StackRadar

CVE-2018-1000654

Medium

Advisory

Published 20 Aug 2018In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
0.020
80th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
319
of 17,781 indexed, latest versions
Container images
216
deployed by those charts
Fix available
2 of 2
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 319 of 17,781 indexed charts deploy, on 216 images.

Affected packageAffected versionsFixed inImages
libtasn1-6deb3.4-3ubuntu0.1, 3.4-3ubuntu0.5, 3.4-3ubuntu0.6, 4.7-3ubuntu0.16.04.2+2 more4.7-3ubuntu0.16.04.3+esm2170
libtasn1apk4.12-r2, 4.13-r04.12-r4, 4.14-r046
OSV records
ALPINE-CVE-2018-1000654UBUNTU-CVE-2018-1000654
Also known as
USN-5352-1

Charts affected

319 by stars
ChartLatestAffected imagesRadar Score
pagesstephendillondell1.0.01 of 3See more

pages stephendillondell 1.0.0

1 of the 3 container images this version deploys carry CVE-2018-1000654.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
libtasn1-6@4.13-2
no fix listed

Open the chart page →

20,190
pagessunilb2590-pages1.0.01 of 3See more

pages sunilb2590-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2018-1000654.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
libtasn1-6@4.13-2
no fix listed

Open the chart page →

20,190
istio-discoverytemp-charts0.3.31 of 1See more

istio-discovery temp-charts 0.3.3

1 of the 1 container images this version deploys carry CVE-2018-1000654.

Container imageDigestPackageFixed in
istio/pilot:1.10.0294ca55bd1cc
libtasn1-6@4.13-2
no fix listed

Open the chart page →

10,568
istio-ingresstemp-charts0.3.31 of 1See more

istio-ingress temp-charts 0.3.3

1 of the 1 container images this version deploys carry CVE-2018-1000654.

Container imageDigestPackageFixed in
istio/proxyv2:1.10.088c6c693e67a
libtasn1-6@4.13-2
no fix listed

Open the chart page →

10,514
pagestest43221.0.01 of 3See more

pages test4322 1.0.0

1 of the 3 container images this version deploys carry CVE-2018-1000654.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
libtasn1-6@4.13-2
no fix listed

Open the chart page →

20,190
shenyutest-helm2.4.212 of 2See more

shenyu test-helm 2.4.21

2 of the 2 container images this version deploys carry CVE-2018-1000654.

Container imageDigestPackageFixed in
apache/shenyu-admin:2.4.2e8b7c4ddd069
libtasn1@4.13-r0
4.14-r0
apache/shenyu-bootstrap:2.4.20bd3b25c4be4
libtasn1@4.13-r0
4.14-r0

Open the chart page →

12,513
standard-applicationthebitgram1.0.121 of 1See more

standard-application thebitgram 1.0.12

1 of the 1 container images this version deploys carry CVE-2018-1000654.

Container imageDigestPackageFixed in
gcr.io/google_containers/echoserver:1.10cb5c1bddd1b5
libtasn1-6@4.7-3ubuntu0.16.04.2
4.7-3ubuntu0.16.04.3+esm2

Open the chart page →

11,007
pagesthiru-pages1.0.01 of 3See more

pages thiru-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2018-1000654.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
libtasn1-6@4.13-2
no fix listed

Open the chart page →

20,190
pagesthuy-pages1.0.01 of 3See more

pages thuy-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2018-1000654.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
libtasn1-6@4.13-2
no fix listed

Open the chart page →

20,190
todoapitodoapi-appVerified publisher0.1.01 of 2See more

todoapi todoapi-app 0.1.0

1 of the 2 container images this version deploys carry CVE-2018-1000654.

Container imageDigestPackageFixed in
mcr.microsoft.com/mssql/server:2017-latest13221ac5f673
libtasn1-6@4.13-2
no fix listed

Open the chart page →

6,793
lightstepupdater-lightstep-satellite1.2.21 of 1See more

lightstep updater-lightstep-satellite 1.2.2

1 of the 1 container images this version deploys carry CVE-2018-1000654.

Container imageDigestPackageFixed in
lightstep/collector:2021-01-26_23-02-36Z11c5569aaf3b
libtasn1-6@4.7-3ubuntu0.16.04.3
4.7-3ubuntu0.16.04.3+esm2

Open the chart page →

15,330
pagesvictor-pages1.0.01 of 3See more

pages victor-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2018-1000654.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
libtasn1-6@4.13-2
no fix listed

Open the chart page →

20,190
kube-monitoring-telegram-botviento-repository1.0.01 of 1See more

kube-monitoring-telegram-bot viento-repository 1.0.0

1 of the 1 container images this version deploys carry CVE-2018-1000654.

Container imageDigestPackageFixed in
vientoprojects/kubernetes-monitoring-telegram-bot:latesteb2a71531741
libtasn1-6@4.13-2
no fix listed

Open the chart page →

7,885
pageswalter1.0.01 of 3See more

pages walter 1.0.0

1 of the 3 container images this version deploys carry CVE-2018-1000654.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
libtasn1-6@4.13-2
no fix listed

Open the chart page →

20,190
queryservicewbstack0.2.11 of 1See more

queryservice wbstack 0.2.1

1 of the 1 container images this version deploys carry CVE-2018-1000654.

Container imageDigestPackageFixed in
ghcr.io/wbstack/queryservice:0.3.6_0.6b83b5b81d4b6
libtasn1@4.13-r0
4.14-r0

Open the chart page →

4,649
queryservice-updaterwbstack0.3.01 of 1See more

queryservice-updater wbstack 0.3.0

1 of the 1 container images this version deploys carry CVE-2018-1000654.

Container imageDigestPackageFixed in
ghcr.io/wbstack/queryservice-updater:0.3.84_3.97525a57ac3f1
libtasn1@4.13-r0
4.14-r0

Open the chart page →

3,176
wbaas-backupwbstack0.1.01 of 1See more

wbaas-backup wbstack 0.1.0

1 of the 1 container images this version deploys carry CVE-2018-1000654.

Container imageDigestPackageFixed in
ghcr.io/wmde/wbaas-backup:v0.1.78e6a9516eac0
libtasn1-6@4.13-2
no fix listed

Open the chart page →

9,743
emissary-ingresswenerme8.12.21 of 2See more

emissary-ingress wenerme 8.12.2

1 of the 2 container images this version deploys carry CVE-2018-1000654.

Container imageDigestPackageFixed in
istio/kubectl:1.5.10dbb7726d1bf0
libtasn1-6@4.13-2
no fix listed

Open the chart page →

10,843
clickhousezloi-space1.2.01 of 3See more

clickhouse zloi-space 1.2.0

1 of the 3 container images this version deploys carry CVE-2018-1000654.

Container imageDigestPackageFixed in
yandex/clickhouse-client:21.3863f94a0f607
libtasn1-6@4.13-2
no fix listed

Open the chart page →

9,207

Container images carrying it

216 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
flyway/flyway:6.4.422d97ceb0c47
libtasn1-6@4.13-2
no fix listed
79
codeurjc/toposervice:v1.0:v1.239fb4c11e6a49
libtasn1-6@4.13-2
no fix listed
13
oomk8s/readiness-check:2.0.2875814cc853d
libtasn1-6@4.7-3ubuntu0.16.04.3
4.7-3ubuntu0.16.04.3+esm2
11
marcelmay/hadoop-hdfs-fsimage-exporter:1.26292c0a41ffa
libtasn1@4.12-r2
4.12-r4
8
oomk8s/readiness-check:2.0.07daa08b81954
libtasn1-6@4.7-3ubuntu0.16.04.3
4.7-3ubuntu0.16.04.3+esm2
6
gradiant/hbase-base:2.0.1a1ee6de94c04
libtasn1@4.13-r0
4.14-r0
4
hyperledger/fabric-ca-tools:latest4ce6f43ded2e
libtasn1-6@4.7-3ubuntu0.16.04.3
4.7-3ubuntu0.16.04.3+esm2
4
hyperledger/fabric-couchdb:0.4.15f6c724592abf
libtasn1-6@4.7-3ubuntu0.16.04.3
4.7-3ubuntu0.16.04.3+esm2
4
library/mongo:4.2.12-bionic628741415fc9
libtasn1-6@4.13-2
no fix listed
4
library/mongo:4.4.66efa05203990
libtasn1-6@4.13-2
no fix listed
4
oscarsotosanchez/weatherservice:v1.0911ec961d10b
libtasn1-6@4.13-2
no fix listed
4
apache/shenyu-admin:2.4.2e8b7c4ddd069
libtasn1@4.13-r0
4.14-r0
3
apache/shenyu-bootstrap:2.4.20bd3b25c4be4
libtasn1@4.13-r0
4.14-r0
3
omecproject/cdn-video-repo:1.0.0:remote-v3d59ccb138ffb
libtasn1-6@4.7-3ubuntu0.16.04.3
4.7-3ubuntu0.16.04.3+esm2
3
quay.io/devtron/inception:7beef376-948-313784c3b91bebd3d
libtasn1-6@4.7-3ubuntu0.16.04.3
4.7-3ubuntu0.16.04.3+esm2
3
apachepulsar/pulsar-manager:v0.1.0b341ef76a852
libtasn1@4.13-r0
4.14-r0
2
freeradius/freeradius-server:3.0.2121c8bfa904d8
libtasn1-6@4.13-2
no fix listed
2
gradiant/opentsdb:2.4.0c33d53913869
libtasn1@4.13-r0
4.14-r0
2
istio/kubectl:1.5.10dbb7726d1bf0
libtasn1-6@4.13-2
no fix listed
2
istio/proxyv2:1.10.3a78b7a165744
libtasn1-6@4.13-2
no fix listed
2
library/cassandra:3.11.65aa8400b4b3b
libtasn1-6@4.13-2
no fix listed
2
library/mongo:4.2.358b25d51baa1
libtasn1-6@4.13-2
no fix listed
2
lightstep/collector:2021-01-26_23-02-36Z11c5569aaf3b
libtasn1-6@4.7-3ubuntu0.16.04.3
4.7-3ubuntu0.16.04.3+esm2
2
mbentley/omada-controller:4.3f4e682274bed
libtasn1-6@4.13-2
no fix listed
2
ngick8stesting/c3po-mmeinit:latest1e764eab77b4
libtasn1-6@4.13-2
no fix listed
2
omecproject/mcord-synchronizer:comac-1.0.0cfdb566dd949
libtasn1-6@4.7-3ubuntu0.16.04.3
4.7-3ubuntu0.16.04.3+esm2
2
wurstmeister/zookeeper:latest7a7fd44a7210
libtasn1-6@3.4-3ubuntu0.1
no fix listed
2
gcr.io/google_containers/kubernetes-dashboard-init-amd64:v1.0.0fbe12aa24de6
libtasn1-6@4.7-3ubuntu0.16.04.2
4.7-3ubuntu0.16.04.3+esm2
2
ghcr.io/linuxserver/openvpn-as:version-2.8.6-916f8e7d-ubuntu184ee0764310e7
libtasn1-6@4.13-2
no fix listed
2
a10networks/acos-prometheus-exporter:latest8dc58d434d71
libtasn1-6@4.13-2
no fix listed
1
allegroai/clearml-agent-k8s-base:1.24-21772827a01bb5
libtasn1-6@4.13-2
no fix listed
1
apacheignite/ignite:2.7.0d7deab68b8fa
libtasn1@4.13-r0
4.14-r0
1
apache/shenyu-admin:2.5.1e2be712fc4f4
libtasn1@4.13-r0
4.14-r0
1
apache/shenyu-bootstrap:2.5.11bd5756f6273
libtasn1@4.13-r0
4.14-r0
1
apache/skywalking-oap-server:8.1.0-es7641237e0299b
libtasn1@4.13-r0
4.14-r0
1
apache/skywalking-ui:8.1.067d50e4deff4
libtasn1@4.13-r0
4.14-r0
1
chetangautamm/repo:Opensips_Buildb4b94155ff5a
libtasn1-6@3.4-3ubuntu0.6
no fix listed
1
cheyang/distributed-tf:1.6.046cc34755493
libtasn1-6@4.7-3ubuntu0.16.04.3
4.7-3ubuntu0.16.04.3+esm2
1
cloudve/janis-terminal:latestaf56e77ca587
libtasn1-6@4.13-2
no fix listed
1
cloudve/ttyd:latestd79c1c5881c0
libtasn1-6@4.13-2
no fix listed
1
cradlepoint/pgbouncer:1.0.18f5720b0cd03
libtasn1-6@4.13-2
no fix listed
1
cribl/cribl:3.0.2762747cb6796
libtasn1-6@4.13-2
no fix listed
1
csiplugin/csi-neonsan:v1.2.21fa83d45417f
libtasn1-6@4.7-3ubuntu0.16.04.3
4.7-3ubuntu0.16.04.3+esm2
1
daskdev/dask-notebook:1.1.0052630f5ca04
libtasn1-6@4.13-2
no fix listed
1
dasmeta/mongodb-bi-connector:1.0.3fa657960dfec
libtasn1-6@4.13-2
no fix listed
1
datalust/seq:5.0.832-pre9c731bb207a6
libtasn1-6@4.7-3ubuntu0.16.04.3
4.7-3ubuntu0.16.04.3+esm2
1
dniel/api-posts:master45a667852f2a
libtasn1-6@4.13-2
no fix listed
1
elastictranscoder/media:627e21dc963ab3858c6b
libtasn1-6@4.13-2
no fix listed
1
elastictranscoder/media-storage:f6d861a026208b8c2359
libtasn1-6@4.13-2
no fix listed
1
elastictranscoder/transcoder:627e21dcb4a0327029e6
libtasn1-6@4.13-2
no fix listed
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.