CVE-2018-1000301.

Container imageDigestPackageFixed in
timothyclarke/wptserver:2018-03-0840a80ced8031
curl@7.38.0-4+deb8u9
7.38.0-4+deb8u11

Open the chart page →

3,716
openldapcloud-native-toolkit0.1.91 of 3See more

openldap cloud-native-toolkit 0.1.9

1 of the 3 container images this version deploys carry CVE-2018-1000301.

Container imageDigestPackageFixed in
osixia/phpldapadmin:0.7.058cce1b08592
curl@7.52.1-5
7.52.1-5+deb9u6

Open the chart page →

2,782
mauticdevtron0.1.31 of 3See more

mautic devtron 0.1.3

1 of the 3 container images this version deploys carry CVE-2018-1000301.

Container imageDigestPackageFixed in
mautic/mautic:2.13-apachea954c5868d76
curl@7.38.0-4+deb8u10
7.38.0-4+deb8u11

Open the chart page →

2,939
mauticdevtron-labs0.1.31 of 3See more

mautic devtron-labs 0.1.3

1 of the 3 container images this version deploys carry CVE-2018-1000301.

Container imageDigestPackageFixed in
mautic/mautic:2.13-apachea954c5868d76
curl@7.38.0-4+deb8u10
7.38.0-4+deb8u11

Open the chart page →

2,939

Container images carrying it

75 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
neilpeterson/osba-mysql-demo:latest5859d68a6c9f
curl@7.38.0-4+deb8u9
7.38.0-4+deb8u11
1
neilpeterson/osba-storage-demo:latest29d229ab446e
curl@7.38.0-4+deb8u9
7.38.0-4+deb8u11
1
neilpeterson/osba-text-analytics-demo:latest969af3cb8466
curl@7.38.0-4+deb8u10
7.38.0-4+deb8u11
1
neilpeterson/process-tweet:latest39ce9f92e899
curl@7.52.1-5+deb9u5
7.52.1-5+deb9u6
1
omecproject/onos-progran:1.0.05715e5648aa0
curl@7.47.0-1ubuntu2.5
7.47.0-1ubuntu2.8
1
oomk8s/consul:1.0.0ba60171909c7
curl@7.58.0-r0
7.60.0-r0
1
osixia/phpldapadmin:0.7.058cce1b08592
curl@7.52.1-5
7.52.1-5+deb9u6
1
percona/percona-xtradb-cluster:5.7.19eaa3fcb7a5a2
curl@7.38.0-4+deb8u6
7.38.0-4+deb8u11
1
polyakov/hapi-fhir-jpaserver-example:latestdbcef69146b8
curl@7.38.0-4+deb8u4
7.38.0-4+deb8u11
1
rawlingsj/build-controller:upstream306dd328e3d79
curl@7.59.0-r0
7.60.0-r0
1
raykrueger/riemann:0.2.14c8baf3de57bb
curl@7.52.1-5+deb9u1
7.52.1-5+deb9u6
1
resouer/redis-slave:v2e2f198b49ba7
curl@7.35.0-1ubuntu2.3
7.35.0-1ubuntu2.16
1
richardchesterwood/k8s-fleetman-position-simulator:release20b540a28f5a6
curl@7.52.1-5
7.52.1-5+deb9u6
1
richardchesterwood/k8s-fleetman-position-tracker:release336c43961214c
curl@7.52.1-5
7.52.1-5+deb9u6
1
stakater/logrotate:3.13.05c0e01c23993
curl@7.57.0-r0
7.60.0-r0
1
stakater/restful-distributed-lock-manager:0.5.34f8e409f30c2
curl@7.38.0-4+deb8u9
7.38.0-4+deb8u11
1
tensorflow/tensorflow:1.6.0-devel1e3172090703
curl@7.47.0-1ubuntu2.6
7.47.0-1ubuntu2.8
1
timothyclarke/wptagent:2018-01-2322c41e5ca7e2
curl@7.47.0-1ubuntu2.5
7.47.0-1ubuntu2.8
1
timothyclarke/wptserver:2018-03-0840a80ced8031
curl@7.38.0-4+deb8u9
7.38.0-4+deb8u11
1
tpdock/freeradius:2.2.93da600c95a49
curl@7.47.0-1ubuntu2.5
7.47.0-1ubuntu2.8
1
weaveworks/watch:master-5b2a6e5bb113953e19f
curl@7.51.0-r0
7.60.0-r0
1
zenko/zenko-cosbench:0.0.6386a1f48ec0e
curl@7.38.0-4+deb8u10
7.38.0-4+deb8u11
1
gcr.io/google-containers/echoserver:1.910f4dbc8eeeb
curl@7.47.0-1ubuntu2.2
7.47.0-1ubuntu2.8
1
gcr.io/google_containers/echoserver:1.10cb5c1bddd1b5
curl@7.47.0-1ubuntu2.2
7.47.0-1ubuntu2.8
1
quay.io/helmpack/monocular-ui:v1.10.086b71e90319f
curl@7.38.0-4+deb8u10
7.38.0-4+deb8u11
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.