StackRadar

CVE-2018-1000654

Medium

Advisory

Published 20 Aug 2018In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
0.020
80th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
319
of 17,781 indexed, latest versions
Container images
216
deployed by those charts
Fix available
2 of 2
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 319 of 17,781 indexed charts deploy, on 216 images.

Affected packageAffected versionsFixed inImages
libtasn1-6deb3.4-3ubuntu0.1, 3.4-3ubuntu0.5, 3.4-3ubuntu0.6, 4.7-3ubuntu0.16.04.2+2 more4.7-3ubuntu0.16.04.3+esm2170
libtasn1apk4.12-r2, 4.13-r04.12-r4, 4.14-r046
OSV records
ALPINE-CVE-2018-1000654UBUNTU-CVE-2018-1000654
Also known as
USN-5352-1

Charts affected

319 by stars
ChartLatestAffected imagesRadar Score
pagesstephendillondell1.0.01 of 3See more

pages stephendillondell 1.0.0

1 of the 3 container images this version deploys carry CVE-2018-1000654.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
libtasn1-6@4.13-2
no fix listed

Open the chart page →

20,190
pagessunilb2590-pages1.0.01 of 3See more

pages sunilb2590-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2018-1000654.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
libtasn1-6@4.13-2
no fix listed

Open the chart page →

20,190
istio-discoverytemp-charts0.3.31 of 1See more

istio-discovery temp-charts 0.3.3

1 of the 1 container images this version deploys carry CVE-2018-1000654.

Container imageDigestPackageFixed in
istio/pilot:1.10.0294ca55bd1cc
libtasn1-6@4.13-2
no fix listed

Open the chart page →

10,568
istio-ingresstemp-charts0.3.31 of 1See more

istio-ingress temp-charts 0.3.3

1 of the 1 container images this version deploys carry CVE-2018-1000654.

Container imageDigestPackageFixed in
istio/proxyv2:1.10.088c6c693e67a
libtasn1-6@4.13-2
no fix listed

Open the chart page →

10,514
pagestest43221.0.01 of 3See more

pages test4322 1.0.0

1 of the 3 container images this version deploys carry CVE-2018-1000654.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
libtasn1-6@4.13-2
no fix listed

Open the chart page →

20,190
shenyutest-helm2.4.212 of 2See more

shenyu test-helm 2.4.21

2 of the 2 container images this version deploys carry CVE-2018-1000654.

Container imageDigestPackageFixed in
apache/shenyu-admin:2.4.2e8b7c4ddd069
libtasn1@4.13-r0
4.14-r0
apache/shenyu-bootstrap:2.4.20bd3b25c4be4
libtasn1@4.13-r0
4.14-r0

Open the chart page →

12,513
standard-applicationthebitgram1.0.121 of 1See more

standard-application thebitgram 1.0.12

1 of the 1 container images this version deploys carry CVE-2018-1000654.

Container imageDigestPackageFixed in
gcr.io/google_containers/echoserver:1.10cb5c1bddd1b5
libtasn1-6@4.7-3ubuntu0.16.04.2
4.7-3ubuntu0.16.04.3+esm2

Open the chart page →

11,007
pagesthiru-pages1.0.01 of 3See more

pages thiru-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2018-1000654.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
libtasn1-6@4.13-2
no fix listed

Open the chart page →

20,190
pagesthuy-pages1.0.01 of 3See more

pages thuy-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2018-1000654.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
libtasn1-6@4.13-2
no fix listed

Open the chart page →

20,190
todoapitodoapi-appVerified publisher0.1.01 of 2See more

todoapi todoapi-app 0.1.0

1 of the 2 container images this version deploys carry CVE-2018-1000654.

Container imageDigestPackageFixed in
mcr.microsoft.com/mssql/server:2017-latest13221ac5f673
libtasn1-6@4.13-2
no fix listed

Open the chart page →

6,793
lightstepupdater-lightstep-satellite1.2.21 of 1See more

lightstep updater-lightstep-satellite 1.2.2

1 of the 1 container images this version deploys carry CVE-2018-1000654.

Container imageDigestPackageFixed in
lightstep/collector:2021-01-26_23-02-36Z11c5569aaf3b
libtasn1-6@4.7-3ubuntu0.16.04.3
4.7-3ubuntu0.16.04.3+esm2

Open the chart page →

15,330
pagesvictor-pages1.0.01 of 3See more

pages victor-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2018-1000654.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
libtasn1-6@4.13-2
no fix listed

Open the chart page →

20,190
kube-monitoring-telegram-botviento-repository1.0.01 of 1See more

kube-monitoring-telegram-bot viento-repository 1.0.0

1 of the 1 container images this version deploys carry CVE-2018-1000654.

Container imageDigestPackageFixed in
vientoprojects/kubernetes-monitoring-telegram-bot:latesteb2a71531741
libtasn1-6@4.13-2
no fix listed

Open the chart page →

7,885
pageswalter1.0.01 of 3See more

pages walter 1.0.0

1 of the 3 container images this version deploys carry CVE-2018-1000654.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
libtasn1-6@4.13-2
no fix listed

Open the chart page →

20,190
queryservicewbstack0.2.11 of 1See more

queryservice wbstack 0.2.1

1 of the 1 container images this version deploys carry CVE-2018-1000654.

Container imageDigestPackageFixed in
ghcr.io/wbstack/queryservice:0.3.6_0.6b83b5b81d4b6
libtasn1@4.13-r0
4.14-r0

Open the chart page →

4,649
queryservice-updaterwbstack0.3.01 of 1See more

queryservice-updater wbstack 0.3.0

1 of the 1 container images this version deploys carry CVE-2018-1000654.

Container imageDigestPackageFixed in
ghcr.io/wbstack/queryservice-updater:0.3.84_3.97525a57ac3f1
libtasn1@4.13-r0
4.14-r0

Open the chart page →

3,176
wbaas-backupwbstack0.1.01 of 1See more

wbaas-backup wbstack 0.1.0

1 of the 1 container images this version deploys carry CVE-2018-1000654.

Container imageDigestPackageFixed in
ghcr.io/wmde/wbaas-backup:v0.1.78e6a9516eac0
libtasn1-6@4.13-2
no fix listed

Open the chart page →

9,743
emissary-ingresswenerme8.12.21 of 2See more

emissary-ingress wenerme 8.12.2

1 of the 2 container images this version deploys carry CVE-2018-1000654.

Container imageDigestPackageFixed in
istio/kubectl:1.5.10dbb7726d1bf0
libtasn1-6@4.13-2
no fix listed

Open the chart page →

10,843
clickhousezloi-space1.2.01 of 3See more

clickhouse zloi-space 1.2.0

1 of the 3 container images this version deploys carry CVE-2018-1000654.

Container imageDigestPackageFixed in
yandex/clickhouse-client:21.3863f94a0f607
libtasn1-6@4.13-2
no fix listed

Open the chart page →

9,207

Container images carrying it

216 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
elastictranscoder/transcoder-handler:627e21dc5b75d19e2733
libtasn1-6@4.13-2
no fix listed
1
enix/san-iscsi-csi:v4.0.2f963da81ecf7
libtasn1-6@4.13-2
no fix listed
1
envoyproxy/envoy:v1.18.2e8b37c1d7578
libtasn1-6@4.13-2
no fix listed
1
eqalpha/keydb:x86_64_v6.3.2fd9351ce27a7
libtasn1-6@4.13-2
no fix listed
1
ethereumex/eth-stats-dashboard:v0.0.1a7603aa8df4c
libtasn1-6@4.7-3ubuntu0.16.04.2
4.7-3ubuntu0.16.04.3+esm2
1
fimperato/sparkvid-api:1.0.5-RELEASE604012b77841
libtasn1@4.13-r0
4.14-r0
1
foldingathome/fah-gpu:latest5ef7742d1eb4
libtasn1-6@4.13-2
no fix listed
1
frankescobar/allure-docker-service:2.21.08a4d7e9308de
libtasn1-6@4.13-2
no fix listed
1
frankescobar/allure-docker-service:2.19.0cafa03b94dac
libtasn1-6@4.13-2
no fix listed
1
free5gmano/nextepc-mongodb:latest36f806935519
libtasn1-6@4.7-3ubuntu0.16.04.3
4.7-3ubuntu0.16.04.3+esm2
1
galaxy/galaxy-init:v18.010267bad550e6
libtasn1-6@3.4-3ubuntu0.6
no fix listed
1
galaxy/galaxy-stable:v18.018e577a626dfd
libtasn1-6@3.4-3ubuntu0.6
no fix listed
1
geonetwork/gn-cloud-ogc-api-records-service:4.2.8-020c9bb761f67
libtasn1-6@4.13-2
no fix listed
1
geoscienceaustralia/dea-k8s-data:latestf4039b45572a
libtasn1-6@4.13-2
no fix listed
1
gethue/hue:4.10.05702b2c37ff9
libtasn1-6@4.13-2
no fix listed
1
gocd/gocd-agent-alpine-3.9:v19.3.053588bd3221f
libtasn1@4.13-r0
4.14-r0
1
gocd/gocd-server:v19.3.02da45cb09d57
libtasn1@4.13-r0
4.14-r0
1
gotson/komga:0.99.49b15ea6bfc30
libtasn1-6@4.13-2
no fix listed
1
gradiant/jmxproxy:3.4.045eceb1bc55c
libtasn1@4.13-r0
4.14-r0
1
hazelcast/hazelcast:3.11.2ca7d5589744f
libtasn1@4.13-r0
4.14-r0
1
hazelcast/hazelcast-jet:3.0df495e64ea65
libtasn1@4.13-r0
4.14-r0
1
huginn/huginn-single-process:4d17829cf6b15b004ad3f4be196303dca4944810c794eddc7b47
libtasn1-6@4.13-2
no fix listed
1
hyperledger/fabric-couchdb:0.4.10c65891b6c237
libtasn1-6@4.7-3ubuntu0.16.04.3
4.7-3ubuntu0.16.04.3+esm2
1
ibmcom/ibm-workload-scheduler-agent-dynamic-dev:9.4.0.047e4dc1e27cdf
libtasn1-6@4.7-3ubuntu0.16.04.3
4.7-3ubuntu0.16.04.3+esm2
1
ibmcom/icp-sert-bats:3.2.0b558f2b444ae
libtasn1@4.13-r0
4.14-r0
1
ibmcom/icp-swift-sample:latestb5d8c6714dbc
libtasn1-6@4.7-3ubuntu0.16.04.3
4.7-3ubuntu0.16.04.3+esm2
1
ibmcom/microclimate-theia:lateste17bdccc5030
libtasn1-6@4.7-3ubuntu0.16.04.2
4.7-3ubuntu0.16.04.3+esm2
1
ibmcom/skydive:0.22.0395e60cc6e3d
libtasn1-6@4.13-2
no fix listed
1
inspircd/inspircd-docker:2.0.262ca97f93b54b
libtasn1@4.13-r0
4.14-r0
1
iofog/router:2.0.17260cf861479
libtasn1-6@4.13-2
no fix listed
1
istio/install-cni:1.10.32232f365aed6
libtasn1-6@4.13-2
no fix listed
1
istio/node-agent-k8s:1.2.9268ab879ea51
libtasn1-6@4.7-3ubuntu0.16.04.3
4.7-3ubuntu0.16.04.3+esm2
1
istio/operator:1.10.3655eefa11c84
libtasn1-6@4.13-2
no fix listed
1
istio/pilot:1.10.0294ca55bd1cc
libtasn1-6@4.13-2
no fix listed
1
istio/pilot:1.2.9c09319753454
libtasn1-6@4.7-3ubuntu0.16.04.3
4.7-3ubuntu0.16.04.3+esm2
1
istio/pilot:1.10.3e7e110a421c2
libtasn1-6@4.13-2
no fix listed
1
istio/proxyv2:1.2.90c78be035e98
libtasn1-6@4.7-3ubuntu0.16.04.3
4.7-3ubuntu0.16.04.3+esm2
1
istio/proxyv2:1.9.687a9db561d2e
libtasn1-6@4.13-2
no fix listed
1
istio/proxyv2:1.10.088c6c693e67a
libtasn1-6@4.13-2
no fix listed
1
jacobalberty/unifi:v7.1.664a3616625dda
libtasn1-6@4.13-2
no fix listed
1
jacobalberty/unifi:v7.4.162b3edc809a3ff
libtasn1-6@4.13-2
no fix listed
1
jacobalberty/unifi:5.10.19c409924e2463
libtasn1-6@4.7-3ubuntu0.16.04.3
4.7-3ubuntu0.16.04.3+esm2
1
jmferrer/azure-devops-agent:latest030f68ec6998
libtasn1-6@4.7-3ubuntu0.16.04.3
4.7-3ubuntu0.16.04.3+esm2
1
kennethreitz/httpbin:latest599fe5e50731
libtasn1-6@4.13-2
no fix listed
1
kimb88/hello-world-spring-boot:latest0639155241cb
libtasn1@4.13-r0
4.14-r0
1
kubeoperator/webkubectl:v2.4.0be8f0d624640
libtasn1-6@4.13-2
no fix listed
1
kudobuilder/controller:v0.9.069072d979708
libtasn1-6@4.13-2
no fix listed
1
library/mongo:4.4-bionic3d0e6df9fd5b
libtasn1-6@4.13-2
no fix listed
1
library/mongo:4.2699d652ed674
libtasn1-6@4.13-2
no fix listed
1
library/mongo:4.2.16ca49afbcb2b
libtasn1-6@4.13-2
no fix listed
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.