StackRadar

CVE-2018-12545

High

Advisory

Published 28 Mar 2019In the index since 6 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.051
92nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
34
of 17,781 indexed, latest versions
Container images
31
deployed by those charts
Fix available
1 of 1
affected package

Uncontrolled Resource Consumption in org.eclipse.jetty:jetty-server

Carried by container images the latest versions of 34 of 17,781 indexed charts deploy, on 31 images.

Affected packageAffected versionsFixed inImages
jetty-servermaven9.3.11.v20160721, 9.3.19.v20170502, 9.3.20.v20170531, 9.3.24.v20180605+6 more9.3.25.v20180904, 9.4.12.v2018083031
OSV records
GHSA-h2f4-v4c4-6wx4

Charts affected

34 by stars
ChartLatestAffected imagesRadar Score
sparkmicrosoft1.0.42 of 3See more

spark microsoft 1.0.4

2 of the 3 container images this version deploys carry CVE-2018-12545.

Container imageDigestPackageFixed in
dbanda/livy:0.80ca125e68e53
jetty-server@9.3.24.v20180605
9.3.25.v20180904
dbanda/spark:2.4.6d0e6367876ae
jetty-server@9.3.24.v20180605
9.3.25.v20180904

Open the chart page →

13,738
hivebigdata-chartsVerified publisher0.1.81 of 1See more

hive bigdata-charts 0.1.8

1 of the 1 container images this version deploys carry CVE-2018-12545.

Container imageDigestPackageFixed in
5200710/hive:3.1.3-postgresql-metastoree34ab066d2ed
jetty-server@9.3.20.v20170531
9.3.25.v20180904

Open the chart page →

7,166
hive-metastoreheva-helm-chartsVerified publisher0.2.01 of 2See more

hive-metastore heva-helm-charts 0.2.0

1 of the 2 container images this version deploys carry CVE-2018-12545.

Container imageDigestPackageFixed in
sslhep/hive-metastore:3.1.39e80af083079
jetty-server@9.3.20.v20170531
9.3.25.v20180904

Open the chart page →

7,335
ignitecloudnativeapp1.0.01 of 1See more

ignite cloudnativeapp 1.0.0

1 of the 1 container images this version deploys carry CVE-2018-12545.

Container imageDigestPackageFixed in
apacheignite/ignite:2.7.0d7deab68b8fa
jetty-server@9.3.20.v20170531
9.3.25.v20180904

Open the chart page →

7,891
hbasedmwm-bigdataVerified publisher0.1.61 of 5See more

hbase dmwm-bigdata 0.1.6

1 of the 5 container images this version deploys carry CVE-2018-12545.

Container imageDigestPackageFixed in
gradiant/hbase-base:2.0.1a1ee6de94c04
jetty-server@9.3.19.v20170502
9.3.25.v20180904

Open the chart page →

13,392
opentsdbdmwm-bigdataVerified publisher0.1.71 of 6See more

opentsdb dmwm-bigdata 0.1.7

1 of the 6 container images this version deploys carry CVE-2018-12545.

Container imageDigestPackageFixed in
gradiant/hbase-base:2.0.1a1ee6de94c04
jetty-server@9.3.19.v20170502
9.3.25.v20180904

Open the chart page →

17,511
hbasegradiant-bigdataVerified publisher0.1.61 of 5See more

hbase gradiant-bigdata 0.1.6

1 of the 5 container images this version deploys carry CVE-2018-12545.

Container imageDigestPackageFixed in
gradiant/hbase-base:2.0.1a1ee6de94c04
jetty-server@9.3.19.v20170502
9.3.25.v20180904

Open the chart page →

13,392
signserver-cesignserverOfficialVerified publisher2.3.51 of 1See more

signserver-ce signserver 2.3.5

1 of the 1 container images this version deploys carry CVE-2018-12545.

Container imageDigestPackageFixed in
keyfactor/signserver-ce:7.3.2798fbbe00283
jetty-server@9.4.8.v20171121
9.4.12.v20180830

Open the chart page →

2,406
sdn-controllerassist-iot-sdn-controller2.4.01 of 1See more

sdn-controller assist-iot-sdn-controller 2.4.0

1 of the 1 container images this version deploys carry CVE-2018-12545.

Container imageDigestPackageFixed in
assistiot/sdn_controller:2.4.0ea254b6d8a31
jetty-server@9.4.11.v20180605
9.4.12.v20180830

Open the chart page →

7,936
tsoragecetic0.4.111 of 8See more

tsorage cetic 0.4.11

1 of the 8 container images this version deploys carry CVE-2018-12545.

Container imageDigestPackageFixed in
confluentinc/cp-kafka:5.0.1c87b1c07fb53
jetty-server@9.4.11.v20180605
9.4.12.v20180830

Open the chart page →

12,018
cassandra-reapercloudnativeapp0.2.01 of 1See more

cassandra-reaper cloudnativeapp 0.2.0

1 of the 1 container images this version deploys carry CVE-2018-12545.

Container imageDigestPackageFixed in
thelastpickle/cassandra-reaper:1.3.09c53996c457d
jetty-server@9.4.6.v20170531
9.4.12.v20180830

Open the chart page →

5,078
gocdcloudnativeapp1.9.21 of 2See more

gocd cloudnativeapp 1.9.2

1 of the 2 container images this version deploys carry CVE-2018-12545.

Container imageDigestPackageFixed in
gocd/gocd-server:v19.3.02da45cb09d57
jetty-server@9.4.11.v20180605
9.4.12.v20180830

Open the chart page →

9,144
metabasecloudnativeapp0.5.01 of 1See more

metabase cloudnativeapp 0.5.0

1 of the 1 container images this version deploys carry CVE-2018-12545.

Container imageDigestPackageFixed in
metabase/metabase:v0.31.2ffb2dccacefc
jetty-server@9.4.11.v20180605
9.4.12.v20180830

Open the chart page →

4,601
neo4jcloudnativeapp1.0.01 of 1See more

neo4j cloudnativeapp 1.0.0

1 of the 1 container images this version deploys carry CVE-2018-12545.

Container imageDigestPackageFixed in
library/neo4j:3.4.5-enterprisea1ba477fa412
jetty-server@9.4.11.v20180605
9.4.12.v20180830

Open the chart page →

2,837
prestocloudnativeapp0.1.11 of 1See more

presto cloudnativeapp 0.1.1

1 of the 1 container images this version deploys carry CVE-2018-12545.

Container imageDigestPackageFixed in
bivas/presto:0.19605545994f806
jetty-server@9.4.8.v20171121
9.4.12.v20180830

Open the chart page →

7,226
rundeckcloudnativeapp0.1.01 of 2See more

rundeck cloudnativeapp 0.1.0

1 of the 2 container images this version deploys carry CVE-2018-12545.

Container imageDigestPackageFixed in
rundeck/rundeck:3.0.16b13e8059ad72
jetty-server@9.4.11.v20180605
9.4.12.v20180830

Open the chart page →

23,665
spark-history-servercloudnativeapp1.0.01 of 3See more

spark-history-server cloudnativeapp 1.0.0

1 of the 3 container images this version deploys carry CVE-2018-12545.

Container imageDigestPackageFixed in
lightbend/spark-history-server:2.4.00bedf37f428a
jetty-server@9.3.24.v20180605
9.3.25.v20180904

Open the chart page →

14,066
pulsarcnieg1.0.82 of 2See more

pulsar cnieg 1.0.8

2 of the 2 container images this version deploys carry CVE-2018-12545.

Container imageDigestPackageFixed in
apachepulsar/pulsar:2.6.14db6ff0b4045
jetty-server@9.4.11.v20180605
9.4.12.v20180830
apachepulsar/pulsar-manager:v0.1.0b341ef76a852
jetty-server@9.4.10.v20180503
9.4.12.v20180830

Open the chart page →

16,860
spark-standalonedmwm-bigdataVerified publisher0.1.01 of 2See more

spark-standalone dmwm-bigdata 0.1.0

1 of the 2 container images this version deploys carry CVE-2018-12545.

Container imageDigestPackageFixed in
gradiant/spark:2.4.4-python-alpine97657d56e927
jetty-server@9.3.24.v20180605
9.3.25.v20180904

Open the chart page →

6,147
spark-shuffleduyet0.2.01 of 1See more

spark-shuffle duyet 0.2.0

1 of the 1 container images this version deploys carry CVE-2018-12545.

Container imageDigestPackageFixed in
snappydatainc/spark-shuffle:v2.2.0-kubernetes-0.5.1fd4b2070466f
jetty-server@9.3.11.v20160721
9.3.25.v20180904

Open the chart page →

5,639
geonetwork-k8sgeonetwork-k8sVerified publisher4.2.82 of 5See more

geonetwork-k8s geonetwork-k8s 4.2.8

2 of the 5 container images this version deploys carry CVE-2018-12545.

Container imageDigestPackageFixed in
geonetwork/gn-cloud-ogc-api-records-service:4.2.8-020c9bb761f67
jetty-server@9.4.11.v20180605
9.4.12.v20180830
jingking/geonetwork-hnap:4.2.843e74ab234e1
jetty-server@9.4.11.v20180605
9.4.12.v20180830

Open the chart page →

34,754
video-analytics-demogpu-operator0.1.91 of 3See more

video-analytics-demo gpu-operator 0.1.9

1 of the 3 container images this version deploys carry CVE-2018-12545.

Container imageDigestPackageFixed in
anguda/ant-media:2.5c435285fc241
jetty-server@9.4.11.v20180605
9.4.12.v20180830

Open the chart page →

15,722
opentsdbgradiant-bigdataVerified publisher0.1.71 of 6See more

opentsdb gradiant-bigdata 0.1.7

1 of the 6 container images this version deploys carry CVE-2018-12545.

Container imageDigestPackageFixed in
gradiant/hbase-base:2.0.1a1ee6de94c04
jetty-server@9.3.19.v20170502
9.3.25.v20180904

Open the chart page →

17,511
spark-standalonegradiant-bigdataVerified publisher0.1.01 of 2See more

spark-standalone gradiant-bigdata 0.1.0

1 of the 2 container images this version deploys carry CVE-2018-12545.

Container imageDigestPackageFixed in
gradiant/spark:2.4.4-python-alpine97657d56e927
jetty-server@9.3.24.v20180605
9.3.25.v20180904

Open the chart page →

6,147
ubooquityhalkeye0.1.11 of 1See more

ubooquity halkeye 0.1.1

1 of the 1 container images this version deploys carry CVE-2018-12545.

Container imageDigestPackageFixed in
linuxserver/ubooquity:2.1.2-ls369932d6759112
jetty-server@9.4.0.v20161208
9.4.12.v20180830

Open the chart page →

4,303
ibm-kerify-devibm-charts1.0.01 of 1See more

ibm-kerify-dev ibm-charts 1.0.0

1 of the 1 container images this version deploys carry CVE-2018-12545.

Container imageDigestPackageFixed in
ibmcom/icp-sert-bats:3.2.0b558f2b444ae
jetty-server@9.4.11.v20180605
9.4.12.v20180830

Open the chart page →

8,221
pinotinseefrlab0.2.01 of 2See more

pinot inseefrlab 0.2.0

1 of the 2 container images this version deploys carry CVE-2018-12545.

Container imageDigestPackageFixed in
apachepinot/pinot:latest-jdk110018bb04ced7
jetty-server@9.3.24.v20180605
9.3.25.v20180904

Open the chart page →

10,777
jenkinsjenkins-x0.10.381 of 2See more

jenkins jenkins-x 0.10.38

1 of the 2 container images this version deploys carry CVE-2018-12545.

Container imageDigestPackageFixed in
jenkinsci/jenkins:2.67a1f33f004659
jetty-server@9.4.5.v20170502
9.4.12.v20180830

Open the chart page →

10,682
pulsarv2milvus-helm2.7.81 of 4See more

pulsarv2 milvus-helm 2.7.8

1 of the 4 container images this version deploys carry CVE-2018-12545.

Container imageDigestPackageFixed in
apachepulsar/pulsar-manager:v0.1.0b341ef76a852
jetty-server@9.4.10.v20180503
9.4.12.v20180830

Open the chart page →

15,855
jmxproxypndaproject0.1.01 of 1See more

jmxproxy pndaproject 0.1.0

1 of the 1 container images this version deploys carry CVE-2018-12545.

Container imageDigestPackageFixed in
gradiant/jmxproxy:3.4.045eceb1bc55c
jetty-server@9.4.8.v20171121
9.4.12.v20180830

Open the chart page →

4,177
hive-metastorepresto-loadbalancer0.2.31 of 1See more

hive-metastore presto-loadbalancer 0.2.3

1 of the 1 container images this version deploys carry CVE-2018-12545.

Container imageDigestPackageFixed in
datappeal/hive-metastore:lateste38c085a3567
jetty-server@9.3.24.v20180605
9.3.25.v20180904

Open the chart page →

9,606
newrelic-private-minionsstarcher0.1.21 of 1See more

newrelic-private-minion sstarcher 0.1.2

1 of the 1 container images this version deploys carry CVE-2018-12545.

Container imageDigestPackageFixed in
quay.io/newrelic/synthetics-minion:2.2.2198c26e1b8f70
jetty-server@9.4.11.v20180605
9.4.12.v20180830

Open the chart page →

3,164
trinostatcan1.23.41 of 2See more

trino statcan 1.23.4

1 of the 2 container images this version deploys carry CVE-2018-12545.

Container imageDigestPackageFixed in
trinodb/trino:405ee80ab5eeab2
jetty-server@9.3.24.v20180605
9.3.25.v20180904

Open the chart page →

13,767
ubooquityvhdirkVerified publisher0.1.31 of 1See more

ubooquity vhdirk 0.1.3

1 of the 1 container images this version deploys carry CVE-2018-12545.

Container imageDigestPackageFixed in
linuxserver/ubooquity:2.1.2-ls369932d6759112
jetty-server@9.4.0.v20161208
9.4.12.v20180830

Open the chart page →

4,303

Container images carrying it

31 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
gradiant/hbase-base:2.0.1a1ee6de94c04
jetty-server@9.3.19.v20170502
9.3.25.v20180904
4
apachepulsar/pulsar-manager:v0.1.0b341ef76a852
jetty-server@9.4.10.v20180503
9.4.12.v20180830
2
gradiant/spark:2.4.4-python-alpine97657d56e927
jetty-server@9.3.24.v20180605
9.3.25.v20180904
2
linuxserver/ubooquity:2.1.2-ls369932d6759112
jetty-server@9.4.0.v20161208
9.4.12.v20180830
2
5200710/hive:3.1.3-postgresql-metastoree34ab066d2ed
jetty-server@9.3.20.v20170531
9.3.25.v20180904
1
anguda/ant-media:2.5c435285fc241
jetty-server@9.4.11.v20180605
9.4.12.v20180830
1
apacheignite/ignite:2.7.0d7deab68b8fa
jetty-server@9.3.20.v20170531
9.3.25.v20180904
1
apachepinot/pinot:latest-jdk110018bb04ced7
jetty-server@9.3.24.v20180605
9.3.25.v20180904
1
apachepulsar/pulsar:2.6.14db6ff0b4045
jetty-server@9.4.11.v20180605
9.4.12.v20180830
1
assistiot/sdn_controller:2.4.0ea254b6d8a31
jetty-server@9.4.11.v20180605
9.4.12.v20180830
1
bivas/presto:0.19605545994f806
jetty-server@9.4.8.v20171121
9.4.12.v20180830
1
confluentinc/cp-kafka:5.0.1c87b1c07fb53
jetty-server@9.4.11.v20180605
9.4.12.v20180830
1
datappeal/hive-metastore:lateste38c085a3567
jetty-server@9.3.24.v20180605
9.3.25.v20180904
1
dbanda/livy:0.80ca125e68e53
jetty-server@9.3.24.v20180605
9.3.25.v20180904
1
dbanda/spark:2.4.6d0e6367876ae
jetty-server@9.3.24.v20180605
9.3.25.v20180904
1
geonetwork/gn-cloud-ogc-api-records-service:4.2.8-020c9bb761f67
jetty-server@9.4.11.v20180605
9.4.12.v20180830
1
gocd/gocd-server:v19.3.02da45cb09d57
jetty-server@9.4.11.v20180605
9.4.12.v20180830
1
gradiant/jmxproxy:3.4.045eceb1bc55c
jetty-server@9.4.8.v20171121
9.4.12.v20180830
1
ibmcom/icp-sert-bats:3.2.0b558f2b444ae
jetty-server@9.4.11.v20180605
9.4.12.v20180830
1
jenkinsci/jenkins:2.67a1f33f004659
jetty-server@9.4.5.v20170502
9.4.12.v20180830
1
jingking/geonetwork-hnap:4.2.843e74ab234e1
jetty-server@9.4.11.v20180605
9.4.12.v20180830
1
keyfactor/signserver-ce:7.3.2798fbbe00283
jetty-server@9.4.8.v20171121
9.4.12.v20180830
1
library/neo4j:3.4.5-enterprisea1ba477fa412
jetty-server@9.4.11.v20180605
9.4.12.v20180830
1
lightbend/spark-history-server:2.4.00bedf37f428a
jetty-server@9.3.24.v20180605
9.3.25.v20180904
1
metabase/metabase:v0.31.2ffb2dccacefc
jetty-server@9.4.11.v20180605
9.4.12.v20180830
1
rundeck/rundeck:3.0.16b13e8059ad72
jetty-server@9.4.11.v20180605
9.4.12.v20180830
1
snappydatainc/spark-shuffle:v2.2.0-kubernetes-0.5.1fd4b2070466f
jetty-server@9.3.11.v20160721
9.3.25.v20180904
1
sslhep/hive-metastore:3.1.39e80af083079
jetty-server@9.3.20.v20170531
9.3.25.v20180904
1
thelastpickle/cassandra-reaper:1.3.09c53996c457d
jetty-server@9.4.6.v20170531
9.4.12.v20180830
1
trinodb/trino:405ee80ab5eeab2
jetty-server@9.3.24.v20180605
9.3.25.v20180904
1
quay.io/newrelic/synthetics-minion:2.2.2198c26e1b8f70
jetty-server@9.4.11.v20180605
9.4.12.v20180830
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.