StackRadar

CVE-2018-1000301

Critical

Advisory

Published 16 May 2018In the index since 6 Sept 2026
Severity
Critical
worst across findings
CVSS
9.1
base score, highest
EPSS
0.060
93rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
99
of 17,781 indexed, latest versions
Container images
75
deployed by those charts
Fix available
2 of 2
affected packages

curl - security update

Carried by container images the latest versions of 99 of 17,781 indexed charts deploy, on 75 images.

Affected packageAffected versionsFixed inImages
curldeb7.35.0-1ubuntu2.1, 7.35.0-1ubuntu2.3, 7.38.0-4+deb8u4, 7.38.0-4+deb8u5+13 more7.35.0-1ubuntu2.16, 7.38.0-4+deb8u11, 7.47.0-1ubuntu2.8, 7.52.1-5+deb9u664
curlapk7.51.0-r0, 7.57.0-r0, 7.58.0-r0, 7.58.0-r1+1 more7.60.0-r011
OSV records
ALPINE-CVE-2018-1000301UBUNTU-CVE-2018-1000301DSA-4202-1
Also known as
USN-3648-1

Charts affected

99 by stars
ChartLatestAffected imagesRadar Score
amundsenduyet1.1.01 of 7See more

amundsen duyet 1.1.0

1 of the 7 container images this version deploys carry CVE-2018-1000301.

Container imageDigestPackageFixed in
appropriate/curl:latestc8bf5bbec639
curl@7.59.0-r0
7.60.0-r0

Open the chart page →

11,174
my-chartfleet-web-app0.1.02 of 6See more

my-chart fleet-web-app 0.1.0

2 of the 6 container images this version deploys carry CVE-2018-1000301.

Container imageDigestPackageFixed in
richardchesterwood/k8s-fleetman-position-simulator:release20b540a28f5a6
curl@7.52.1-5
7.52.1-5+deb9u6
richardchesterwood/k8s-fleetman-position-tracker:release336c43961214c
curl@7.52.1-5
7.52.1-5+deb9u6

Open the chart page →

24,296
comcastgeek-cookbookVerified publisher6.4.21 of 1See more

comcast geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2018-1000301.

Container imageDigestPackageFixed in
billimek/comcastusage-for-influxdb:latest801bba1228ac
curl@7.38.0-4+deb8u9
7.38.0-4+deb8u11

Open the chart page →

3,245
hivegradiant-bigdataVerified publisher0.1.62 of 5See more

hive gradiant-bigdata 0.1.6

2 of the 5 container images this version deploys carry CVE-2018-1000301.

Container imageDigestPackageFixed in
bde2020/hive:2.3.2-postgresql-metastore620267768985
curl@7.38.0-4+deb8u9
7.38.0-4+deb8u11
gradiant/hive:2.3.2-postgresql-metastoreaae4f8a21f8b
curl@7.38.0-4+deb8u9
7.38.0-4+deb8u11

Open the chart page →

20,837
hive-metastoregradiant-bigdataVerified publisher0.1.31 of 2See more

hive-metastore gradiant-bigdata 0.1.3

1 of the 2 container images this version deploys carry CVE-2018-1000301.

Container imageDigestPackageFixed in
bde2020/hive:2.3.2-postgresql-metastore620267768985
curl@7.38.0-4+deb8u9
7.38.0-4+deb8u11

Open the chart page →

6,882
dontstarvetogetherhalkeye0.1.01 of 1See more

dontstarvetogether halkeye 0.1.0

1 of the 1 container images this version deploys carry CVE-2018-1000301.

Container imageDigestPackageFixed in
dstacademy/dontstarvetogether:latest46487aa079b0
curl@7.52.1-5+deb9u4
7.52.1-5+deb9u6

Open the chart page →

1,241
hapi-fhirhapi-fhirVerified publisher0.1.01 of 1See more

hapi-fhir hapi-fhir 0.1.0

1 of the 1 container images this version deploys carry CVE-2018-1000301.

Container imageDigestPackageFixed in
polyakov/hapi-fhir-jpaserver-example:latestdbcef69146b8
curl@7.38.0-4+deb8u4
7.38.0-4+deb8u11

Open the chart page →

6,362
ibm-galera-mariadb-devibm-charts1.1.01 of 2See more

ibm-galera-mariadb-dev ibm-charts 1.1.0

1 of the 2 container images this version deploys carry CVE-2018-1000301.

Container imageDigestPackageFixed in
ibmcom/galera-mariadb:10.2.142dcde9774493
curl@7.38.0-4+deb8u10
7.38.0-4+deb8u11

Open the chart page →

769
ibm-microclimateibm-charts0.1.03 of 8See more

ibm-microclimate ibm-charts 0.1.0

3 of the 8 container images this version deploys carry CVE-2018-1000301.

Container imageDigestPackageFixed in
ibmcom/microclimate-file-watcher:latestab3fd1fdfa18
curl@7.59.0-r0
7.60.0-r0
ibmcom/microclimate-portal:latested5505e5c7ec
curl@7.59.0-r0
7.60.0-r0
ibmcom/microclimate-theia:lateste17bdccc5030
curl@7.47.0-1ubuntu2.7
7.47.0-1ubuntu2.8

Open the chart page →

57,669
ibm-swift-sampleibm-charts1.1.21 of 1See more

ibm-swift-sample ibm-charts 1.1.2

1 of the 1 container images this version deploys carry CVE-2018-1000301.

Container imageDigestPackageFixed in
ibmcom/icp-swift-sample:latestb5d8c6714dbc
curl@7.47.0-1ubuntu2.7
7.47.0-1ubuntu2.8

Open the chart page →

25,160
jenkinsjenkins-x0.10.381 of 2See more

jenkins jenkins-x 0.10.38

1 of the 2 container images this version deploys carry CVE-2018-1000301.

Container imageDigestPackageFixed in
jenkinsci/jenkins:2.67a1f33f004659
curl@7.52.1-5
7.52.1-5+deb9u6

Open the chart page →

10,682
knative-buildjenkins-x0.1.191 of 1See more

knative-build jenkins-x 0.1.19

1 of the 1 container images this version deploys carry CVE-2018-1000301.

Container imageDigestPackageFixed in
rawlingsj/build-controller:upstream306dd328e3d79
curl@7.59.0-r0
7.60.0-r0

Open the chart page →

533
metricsjenkins-x0.0.61 of 9See more

metrics jenkins-x 0.0.6

1 of the 9 container images this version deploys carry CVE-2018-1000301.

Container imageDigestPackageFixed in
appropriate/curl:latestc8bf5bbec639
curl@7.59.0-r0
7.60.0-r0

Open the chart page →

551
monocularjenkins-x0.6.41 of 4See more

monocular jenkins-x 0.6.4

1 of the 4 container images this version deploys carry CVE-2018-1000301.

Container imageDigestPackageFixed in
migmartri/prerender:latest486aacfd5aa9
curl@7.38.0-4+deb8u5
7.38.0-4+deb8u11

Open the chart page →

4,614
oauth2-proxyjenkins-x0.2.31 of 1See more

oauth2-proxy jenkins-x 0.2.3

1 of the 1 container images this version deploys carry CVE-2018-1000301.

Container imageDigestPackageFixed in
a5huynh/oauth2_proxy:2.20c7307d31ca8
curl@7.38.0-4+deb8u5
7.38.0-4+deb8u11

Open the chart page →

2,392
Wordressjinchi-chart0.2.01 of 2See more

Wordress jinchi-chart 0.2.0

1 of the 2 container images this version deploys carry CVE-2018-1000301.

Container imageDigestPackageFixed in
library/wordpress:4.8-apache6216f64ab88f
curl@7.38.0-4+deb8u7
7.38.0-4+deb8u11

Open the chart page →

1,339
gitlabkubesphereVerified publisher4.2.31 of 17See more

gitlab kubesphere 4.2.3

1 of the 17 container images this version deploys carry CVE-2018-1000301.

Container imageDigestPackageFixed in
minio/minio:RELEASE.2017-12-28T01-21-00Z3611f1644cf5
curl@7.57.0-r0
7.60.0-r0

Open the chart page →

38,133
influxdblsst-sqre3.1.11 of 2See more

influxdb lsst-sqre 3.1.1

1 of the 2 container images this version deploys carry CVE-2018-1000301.

Container imageDigestPackageFixed in
appropriate/curl:latestc8bf5bbec639
curl@7.59.0-r0
7.60.0-r0

Open the chart page →

758
sasquatchlsst-sqre0.1.131 of 6See more

sasquatch lsst-sqre 0.1.13

1 of the 6 container images this version deploys carry CVE-2018-1000301.

Container imageDigestPackageFixed in
appropriate/curl:latestc8bf5bbec639
curl@7.59.0-r0
7.60.0-r0

Open the chart page →

9,332
mattermost-team-editionmattermost-team-edition6.6.831 of 4See more

mattermost-team-edition mattermost-team-edition 6.6.83

1 of the 4 container images this version deploys carry CVE-2018-1000301.

Container imageDigestPackageFixed in
appropriate/curl:latestc8bf5bbec639
curl@7.59.0-r0
7.60.0-r0

Open the chart page →

4,089
dexmesosphere-stable2.14.11 of 5See more

dex mesosphere-stable 2.14.1

1 of the 5 container images this version deploys carry CVE-2018-1000301.

Container imageDigestPackageFixed in
gcr.io/google_containers/kubernetes-dashboard-init-amd64:v1.0.0fbe12aa24de6
curl@7.47.0-1ubuntu2.2
7.47.0-1ubuntu2.8

Open the chart page →

19,214
monocularmonocular1.4.152 of 5See more

monocular monocular 1.4.15

2 of the 5 container images this version deploys carry CVE-2018-1000301.

Container imageDigestPackageFixed in
migmartri/prerender:latest486aacfd5aa9
curl@7.38.0-4+deb8u5
7.38.0-4+deb8u11
quay.io/helmpack/monocular-ui:v1.10.086b71e90319f
curl@7.38.0-4+deb8u10
7.38.0-4+deb8u11

Open the chart page →

7,048
polyglotncsaVerified publisher0.1.12 of 18See more

polyglot ncsa 0.1.1

2 of the 18 container images this version deploys carry CVE-2018-1000301.

Container imageDigestPackageFixed in
ncsapolyglot/converters-avconv:latestc44b22eb58bb
curl@7.52.1-5+deb9u3
7.52.1-5+deb9u6
ncsapolyglot/converters-openjpeg:latest2ba4af461d51
curl@7.38.0-4+deb8u5
7.38.0-4+deb8u11

Open the chart page →

55,726
zookeeper-helm-chartnotesprojectchart0.1.01 of 1See more

zookeeper-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2018-1000301.

Container imageDigestPackageFixed in
wurstmeister/zookeeper:latest7a7fd44a7210
curl@7.35.0-1ubuntu2.1
7.35.0-1ubuntu2.16

Open the chart page →

41,427
comacopencord1.0.01 of 9See more

comac opencord 1.0.0

1 of the 9 container images this version deploys carry CVE-2018-1000301.

Container imageDigestPackageFixed in
omecproject/onos-progran:1.0.05715e5648aa0
curl@7.47.0-1ubuntu2.5
7.47.0-1ubuntu2.8

Open the chart page →

88,546
onos-progranopencord1.2.71 of 2See more

onos-progran opencord 1.2.7

1 of the 2 container images this version deploys carry CVE-2018-1000301.

Container imageDigestPackageFixed in
muluder/prograncontrollermcord:0.1.843b597a93da7
curl@7.47.0-1ubuntu2.5
7.47.0-1ubuntu2.8

Open the chart page →

38,865
sebaopencord1.0.01 of 17See more

seba opencord 1.0.0

1 of the 17 container images this version deploys carry CVE-2018-1000301.

Container imageDigestPackageFixed in
tpdock/freeradius:2.2.93da600c95a49
curl@7.47.0-1ubuntu2.5
7.47.0-1ubuntu2.8

Open the chart page →

93,855
mattermost-team-editionopenshift6.6.831 of 4See more

mattermost-team-edition openshift 6.6.83

1 of the 4 container images this version deploys carry CVE-2018-1000301.

Container imageDigestPackageFixed in
appropriate/curl:latestc8bf5bbec639
curl@7.59.0-r0
7.60.0-r0

Open the chart page →

4,089
prestopresto-loadbalancer0.2.291 of 2See more

presto presto-loadbalancer 0.2.29

1 of the 2 container images this version deploys carry CVE-2018-1000301.

Container imageDigestPackageFixed in
sscaling/jmx-prometheus-exporter:0.3.011d9ee1b1e4a
curl@7.58.0-r1
7.60.0-r0

Open the chart page →

688
trinopresto-loadbalancer0.2.101 of 2See more

trino presto-loadbalancer 0.2.10

1 of the 2 container images this version deploys carry CVE-2018-1000301.

Container imageDigestPackageFixed in
sscaling/jmx-prometheus-exporter:0.3.011d9ee1b1e4a
curl@7.58.0-r1
7.60.0-r0

Open the chart page →

2,264
mauticromholdings0.1.31 of 3See more

mautic romholdings 0.1.3

1 of the 3 container images this version deploys carry CVE-2018-1000301.

Container imageDigestPackageFixed in
mautic/mautic:2.13-apachea954c5868d76
curl@7.38.0-4+deb8u10
7.38.0-4+deb8u11

Open the chart page →

2,939
Wordresssix0.2.01 of 2See more

Wordress six 0.2.0

1 of the 2 container images this version deploys carry CVE-2018-1000301.

Container imageDigestPackageFixed in
library/wordpress:4.8-apache6216f64ab88f
curl@7.38.0-4+deb8u7
7.38.0-4+deb8u11

Open the chart page →

1,339
consulsmo-helm-chart6.0.02 of 2See more

consul smo-helm-chart 6.0.0

2 of the 2 container images this version deploys carry CVE-2018-1000301.

Container imageDigestPackageFixed in
library/consul:1.0.66ffe55dcc100
curl@7.58.0-r0
7.60.0-r0
oomk8s/consul:1.0.0ba60171909c7
curl@7.58.0-r0
7.60.0-r0

Open the chart page →

1,284
dgbuildersmo-helm-chart6.0.01 of 3See more

dgbuilder smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2018-1000301.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.07daa08b81954
curl@7.47.0-1ubuntu2.7
7.47.0-1ubuntu2.8

Open the chart page →

28,470
logsmo-helm-chart6.0.01 of 6See more

log smo-helm-chart 6.0.0

1 of the 6 container images this version deploys carry CVE-2018-1000301.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.07daa08b81954
curl@7.47.0-1ubuntu2.7
7.47.0-1ubuntu2.8

Open the chart page →

29,220
msbsmo-helm-chart6.0.01 of 6See more

msb smo-helm-chart 6.0.0

1 of the 6 container images this version deploys carry CVE-2018-1000301.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.07daa08b81954
curl@7.47.0-1ubuntu2.7
7.47.0-1ubuntu2.8

Open the chart page →

27,477
pndasmo-helm-chart6.0.01 of 3See more

pnda smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2018-1000301.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.07daa08b81954
curl@7.47.0-1ubuntu2.7
7.47.0-1ubuntu2.8

Open the chart page →

27,477
pombasmo-helm-chart6.0.01 of 17See more

pomba smo-helm-chart 6.0.0

1 of the 17 container images this version deploys carry CVE-2018-1000301.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.07daa08b81954
curl@7.47.0-1ubuntu2.7
7.47.0-1ubuntu2.8

Open the chart page →

29,220
portalsmo-helm-chart6.0.01 of 8See more

portal smo-helm-chart 6.0.0

1 of the 8 container images this version deploys carry CVE-2018-1000301.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.07daa08b81954
curl@7.47.0-1ubuntu2.7
7.47.0-1ubuntu2.8

Open the chart page →

27,477
logrotatestakaterVerified publisher1.0.191 of 1See more

logrotate stakater 1.0.19

1 of the 1 container images this version deploys carry CVE-2018-1000301.

Container imageDigestPackageFixed in
stakater/logrotate:3.13.05c0e01c23993
curl@7.57.0-r0
7.60.0-r0

Open the chart page →

1,011
restful-distributed-lock-managerstakaterVerified publisher1.0.41 of 1See more

restful-distributed-lock-manager stakater 1.0.4

1 of the 1 container images this version deploys carry CVE-2018-1000301.

Container imageDigestPackageFixed in
stakater/restful-distributed-lock-manager:0.5.34f8e409f30c2
curl@7.38.0-4+deb8u9
7.38.0-4+deb8u11

Open the chart page →

3,116
democharttech-challenge0.1.01 of 4See more

demochart tech-challenge 0.1.0

1 of the 4 container images this version deploys carry CVE-2018-1000301.

Container imageDigestPackageFixed in
grafana/grafana:5.1.0a6b37f9afdd9
curl@7.52.1-5+deb9u5
7.52.1-5+deb9u6

Open the chart page →

3,632
standard-applicationthebitgram1.0.121 of 1See more

standard-application thebitgram 1.0.12

1 of the 1 container images this version deploys carry CVE-2018-1000301.

Container imageDigestPackageFixed in
gcr.io/google_containers/echoserver:1.10cb5c1bddd1b5
curl@7.47.0-1ubuntu2.2
7.47.0-1ubuntu2.8

Open the chart page →

11,007
Wordressuvaise-wordpress0.2.01 of 2See more

Wordress uvaise-wordpress 0.2.0

1 of the 2 container images this version deploys carry CVE-2018-1000301.

Container imageDigestPackageFixed in
library/wordpress:4.8-apache6216f64ab88f
curl@7.38.0-4+deb8u7
7.38.0-4+deb8u11

Open the chart page →

1,339
voteappvoting-app-helm-charts-repoVerified publisher1.0.01 of 5See more

voteapp voting-app-helm-charts-repo 1.0.0

1 of the 5 container images this version deploys carry CVE-2018-1000301.

Container imageDigestPackageFixed in
kodekloud/examplevotingapp_worker:v1741e3aaaa812
curl@7.52.1-5+deb9u1
7.52.1-5+deb9u6

Open the chart page →

8,262
workerappvoting-app-helm-charts-repoVerified publisher1.0.01 of 1See more

workerapp voting-app-helm-charts-repo 1.0.0

1 of the 1 container images this version deploys carry CVE-2018-1000301.

Container imageDigestPackageFixed in
kodekloud/examplevotingapp_worker:v1741e3aaaa812
curl@7.52.1-5+deb9u1
7.52.1-5+deb9u6

Open the chart page →

3,329
voteappvoting-app-helm-charts-repo-cloudVerified publisher1.0.01 of 5See more

voteapp voting-app-helm-charts-repo-cloud 1.0.0

1 of the 5 container images this version deploys carry CVE-2018-1000301.

Container imageDigestPackageFixed in
kodekloud/examplevotingapp_worker:v1741e3aaaa812
curl@7.52.1-5+deb9u1
7.52.1-5+deb9u6

Open the chart page →

8,262
workerappvoting-app-helm-charts-repo-cloudVerified publisher1.0.01 of 1See more

workerapp voting-app-helm-charts-repo-cloud 1.0.0

1 of the 1 container images this version deploys carry CVE-2018-1000301.

Container imageDigestPackageFixed in
kodekloud/examplevotingapp_worker:v1741e3aaaa812
curl@7.52.1-5+deb9u1
7.52.1-5+deb9u6

Open the chart page →

3,329
Wordresswordpress0.2.01 of 2See more

Wordress wordpress 0.2.0

1 of the 2 container images this version deploys carry CVE-2018-1000301.

Container imageDigestPackageFixed in
library/wordpress:4.8-apache6216f64ab88f
curl@7.38.0-4+deb8u7
7.38.0-4+deb8u11

Open the chart page →

1,339

Container images carrying it

75 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
neilpeterson/osba-mysql-demo:latest5859d68a6c9f
curl@7.38.0-4+deb8u9
7.38.0-4+deb8u11
1
neilpeterson/osba-storage-demo:latest29d229ab446e
curl@7.38.0-4+deb8u9
7.38.0-4+deb8u11
1
neilpeterson/osba-text-analytics-demo:latest969af3cb8466
curl@7.38.0-4+deb8u10
7.38.0-4+deb8u11
1
neilpeterson/process-tweet:latest39ce9f92e899
curl@7.52.1-5+deb9u5
7.52.1-5+deb9u6
1
omecproject/onos-progran:1.0.05715e5648aa0
curl@7.47.0-1ubuntu2.5
7.47.0-1ubuntu2.8
1
oomk8s/consul:1.0.0ba60171909c7
curl@7.58.0-r0
7.60.0-r0
1
osixia/phpldapadmin:0.7.058cce1b08592
curl@7.52.1-5
7.52.1-5+deb9u6
1
percona/percona-xtradb-cluster:5.7.19eaa3fcb7a5a2
curl@7.38.0-4+deb8u6
7.38.0-4+deb8u11
1
polyakov/hapi-fhir-jpaserver-example:latestdbcef69146b8
curl@7.38.0-4+deb8u4
7.38.0-4+deb8u11
1
rawlingsj/build-controller:upstream306dd328e3d79
curl@7.59.0-r0
7.60.0-r0
1
raykrueger/riemann:0.2.14c8baf3de57bb
curl@7.52.1-5+deb9u1
7.52.1-5+deb9u6
1
resouer/redis-slave:v2e2f198b49ba7
curl@7.35.0-1ubuntu2.3
7.35.0-1ubuntu2.16
1
richardchesterwood/k8s-fleetman-position-simulator:release20b540a28f5a6
curl@7.52.1-5
7.52.1-5+deb9u6
1
richardchesterwood/k8s-fleetman-position-tracker:release336c43961214c
curl@7.52.1-5
7.52.1-5+deb9u6
1
stakater/logrotate:3.13.05c0e01c23993
curl@7.57.0-r0
7.60.0-r0
1
stakater/restful-distributed-lock-manager:0.5.34f8e409f30c2
curl@7.38.0-4+deb8u9
7.38.0-4+deb8u11
1
tensorflow/tensorflow:1.6.0-devel1e3172090703
curl@7.47.0-1ubuntu2.6
7.47.0-1ubuntu2.8
1
timothyclarke/wptagent:2018-01-2322c41e5ca7e2
curl@7.47.0-1ubuntu2.5
7.47.0-1ubuntu2.8
1
timothyclarke/wptserver:2018-03-0840a80ced8031
curl@7.38.0-4+deb8u9
7.38.0-4+deb8u11
1
tpdock/freeradius:2.2.93da600c95a49
curl@7.47.0-1ubuntu2.5
7.47.0-1ubuntu2.8
1
weaveworks/watch:master-5b2a6e5bb113953e19f
curl@7.51.0-r0
7.60.0-r0
1
zenko/zenko-cosbench:0.0.6386a1f48ec0e
curl@7.38.0-4+deb8u10
7.38.0-4+deb8u11
1
gcr.io/google-containers/echoserver:1.910f4dbc8eeeb
curl@7.47.0-1ubuntu2.2
7.47.0-1ubuntu2.8
1
gcr.io/google_containers/echoserver:1.10cb5c1bddd1b5
curl@7.47.0-1ubuntu2.2
7.47.0-1ubuntu2.8
1
quay.io/helmpack/monocular-ui:v1.10.086b71e90319f
curl@7.38.0-4+deb8u10
7.38.0-4+deb8u11
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.