StackRadar

CVE-2018-1000654

Medium

Advisory

Published 20 Aug 2018In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
0.020
80th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
319
of 17,781 indexed, latest versions
Container images
216
deployed by those charts
Fix available
2 of 2
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 319 of 17,781 indexed charts deploy, on 216 images.

Affected packageAffected versionsFixed inImages
libtasn1-6deb3.4-3ubuntu0.1, 3.4-3ubuntu0.5, 3.4-3ubuntu0.6, 4.7-3ubuntu0.16.04.2+2 more4.7-3ubuntu0.16.04.3+esm2170
libtasn1apk4.12-r2, 4.13-r04.12-r4, 4.14-r046
OSV records
ALPINE-CVE-2018-1000654UBUNTU-CVE-2018-1000654
Also known as
USN-5352-1

Charts affected

319 by stars
ChartLatestAffected imagesRadar Score
omada-controllerandrelote-k8sVerified publisher4.5.01 of 1See more

omada-controller andrelote-k8s 4.5.0

1 of the 1 container images this version deploys carry CVE-2018-1000654.

Container imageDigestPackageFixed in
mbentley/omada-controller:4.3f4e682274bed
libtasn1-6@4.13-2
no fix listed

Open the chart page →

11,553
chart-app-vidapp-vid-chartVerified publisher0.0.71 of 2See more

chart-app-vid app-vid-chart 0.0.7

1 of the 2 container images this version deploys carry CVE-2018-1000654.

Container imageDigestPackageFixed in
fimperato/sparkvid-api:1.0.5-RELEASE604012b77841
libtasn1@4.13-r0
4.14-r0

Open the chart page →

8,866
keystonearzu0.2.291 of 4See more

keystone arzu 0.2.29

1 of the 4 container images this version deploys carry CVE-2018-1000654.

Container imageDigestPackageFixed in
library/rabbitmq:3.7-managementb6dd45cc35b3
libtasn1-6@4.13-2
no fix listed

Open the chart page →

22,568
dltkvassist-iot-data-integrity-verification0.2.02 of 9See more

dltkv assist-iot-data-integrity-verification 0.2.0

2 of the 9 container images this version deploys carry CVE-2018-1000654.

Container imageDigestPackageFixed in
hyperledger/fabric-ca-tools:latest4ce6f43ded2e
libtasn1-6@4.7-3ubuntu0.16.04.3
4.7-3ubuntu0.16.04.3+esm2
hyperledger/fabric-couchdb:0.4.15f6c724592abf
libtasn1-6@4.7-3ubuntu0.16.04.3
4.7-3ubuntu0.16.04.3+esm2

Open the chart page →

77,706
dltflassist-iot-dlt-based-fl0.2.02 of 9See more

dltfl assist-iot-dlt-based-fl 0.2.0

2 of the 9 container images this version deploys carry CVE-2018-1000654.

Container imageDigestPackageFixed in
hyperledger/fabric-ca-tools:latest4ce6f43ded2e
libtasn1-6@4.7-3ubuntu0.16.04.3
4.7-3ubuntu0.16.04.3+esm2
hyperledger/fabric-couchdb:0.4.15f6c724592abf
libtasn1-6@4.7-3ubuntu0.16.04.3
4.7-3ubuntu0.16.04.3+esm2

Open the chart page →

77,706
sd-wanassist-iot-sd-wan1.0.01 of 2See more

sd-wan assist-iot-sd-wan 1.0.0

1 of the 2 container images this version deploys carry CVE-2018-1000654.

Container imageDigestPackageFixed in
library/mongo:4.2.21-bionic9cb28f7291d9
libtasn1-6@4.13-2
no fix listed

Open the chart page →

5,363
smartorchestratorassist-iot-smart-orchestrator4.0.01 of 14See more

smartorchestrator assist-iot-smart-orchestrator 4.0.0

1 of the 14 container images this version deploys carry CVE-2018-1000654.

Container imageDigestPackageFixed in
library/mongo:4.4.66efa05203990
libtasn1-6@4.13-2
no fix listed

Open the chart page →

45,363
pagesberrutig-pages1.0.01 of 3See more

pages berrutig-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2018-1000654.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
libtasn1-6@4.13-2
no fix listed

Open the chart page →

20,190
huebigdata-chartsVerified publisher1.0.41 of 2See more

hue bigdata-charts 1.0.4

1 of the 2 container images this version deploys carry CVE-2018-1000654.

Container imageDigestPackageFixed in
gethue/hue:4.10.05702b2c37ff9
libtasn1-6@4.13-2
no fix listed

Open the chart page →

22,891
jaegerbook-k8sinfra-v23.4.01 of 5See more

jaeger book-k8sinfra-v2 3.4.0

1 of the 5 container images this version deploys carry CVE-2018-1000654.

Container imageDigestPackageFixed in
library/cassandra:3.11.65aa8400b4b3b
libtasn1-6@4.13-2
no fix listed

Open the chart page →

19,229
pagesbrian-pages1.0.01 of 3See more

pages brian-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2018-1000654.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
libtasn1-6@4.13-2
no fix listed

Open the chart page →

20,190
pagesbrixton-mayuribhavsar23-pages1.0.01 of 3See more

pages brixton-mayuribhavsar23-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2018-1000654.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
libtasn1-6@4.13-2
no fix listed

Open the chart page →

20,190
pagesbrixton-pages1.0.01 of 3See more

pages brixton-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2018-1000654.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
libtasn1-6@4.13-2
no fix listed

Open the chart page →

20,190
ombibryanalves0.4.01 of 1See more

ombi bryanalves 0.4.0

1 of the 1 container images this version deploys carry CVE-2018-1000654.

Container imageDigestPackageFixed in
linuxserver/ombi:3.0.4572-ls452fbb21fb4903
libtasn1-6@4.13-2
no fix listed

Open the chart page →

10,776
pagescamden-pages1.0.01 of 3See more

pages camden-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2018-1000654.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
libtasn1-6@4.13-2
no fix listed

Open the chart page →

20,190
prometheus-puppetdb-sdcamptocamp38.0.21 of 2See more

prometheus-puppetdb-sd camptocamp3 8.0.2

1 of the 2 container images this version deploys carry CVE-2018-1000654.

Container imageDigestPackageFixed in
puppet/puppet-agent:7.14.00b6fd9a6b7da
libtasn1-6@4.13-2
no fix listed

Open the chart page →

6,143
pagescarina-pages1.0.01 of 3See more

pages carina-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2018-1000654.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
libtasn1-6@4.13-2
no fix listed

Open the chart page →

20,190
pagescarmel-pages-dell1.0.01 of 3See more

pages carmel-pages-dell 1.0.0

1 of the 3 container images this version deploys carry CVE-2018-1000654.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
libtasn1-6@4.13-2
no fix listed

Open the chart page →

20,190
clechaosnative0.2.71 of 6See more

cle chaosnative 0.2.7

1 of the 6 container images this version deploys carry CVE-2018-1000654.

Container imageDigestPackageFixed in
litmuschaos/mongo:4.2.899961210d467
libtasn1-6@4.13-2
no fix listed

Open the chart page →

16,389
otbrcharts-derwitt-devVerified publisher0.2.01 of 1See more

otbr charts-derwitt-dev 0.2.0

1 of the 1 container images this version deploys carry CVE-2018-1000654.

Container imageDigestPackageFixed in
openthread/otbr:latestf307f59f6432
libtasn1-6@4.13-2
no fix listed

Open the chart page →

12,779
opensipschetan-opensips0.1.01 of 1See more

opensips chetan-opensips 0.1.0

1 of the 1 container images this version deploys carry CVE-2018-1000654.

Container imageDigestPackageFixed in
chetangautamm/repo:Opensips_Buildb4b94155ff5a
libtasn1-6@3.4-3ubuntu0.6
no fix listed

Open the chart page →

30,140
cassandra-reapercloudnativeapp0.2.01 of 1See more

cassandra-reaper cloudnativeapp 0.2.0

1 of the 1 container images this version deploys carry CVE-2018-1000654.

Container imageDigestPackageFixed in
thelastpickle/cassandra-reaper:1.3.09c53996c457d
libtasn1@4.13-r0
4.14-r0

Open the chart page →

5,078
daskcloudnativeapp2.2.11 of 2See more

dask cloudnativeapp 2.2.1

1 of the 2 container images this version deploys carry CVE-2018-1000654.

Container imageDigestPackageFixed in
daskdev/dask-notebook:1.1.0052630f5ca04
libtasn1-6@4.13-2
no fix listed

Open the chart page →

29,901
distributed-tensorflowcloudnativeapp0.1.11 of 1See more

distributed-tensorflow cloudnativeapp 0.1.1

1 of the 1 container images this version deploys carry CVE-2018-1000654.

Container imageDigestPackageFixed in
cheyang/distributed-tf:1.6.046cc34755493
libtasn1-6@4.7-3ubuntu0.16.04.3
4.7-3ubuntu0.16.04.3+esm2

Open the chart page →

36,094
ethereumcloudnativeapp1.0.01 of 3See more

ethereum cloudnativeapp 1.0.0

1 of the 3 container images this version deploys carry CVE-2018-1000654.

Container imageDigestPackageFixed in
ethereumex/eth-stats-dashboard:v0.0.1a7603aa8df4c
libtasn1-6@4.7-3ubuntu0.16.04.2
4.7-3ubuntu0.16.04.3+esm2

Open the chart page →

27,417
gocdcloudnativeapp1.9.22 of 2See more

gocd cloudnativeapp 1.9.2

2 of the 2 container images this version deploys carry CVE-2018-1000654.

Container imageDigestPackageFixed in
gocd/gocd-agent-alpine-3.9:v19.3.053588bd3221f
libtasn1@4.13-r0
4.14-r0
gocd/gocd-server:v19.3.02da45cb09d57
libtasn1@4.13-r0
4.14-r0

Open the chart page →

9,144
guestbookcloudnativeapp0.2.01 of 3See more

guestbook cloudnativeapp 0.2.0

1 of the 3 container images this version deploys carry CVE-2018-1000654.

Container imageDigestPackageFixed in
resouer/redis-slave:v2e2f198b49ba7
libtasn1-6@3.4-3ubuntu0.1
no fix listed

Open the chart page →

36,839
hazelcastcloudnativeapp1.3.11 of 1See more

hazelcast cloudnativeapp 1.3.1

1 of the 1 container images this version deploys carry CVE-2018-1000654.

Container imageDigestPackageFixed in
hazelcast/hazelcast:3.11.2ca7d5589744f
libtasn1@4.13-r0
4.14-r0

Open the chart page →

4,982
hazelcast-jetcloudnativeapp1.1.01 of 1See more

hazelcast-jet cloudnativeapp 1.1.0

1 of the 1 container images this version deploys carry CVE-2018-1000654.

Container imageDigestPackageFixed in
hazelcast/hazelcast-jet:3.0df495e64ea65
libtasn1@4.13-r0
4.14-r0

Open the chart page →

5,326
hlf-couchdbcloudnativeapp1.0.61 of 1See more

hlf-couchdb cloudnativeapp 1.0.6

1 of the 1 container images this version deploys carry CVE-2018-1000654.

Container imageDigestPackageFixed in
hyperledger/fabric-couchdb:0.4.10c65891b6c237
libtasn1-6@4.7-3ubuntu0.16.04.3
4.7-3ubuntu0.16.04.3+esm2

Open the chart page →

33,963
metabasecloudnativeapp0.5.01 of 1See more

metabase cloudnativeapp 0.5.0

1 of the 1 container images this version deploys carry CVE-2018-1000654.

Container imageDigestPackageFixed in
metabase/metabase:v0.31.2ffb2dccacefc
libtasn1@4.13-r0
4.14-r0

Open the chart page →

4,601
neo4jcloudnativeapp1.0.01 of 1See more

neo4j cloudnativeapp 1.0.0

1 of the 1 container images this version deploys carry CVE-2018-1000654.

Container imageDigestPackageFixed in
library/neo4j:3.4.5-enterprisea1ba477fa412
libtasn1@4.13-r0
4.14-r0

Open the chart page →

2,837
orientdbcloudnativeapp0.1.21 of 2See more

orientdb cloudnativeapp 0.1.2

1 of the 2 container images this version deploys carry CVE-2018-1000654.

Container imageDigestPackageFixed in
library/orientdb:3.0.1318a6c004398f
libtasn1@4.13-r0
4.14-r0

Open the chart page →

1,822
rundeckcloudnativeapp0.1.01 of 2See more

rundeck cloudnativeapp 0.1.0

1 of the 2 container images this version deploys carry CVE-2018-1000654.

Container imageDigestPackageFixed in
rundeck/rundeck:3.0.16b13e8059ad72
libtasn1-6@4.7-3ubuntu0.16.04.3
4.7-3ubuntu0.16.04.3+esm2

Open the chart page →

23,665
seqcloudnativeapp1.0.01 of 1See more

seq cloudnativeapp 1.0.0

1 of the 1 container images this version deploys carry CVE-2018-1000654.

Container imageDigestPackageFixed in
datalust/seq:5.0.832-pre9c731bb207a6
libtasn1-6@4.7-3ubuntu0.16.04.3
4.7-3ubuntu0.16.04.3+esm2

Open the chart page →

10,541
spark-history-servercloudnativeapp1.0.02 of 3See more

spark-history-server cloudnativeapp 1.0.0

2 of the 3 container images this version deploys carry CVE-2018-1000654.

Container imageDigestPackageFixed in
lightbend/curl:7.47.0b0c9894ac8dd
libtasn1-6@4.7-3ubuntu0.16.04.3
4.7-3ubuntu0.16.04.3+esm2
lightbend/spark-history-server:2.4.00bedf37f428a
libtasn1@4.13-r0
4.14-r0

Open the chart page →

14,066
unificloudnativeapp0.4.21 of 1See more

unifi cloudnativeapp 0.4.2

1 of the 1 container images this version deploys carry CVE-2018-1000654.

Container imageDigestPackageFixed in
jacobalberty/unifi:5.10.19c409924e2463
libtasn1-6@4.7-3ubuntu0.16.04.3
4.7-3ubuntu0.16.04.3+esm2

Open the chart page →

22,442
webpagetest-agentcloudnativeapp0.2.01 of 1See more

webpagetest-agent cloudnativeapp 0.2.0

1 of the 1 container images this version deploys carry CVE-2018-1000654.

Container imageDigestPackageFixed in
timothyclarke/wptagent:2018-01-2322c41e5ca7e2
libtasn1-6@4.7-3ubuntu0.16.04.2
4.7-3ubuntu0.16.04.3+esm2

Open the chart page →

77,758
galaxy-stablecloudve2.0.02 of 5See more

galaxy-stable cloudve 2.0.0

2 of the 5 container images this version deploys carry CVE-2018-1000654.

Container imageDigestPackageFixed in
galaxy/galaxy-init:v18.010267bad550e6
libtasn1-6@3.4-3ubuntu0.6
no fix listed
galaxy/galaxy-stable:v18.018e577a626dfd
libtasn1-6@3.4-3ubuntu0.6
no fix listed

Open the chart page →

70,895
janisterminalcloudve0.1.01 of 2See more

janisterminal cloudve 0.1.0

1 of the 2 container images this version deploys carry CVE-2018-1000654.

Container imageDigestPackageFixed in
cloudve/janis-terminal:latestaf56e77ca587
libtasn1-6@4.13-2
no fix listed

Open the chart page →

14,270
terminalmancloudve0.3.41 of 1See more

terminalman cloudve 0.3.4

1 of the 1 container images this version deploys carry CVE-2018-1000654.

Container imageDigestPackageFixed in
cloudve/ttyd:latestd79c1c5881c0
libtasn1-6@4.13-2
no fix listed

Open the chart page →

13,156
h2-databasecnieg1.0.31 of 1See more

h2-database cnieg 1.0.3

1 of the 1 container images this version deploys carry CVE-2018-1000654.

Container imageDigestPackageFixed in
oscarfonts/h2:alpinef45075ef301f
libtasn1@4.13-r0
4.14-r0

Open the chart page →

712
pulsarcnieg1.0.81 of 2See more

pulsar cnieg 1.0.8

1 of the 2 container images this version deploys carry CVE-2018-1000654.

Container imageDigestPackageFixed in
apachepulsar/pulsar-manager:v0.1.0b341ef76a852
libtasn1@4.13-r0
4.14-r0

Open the chart page →

16,860
logstream-mastercriblio2.9.91 of 1See more

logstream-master criblio 2.9.9

1 of the 1 container images this version deploys carry CVE-2018-1000654.

Container imageDigestPackageFixed in
cribl/cribl:3.0.2762747cb6796
libtasn1-6@4.13-2
no fix listed

Open the chart page →

9,287
pagescrypticcode-helmchart1.0.01 of 3See more

pages crypticcode-helmchart 1.0.0

1 of the 3 container images this version deploys carry CVE-2018-1000654.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
libtasn1-6@4.13-2
no fix listed

Open the chart page →

20,190
pagesdalston-pages1.0.01 of 3See more

pages dalston-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2018-1000654.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
libtasn1-6@4.13-2
no fix listed

Open the chart page →

20,190
pagesdaman-dell-kuber1.0.01 of 3See more

pages daman-dell-kuber 1.0.0

1 of the 3 container images this version deploys carry CVE-2018-1000654.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
libtasn1-6@4.13-2
no fix listed

Open the chart page →

20,190
mongodb-bi-connectordasmeta1.0.31 of 1See more

mongodb-bi-connector dasmeta 1.0.3

1 of the 1 container images this version deploys carry CVE-2018-1000654.

Container imageDigestPackageFixed in
dasmeta/mongodb-bi-connector:1.0.3fa657960dfec
libtasn1-6@4.13-2
no fix listed

Open the chart page →

5,832
datacubedatacube-charts0.18.21 of 1See more

datacube datacube-charts 0.18.2

1 of the 1 container images this version deploys carry CVE-2018-1000654.

Container imageDigestPackageFixed in
opendatacube/wms:latest1b90cdf68831
libtasn1-6@4.13-2
no fix listed

Open the chart page →

27,728
datacube-datadatacube-charts0.2.61 of 1See more

datacube-data datacube-charts 0.2.6

1 of the 1 container images this version deploys carry CVE-2018-1000654.

Container imageDigestPackageFixed in
geoscienceaustralia/dea-k8s-data:latestf4039b45572a
libtasn1-6@4.13-2
no fix listed

Open the chart page →

18,863

Container images carrying it

216 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/fleeksoft/hbase/hbase-base:2.4.13.2c144bdd688d7
libtasn1@4.13-r0
4.14-r0
1
ghcr.io/jfwenisch/discord-experiencebot:latestb52ff07f9f0c
libtasn1-6@4.13-2
no fix listed
1
ghcr.io/kore3lab/kore-board.terminal:v0.5.5f52e66eff50b
libtasn1-6@4.13-2
no fix listed
1
ghcr.io/linuxserver/booksonic-air:version-v2009.1.0baa4fa9549dc
libtasn1-6@4.13-2
no fix listed
1
ghcr.io/linuxserver/resilio-sync:version-2.7.2.1375605b6d544028
libtasn1-6@4.13-2
no fix listed
1
ghcr.io/perceptolab/devops-demo-app:0.0.2cdc0658c40fb
libtasn1-6@4.13-2
no fix listed
1
ghcr.io/stacksimplify/kube-usermgmt-webapp:1.0.0-mysqldb41b45003c6b6
libtasn1@4.12-r2
4.12-r4
1
ghcr.io/wbstack/queryservice:0.3.6_0.6b83b5b81d4b6
libtasn1@4.13-r0
4.14-r0
1
ghcr.io/wbstack/queryservice-updater:0.3.84_3.97525a57ac3f1
libtasn1@4.13-r0
4.14-r0
1
ghcr.io/wmde/wbaas-backup:v0.1.78e6a9516eac0
libtasn1-6@4.13-2
no fix listed
1
mcr.microsoft.com/mssql/server:2017-latest13221ac5f673
libtasn1-6@4.13-2
no fix listed
1
mcr.microsoft.com/mssql/server:2017-latestfbf79e0fea59
libtasn1-6@4.13-2
no fix listed
1
public.ecr.aws/spotinst/spot-network-client:1.0.0-8-lb_endpoint-d0ec127efcecf98b912
libtasn1-6@4.13-2
no fix listed
1
quay.io/evryfs/docker-mcrouter:0.40.0-9a2d3a4c67b0f
libtasn1-6@4.13-2
no fix listed
1
quay.io/mongodb/mongodb-enterprise-operator:1.8.2a1c3843b03bc
libtasn1-6@4.7-3ubuntu0.16.04.3
4.7-3ubuntu0.16.04.3+esm2
1
quay.io/opsmxpublic/spin-sample-pipeline:v1.0.1c6a934439421
libtasn1-6@4.7-3ubuntu0.16.04.3
4.7-3ubuntu0.16.04.3+esm2
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.