StackRadar

CVE-2018-14048

Medium

Advisory

Published 13 Jul 2018In the index since 6 Sept 2026
Severity
Medium
worst across findings
CVSS
6.5
base score, highest
EPSS
0.034
88th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
164
of 17,781 indexed, latest versions
Container images
77
deployed by those charts
Fix available
3 of 3
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 164 of 17,781 indexed charts deploy, on 77 images.

Affected packageAffected versionsFixed inImages
libpng1.6deb1.6.34-1ubuntu0.18.04.1, 1.6.34-1ubuntu0.18.04.21.6.34-1ubuntu0.18.04.2+esm334
libpngapk1.6.29-r1, 1.6.34-r1, 1.6.35-r01.6.37-r030
libpngdeb1.2.54-1ubuntu1, 1.2.54-1ubuntu1.11.2.54-1ubuntu1.1+esm113
OSV records
ALPINE-CVE-2018-14048UBUNTU-CVE-2018-14048
Also known as
USN-5432-1, USN-8639-1

Charts affected

164 by stars
ChartLatestAffected imagesRadar Score
cachetsergiotocaliniVerified publisher1.0.01 of 1See more

cachet sergiotocalini 1.0.0

1 of the 1 container images this version deploys carry CVE-2018-14048.

Container imageDigestPackageFixed in
cachethq/docker:2.3.15a61ff0f67ea7
libpng@1.6.34-r1
1.6.37-r0

Open the chart page →

1,896
pagesshrutiujlan-pages1.0.01 of 3See more

pages shrutiujlan-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2018-14048.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
libpng1.6@1.6.34-1ubuntu0.18.04.2
1.6.34-1ubuntu0.18.04.2+esm3

Open the chart page →

20,190
pagessrinipages1.0.01 of 3See more

pages srinipages 1.0.0

1 of the 3 container images this version deploys carry CVE-2018-14048.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
libpng1.6@1.6.34-1ubuntu0.18.04.2
1.6.34-1ubuntu0.18.04.2+esm3

Open the chart page →

20,190
umsappstacksimplifyVerified publisher1.0.01 of 3See more

umsapp stacksimplify 1.0.0

1 of the 3 container images this version deploys carry CVE-2018-14048.

Container imageDigestPackageFixed in
ghcr.io/stacksimplify/kube-usermgmt-webapp:1.0.0-mysqldb41b45003c6b6
libpng@1.6.34-r1
1.6.37-r0

Open the chart page →

6,101
cerebrostakaterVerified publisher0.5.11 of 2See more

cerebro stakater 0.5.1

1 of the 2 container images this version deploys carry CVE-2018-14048.

Container imageDigestPackageFixed in
lmenezes/cerebro:0.8.13e860068e403
libpng@1.6.35-r0
1.6.37-r0

Open the chart page →

2,956
logrotatestakaterVerified publisher1.0.191 of 1See more

logrotate stakater 1.0.19

1 of the 1 container images this version deploys carry CVE-2018-14048.

Container imageDigestPackageFixed in
stakater/logrotate:3.13.05c0e01c23993
libpng@1.6.34-r1
1.6.37-r0

Open the chart page →

1,011
unifistartechnicaVerified publisher0.1.31 of 2See more

unifi startechnica 0.1.3

1 of the 2 container images this version deploys carry CVE-2018-14048.

Container imageDigestPackageFixed in
jacobalberty/unifi:v7.1.664a3616625dda
libpng1.6@1.6.34-1ubuntu0.18.04.2
1.6.34-1ubuntu0.18.04.2+esm3

Open the chart page →

14,493
pagesstephendillondell1.0.01 of 3See more

pages stephendillondell 1.0.0

1 of the 3 container images this version deploys carry CVE-2018-14048.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
libpng1.6@1.6.34-1ubuntu0.18.04.2
1.6.34-1ubuntu0.18.04.2+esm3

Open the chart page →

20,190
pagessunilb2590-pages1.0.01 of 3See more

pages sunilb2590-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2018-14048.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
libpng1.6@1.6.34-1ubuntu0.18.04.2
1.6.34-1ubuntu0.18.04.2+esm3

Open the chart page →

20,190
pagestest43221.0.01 of 3See more

pages test4322 1.0.0

1 of the 3 container images this version deploys carry CVE-2018-14048.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
libpng1.6@1.6.34-1ubuntu0.18.04.2
1.6.34-1ubuntu0.18.04.2+esm3

Open the chart page →

20,190
pagesthiru-pages1.0.01 of 3See more

pages thiru-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2018-14048.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
libpng1.6@1.6.34-1ubuntu0.18.04.2
1.6.34-1ubuntu0.18.04.2+esm3

Open the chart page →

20,190
pagesthuy-pages1.0.01 of 3See more

pages thuy-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2018-14048.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
libpng1.6@1.6.34-1ubuntu0.18.04.2
1.6.34-1ubuntu0.18.04.2+esm3

Open the chart page →

20,190
pagesvictor-pages1.0.01 of 3See more

pages victor-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2018-14048.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
libpng1.6@1.6.34-1ubuntu0.18.04.2
1.6.34-1ubuntu0.18.04.2+esm3

Open the chart page →

20,190
pageswalter1.0.01 of 3See more

pages walter 1.0.0

1 of the 3 container images this version deploys carry CVE-2018-14048.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
libpng1.6@1.6.34-1ubuntu0.18.04.2
1.6.34-1ubuntu0.18.04.2+esm3

Open the chart page →

20,190

Container images carrying it

77 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
opendatacube/restcube:latest91870111837c
libpng1.6@1.6.34-1ubuntu0.18.04.2
1.6.34-1ubuntu0.18.04.2+esm3
1
opendatacube/wms:latest1b90cdf68831
libpng1.6@1.6.34-1ubuntu0.18.04.2
1.6.34-1ubuntu0.18.04.2+esm3
1
openwhisk/ow-utils:1.0.0c80dba0de3aa
libpng1.6@1.6.34-1ubuntu0.18.04.2
1.6.34-1ubuntu0.18.04.2+esm3
1
oscarfonts/h2:alpinef45075ef301f
libpng@1.6.34-r1
1.6.37-r0
1
radarbase/kafka-manager:1.3.3.181d2af7dd5a4e
libpng@1.6.34-r1
1.6.37-r0
1
richardchesterwood/k8s-fleetman-api-gateway:release2518f946b9f05
libpng@1.6.29-r1
1.6.37-r0
1
richardchesterwood/k8s-fleetman-helm-demo:v1.0.0197f07fd1057
libpng@1.6.34-r1
1.6.37-r0
1
richardchesterwood/k8s-fleetman-webapp-angular:release2ed7d720878ac
libpng@1.6.34-r1
1.6.37-r0
1
rundeck/rundeck:3.2.74d64fe56f767
libpng@1.2.54-1ubuntu1.1
1.2.54-1ubuntu1.1+esm1
1
rundeck/rundeck:3.0.16b13e8059ad72
libpng@1.2.54-1ubuntu1.1
1.2.54-1ubuntu1.1+esm1
1
scrapinghub/splash:3.4.1a5f89bc84606
libpng1.6@1.6.34-1ubuntu0.18.04.2
1.6.34-1ubuntu0.18.04.2+esm3
1
seldonio/apife:0.2.7ba81b17f00eb
libpng@1.6.34-r1
1.6.37-r0
1
seldonio/apife:0.3.1eea0d3f578ca
libpng@1.6.35-r0
1.6.37-r0
1
seldonio/cluster-manager:0.2.729e362bb1ba2
libpng@1.6.34-r1
1.6.37-r0
1
sismics/docs:v1.10f4b0ef019cf1
libpng1.6@1.6.34-1ubuntu0.18.04.2
1.6.34-1ubuntu0.18.04.2+esm3
1
snappydatainc/spark-shuffle:v2.2.0-kubernetes-0.5.1fd4b2070466f
libpng@1.6.34-r1
1.6.37-r0
1
stakater/logrotate:3.13.05c0e01c23993
libpng@1.6.34-r1
1.6.37-r0
1
tensorflow/tensorflow:1.6.0-devel1e3172090703
libpng@1.2.54-1ubuntu1
1.2.54-1ubuntu1.1+esm1
1
thelastpickle/cassandra-reaper:1.3.09c53996c457d
libpng@1.6.34-r1
1.6.37-r0
1
timothyclarke/wptagent:2018-01-2322c41e5ca7e2
libpng@1.2.54-1ubuntu1
1.2.54-1ubuntu1.1+esm1
1
vinanrra/7dtd-server:v0.4.4f9534490bd2b
libpng1.6@1.6.34-1ubuntu0.18.04.2
1.6.34-1ubuntu0.18.04.2+esm3
1
voltha/voltha-onos:5.1.8e038acb950d3
libpng1.6@1.6.34-1ubuntu0.18.04.2
1.6.34-1ubuntu0.18.04.2+esm3
1
wavefronthq/proxy:9.2d1064d28f6eb
libpng1.6@1.6.34-1ubuntu0.18.04.2
1.6.34-1ubuntu0.18.04.2+esm3
1
ghcr.io/jfwenisch/discord-experiencebot:latestb52ff07f9f0c
libpng1.6@1.6.34-1ubuntu0.18.04.2
1.6.34-1ubuntu0.18.04.2+esm3
1
ghcr.io/linuxserver/booksonic-air:version-v2009.1.0baa4fa9549dc
libpng1.6@1.6.34-1ubuntu0.18.04.2
1.6.34-1ubuntu0.18.04.2+esm3
1
ghcr.io/stacksimplify/kube-usermgmt-webapp:1.0.0-mysqldb41b45003c6b6
libpng@1.6.34-r1
1.6.37-r0
1
quay.io/opsmxpublic/spin-sample-pipeline:v1.0.1c6a934439421
libpng@1.2.54-1ubuntu1.1
1.2.54-1ubuntu1.1+esm1
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.