StackRadar

CVE-2018-12020

High

Advisory

Published 8 Jun 2018In the index since 6 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.085
95th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
123
of 17,781 indexed, latest versions
Container images
99
deployed by those charts
Fix available
2 of 2
affected packages

gnupg2 - security update

Carried by container images the latest versions of 123 of 17,781 indexed charts deploy, on 99 images.

Affected packageAffected versionsFixed inImages
gnupgdeb1.4.16-1ubuntu2.1, 1.4.16-1ubuntu2.4, 1.4.18-7+deb8u1, 1.4.18-7+deb8u3+2 more1.4.16-1ubuntu2.5, 1.4.18-7+deb8u5, 1.4.20-1ubuntu3.268
gnupg2deb2.1.18-6, 2.1.18-8~deb9u1, 2.2.4-1ubuntu12.1.18-8~deb9u2, 2.2.4-1ubuntu1.131
OSV records
UBUNTU-CVE-2018-12020DSA-4222-1DSA-4224-1
Also known as
USN-3675-1

Charts affected

123 by stars
ChartLatestAffected imagesRadar Score
pact-brokerqamatic0.1.01 of 2See more

pact-broker qamatic 0.1.0

1 of the 2 container images this version deploys carry CVE-2018-12020.

Container imageDigestPackageFixed in
library/postgres:9.6.25284ba74a106
gnupg@1.4.18-7+deb8u3
1.4.18-7+deb8u5

Open the chart page →

3,533
httpbinrgnu1.0.01 of 1See more

httpbin rgnu 1.0.0

1 of the 1 container images this version deploys carry CVE-2018-12020.

Container imageDigestPackageFixed in
citizenstig/httpbin:latestb81c818ccb86
gnupg@1.4.20-1ubuntu3.1
1.4.20-1ubuntu3.2

Open the chart page →

11,422
mauticromholdings0.1.31 of 3See more

mautic romholdings 0.1.3

1 of the 3 container images this version deploys carry CVE-2018-12020.

Container imageDigestPackageFixed in
mautic/mautic:2.13-apachea954c5868d76
gnupg@1.4.18-7+deb8u4
1.4.18-7+deb8u5

Open the chart page →

2,939
sentry-dbsentry0.9.41 of 10See more

sentry-db sentry 0.9.4

1 of the 10 container images this version deploys carry CVE-2018-12020.

Container imageDigestPackageFixed in
spoonest/clickhouse-tabix-web-client:stablefd2b754a5d37
gnupg@1.4.18-7+deb8u4
1.4.18-7+deb8u5

Open the chart page →

10,967
Wordresssix0.2.01 of 2See more

Wordress six 0.2.0

1 of the 2 container images this version deploys carry CVE-2018-12020.

Container imageDigestPackageFixed in
library/wordpress:4.8-apache6216f64ab88f
gnupg@1.4.18-7+deb8u4
1.4.18-7+deb8u5

Open the chart page →

1,339
dgbuildersmo-helm-chart6.0.01 of 3See more

dgbuilder smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2018-12020.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.07daa08b81954
gnupg@1.4.20-1ubuntu3.1
1.4.20-1ubuntu3.2

Open the chart page →

28,470
logsmo-helm-chart6.0.01 of 6See more

log smo-helm-chart 6.0.0

1 of the 6 container images this version deploys carry CVE-2018-12020.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.07daa08b81954
gnupg@1.4.20-1ubuntu3.1
1.4.20-1ubuntu3.2

Open the chart page →

29,220
msbsmo-helm-chart6.0.01 of 6See more

msb smo-helm-chart 6.0.0

1 of the 6 container images this version deploys carry CVE-2018-12020.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.07daa08b81954
gnupg@1.4.20-1ubuntu3.1
1.4.20-1ubuntu3.2

Open the chart page →

27,477
multicloudsmo-helm-chart6.0.01 of 14See more

multicloud smo-helm-chart 6.0.0

1 of the 14 container images this version deploys carry CVE-2018-12020.

Container imageDigestPackageFixed in
oomk8s/ubuntu-init:1.0.03adf3d21ad3b
gnupg@1.4.20-1ubuntu3.1
1.4.20-1ubuntu3.2

Open the chart page →

9,436
pndasmo-helm-chart6.0.01 of 3See more

pnda smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2018-12020.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.07daa08b81954
gnupg@1.4.20-1ubuntu3.1
1.4.20-1ubuntu3.2

Open the chart page →

27,477
pombasmo-helm-chart6.0.01 of 17See more

pomba smo-helm-chart 6.0.0

1 of the 17 container images this version deploys carry CVE-2018-12020.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.07daa08b81954
gnupg@1.4.20-1ubuntu3.1
1.4.20-1ubuntu3.2

Open the chart page →

29,220
portalsmo-helm-chart6.0.01 of 8See more

portal smo-helm-chart 6.0.0

1 of the 8 container images this version deploys carry CVE-2018-12020.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.07daa08b81954
gnupg@1.4.20-1ubuntu3.1
1.4.20-1ubuntu3.2

Open the chart page →

27,477
rabbitmqstakaterVerified publisher1.0.11 of 1See more

rabbitmq stakater 1.0.1

1 of the 1 container images this version deploys carry CVE-2018-12020.

Container imageDigestPackageFixed in
jorgeacetozi/rabbitmq-stomp:latestb851dab88101
gnupg@1.4.18-7+deb8u3
1.4.18-7+deb8u5

Open the chart page →

559
restful-distributed-lock-managerstakaterVerified publisher1.0.41 of 1See more

restful-distributed-lock-manager stakater 1.0.4

1 of the 1 container images this version deploys carry CVE-2018-12020.

Container imageDigestPackageFixed in
stakater/restful-distributed-lock-manager:0.5.34f8e409f30c2
gnupg@1.4.18-7+deb8u4
1.4.18-7+deb8u5

Open the chart page →

3,116
sonarqubestakaterVerified publisher0.10.31 of 2See more

sonarqube stakater 0.10.3

1 of the 2 container images this version deploys carry CVE-2018-12020.

Container imageDigestPackageFixed in
library/postgres:9.6.25284ba74a106
gnupg@1.4.18-7+deb8u3
1.4.18-7+deb8u5

Open the chart page →

11,841
democharttech-challenge0.1.01 of 4See more

demochart tech-challenge 0.1.0

1 of the 4 container images this version deploys carry CVE-2018-12020.

Container imageDigestPackageFixed in
grafana/grafana:5.1.0a6b37f9afdd9
gnupg2@2.1.18-8~deb9u1
2.1.18-8~deb9u2

Open the chart page →

3,632
standard-applicationthebitgram1.0.121 of 1See more

standard-application thebitgram 1.0.12

1 of the 1 container images this version deploys carry CVE-2018-12020.

Container imageDigestPackageFixed in
gcr.io/google_containers/echoserver:1.10cb5c1bddd1b5
gnupg@1.4.20-1ubuntu3.1
1.4.20-1ubuntu3.2

Open the chart page →

11,007
Wordressuvaise-wordpress0.2.01 of 2See more

Wordress uvaise-wordpress 0.2.0

1 of the 2 container images this version deploys carry CVE-2018-12020.

Container imageDigestPackageFixed in
library/wordpress:4.8-apache6216f64ab88f
gnupg@1.4.18-7+deb8u4
1.4.18-7+deb8u5

Open the chart page →

1,339
voteappvoting-app-helm-charts-repoVerified publisher1.0.01 of 5See more

voteapp voting-app-helm-charts-repo 1.0.0

1 of the 5 container images this version deploys carry CVE-2018-12020.

Container imageDigestPackageFixed in
kodekloud/examplevotingapp_worker:v1741e3aaaa812
gnupg2@2.1.18-8~deb9u1
2.1.18-8~deb9u2

Open the chart page →

8,262
workerappvoting-app-helm-charts-repoVerified publisher1.0.01 of 1See more

workerapp voting-app-helm-charts-repo 1.0.0

1 of the 1 container images this version deploys carry CVE-2018-12020.

Container imageDigestPackageFixed in
kodekloud/examplevotingapp_worker:v1741e3aaaa812
gnupg2@2.1.18-8~deb9u1
2.1.18-8~deb9u2

Open the chart page →

3,329
voteappvoting-app-helm-charts-repo-cloudVerified publisher1.0.01 of 5See more

voteapp voting-app-helm-charts-repo-cloud 1.0.0

1 of the 5 container images this version deploys carry CVE-2018-12020.

Container imageDigestPackageFixed in
kodekloud/examplevotingapp_worker:v1741e3aaaa812
gnupg2@2.1.18-8~deb9u1
2.1.18-8~deb9u2

Open the chart page →

8,262
workerappvoting-app-helm-charts-repo-cloudVerified publisher1.0.01 of 1See more

workerapp voting-app-helm-charts-repo-cloud 1.0.0

1 of the 1 container images this version deploys carry CVE-2018-12020.

Container imageDigestPackageFixed in
kodekloud/examplevotingapp_worker:v1741e3aaaa812
gnupg2@2.1.18-8~deb9u1
2.1.18-8~deb9u2

Open the chart page →

3,329
Wordresswordpress0.2.01 of 2See more

Wordress wordpress 0.2.0

1 of the 2 container images this version deploys carry CVE-2018-12020.

Container imageDigestPackageFixed in
library/wordpress:4.8-apache6216f64ab88f
gnupg@1.4.18-7+deb8u4
1.4.18-7+deb8u5

Open the chart page →

1,339

Container images carrying it

99 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
ibmcom/galera-mariadb:10.2.142dcde9774493
gnupg@1.4.18-7+deb8u4
1.4.18-7+deb8u5
1
ibmcom/icp-swift-sample:latestb5d8c6714dbc
gnupg@1.4.20-1ubuntu3.1
1.4.20-1ubuntu3.2
1
ibmcom/microclimate-theia:lateste17bdccc5030
gnupg@1.4.20-1ubuntu3.1
1.4.20-1ubuntu3.2
1
jenkinsci/jenkins:2.67a1f33f004659
gnupg2@2.1.18-6
2.1.18-8~deb9u2
1
jorgeacetozi/rabbitmq-stomp:latestb851dab88101
gnupg@1.4.18-7+deb8u3
1.4.18-7+deb8u5
1
konradkleine/docker-registry-frontend:v2181aad54ee64
gnupg@1.4.18-7+deb8u4
1.4.18-7+deb8u5
1
library/mysql:5.7.21691c55aabb3c
gnupg2@2.1.18-8~deb9u1
2.1.18-8~deb9u2
1
library/mysql:5.7.13a9a5b559f882
gnupg@1.4.18-7+deb8u1
1.4.18-7+deb8u5
1
library/mysql:5.7.14c8f03238ca17
gnupg@1.4.18-7+deb8u1
1.4.18-7+deb8u5
1
library/percona:5.7.17d5d7f368de4a
gnupg@1.4.18-7+deb8u3
1.4.18-7+deb8u5
1
library/postgres:9.6.52f2b1f4d9d83
gnupg@1.4.18-7+deb8u4
1.4.18-7+deb8u5
1
library/redis:4.0.60e773022cd65
gnupg@1.4.18-7+deb8u4
1.4.18-7+deb8u5
1
library/redis:2.8.23e507029ca6a1
gnupg@1.4.18-7+deb8u1
1.4.18-7+deb8u5
1
muluder/prograncontrollermcord:0.1.843b597a93da7
gnupg@1.4.20-1ubuntu3.1
1.4.20-1ubuntu3.2
1
mumoshu/kube-magic-ip-assigner:0.9.0-1.9.802808a23186b
gnupg2@2.1.18-8~deb9u1
2.1.18-8~deb9u2
1
ncsapolyglot/converters-avconv:latestc44b22eb58bb
gnupg2@2.1.18-8~deb9u1
2.1.18-8~deb9u2
1
ncsapolyglot/converters-openjpeg:latest2ba4af461d51
gnupg@1.4.18-7+deb8u3
1.4.18-7+deb8u5
1
neilpeterson/aks-helloworld:v1fb47732ef36b
gnupg2@2.1.18-8~deb9u1
2.1.18-8~deb9u2
1
neilpeterson/burst-scheduler:v1.23a8877032972
gnupg2@2.1.18-8~deb9u1
2.1.18-8~deb9u2
1
neilpeterson/chart-tweet:latest64fd8dab075f
gnupg2@2.1.18-8~deb9u1
2.1.18-8~deb9u2
1
neilpeterson/get-tweet:v28b645ac1a23e
gnupg@1.4.18-7+deb8u4
1.4.18-7+deb8u5
1
neilpeterson/osba-container-instances-demo:latest6527b05d5d03
gnupg@1.4.18-7+deb8u4
1.4.18-7+deb8u5
1
neilpeterson/osba-cosmos-mongodb-demo:latestf4940e84ed05
gnupg@1.4.18-7+deb8u4
1.4.18-7+deb8u5
1
neilpeterson/osba-mysql-demo:latest5859d68a6c9f
gnupg@1.4.18-7+deb8u4
1.4.18-7+deb8u5
1
neilpeterson/osba-storage-demo:latest29d229ab446e
gnupg@1.4.18-7+deb8u4
1.4.18-7+deb8u5
1
neilpeterson/osba-text-analytics-demo:latest969af3cb8466
gnupg@1.4.18-7+deb8u4
1.4.18-7+deb8u5
1
neilpeterson/process-tweet:latest39ce9f92e899
gnupg2@2.1.18-8~deb9u1
2.1.18-8~deb9u2
1
omecproject/onos-progran:1.0.05715e5648aa0
gnupg@1.4.20-1ubuntu3.1
1.4.20-1ubuntu3.2
1
oomk8s/ubuntu-init:1.0.03adf3d21ad3b
gnupg@1.4.20-1ubuntu3.1
1.4.20-1ubuntu3.2
1
opsmx11/issuegen:v2.1.05c50ca123d88
gnupg@1.4.16-1ubuntu2.4
1.4.16-1ubuntu2.5
1
osixia/phpldapadmin:0.7.058cce1b08592
gnupg2@2.1.18-6
2.1.18-8~deb9u2
1
pcm32/galaxy-postgres:9.6.5_for_18.01301fb89914ef
gnupg@1.4.18-7+deb8u4
1.4.18-7+deb8u5
1
percona/percona-xtradb-cluster:5.7.19eaa3fcb7a5a2
gnupg@1.4.18-7+deb8u3
1.4.18-7+deb8u5
1
polyakov/hapi-fhir-jpaserver-example:latestdbcef69146b8
gnupg@1.4.18-7+deb8u3
1.4.18-7+deb8u5
1
pposkrobko/risk-advisor:v1.0.0eaf260341dba
gnupg@1.4.20-1ubuntu3.1
1.4.20-1ubuntu3.2
1
raykrueger/riemann:0.2.14c8baf3de57bb
gnupg2@2.1.18-8~deb9u1
2.1.18-8~deb9u2
1
resouer/redis-slave:v2e2f198b49ba7
gnupg@1.4.16-1ubuntu2.1
1.4.16-1ubuntu2.5
1
richardchesterwood/k8s-fleetman-position-simulator:release20b540a28f5a6
gnupg2@2.1.18-6
2.1.18-8~deb9u2
1
richardchesterwood/k8s-fleetman-position-tracker:release336c43961214c
gnupg2@2.1.18-6
2.1.18-8~deb9u2
1
stakater/restful-distributed-lock-manager:0.5.34f8e409f30c2
gnupg@1.4.18-7+deb8u4
1.4.18-7+deb8u5
1
tensorflow/tensorflow:1.6.0-devel1e3172090703
gnupg@1.4.20-1ubuntu3.1
1.4.20-1ubuntu3.2
1
timothyclarke/wptagent:2018-01-2322c41e5ca7e2
gnupg@1.4.20-1ubuntu3.1
1.4.20-1ubuntu3.2
1
timothyclarke/wptserver:2018-03-0840a80ced8031
gnupg@1.4.18-7+deb8u4
1.4.18-7+deb8u5
1
tpdock/freeradius:2.2.93da600c95a49
gnupg@1.4.20-1ubuntu3.1
1.4.20-1ubuntu3.2
1
voltha/voltha-envoy:1.6.059ab2a00f712
gnupg@1.4.16-1ubuntu2.4
1.4.16-1ubuntu2.5
1
zenko/zenko-cosbench:0.0.6386a1f48ec0e
gnupg@1.4.18-7+deb8u3
1.4.18-7+deb8u5
1
gcr.io/google-containers/echoserver:1.910f4dbc8eeeb
gnupg@1.4.20-1ubuntu3.1
1.4.20-1ubuntu3.2
1
gcr.io/google_containers/echoserver:1.10cb5c1bddd1b5
gnupg@1.4.20-1ubuntu3.1
1.4.20-1ubuntu3.2
1
quay.io/helmpack/monocular-ui:v1.10.086b71e90319f
gnupg@1.4.18-7+deb8u4
1.4.18-7+deb8u5
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.