StackRadar

CVE-2018-14618

Critical

Advisory

Published 5 Sept 2018In the index since 6 Sept 2026
Severity
Critical
worst across findings
CVSS
9.8
base score, highest
EPSS
0.111
96th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
123
of 17,781 indexed, latest versions
Container images
98
deployed by those charts
Fix available
3 of 3
affected packages

Red Hat Security Advisory: curl security and bug fix update

Carried by container images the latest versions of 123 of 17,781 indexed charts deploy, on 98 images.

Affected packageAffected versionsFixed inImages
curldeb7.35.0-1ubuntu2.1, 7.35.0-1ubuntu2.3, 7.35.0-1ubuntu2.16, 7.38.0-4+deb8u4+17 more7.35.0-1ubuntu2.17, 7.38.0-4+deb8u12, 7.47.0-1ubuntu2.9, 7.52.1-5+deb9u777
curlapk7.57.0-r0, 7.58.0-r0, 7.58.0-r1, 7.59.0-r0+2 more7.61.1-r016
curlrpm7.29.0-51.el70:7.29.0-51.el7_6.35
OSV records
ALPINE-CVE-2018-14618UBUNTU-CVE-2018-14618RHSA-2019:1880DLA-1498-1DSA-4286-1
Also known as
USN-3765-1

Charts affected

123 by stars
ChartLatestAffected imagesRadar Score
trinopresto-loadbalancer0.2.101 of 2See more

trino presto-loadbalancer 0.2.10

1 of the 2 container images this version deploys carry CVE-2018-14618.

Container imageDigestPackageFixed in
sscaling/jmx-prometheus-exporter:0.3.011d9ee1b1e4a
curl@7.58.0-r1
7.61.1-r0

Open the chart page →

2,264
bookinforgnu1.0.01 of 7See more

bookinfo rgnu 1.0.0

1 of the 7 container images this version deploys carry CVE-2018-14618.

Container imageDigestPackageFixed in
pstauffer/curl:latest2663156457ab
curl@7.60.0-r1
7.61.1-r0

Open the chart page →

20,462
istio-bookinforgnu1.0.21 of 7See more

istio-bookinfo rgnu 1.0.2

1 of the 7 container images this version deploys carry CVE-2018-14618.

Container imageDigestPackageFixed in
pstauffer/curl:latest2663156457ab
curl@7.60.0-r1
7.61.1-r0

Open the chart page →

20,462
mauticromholdings0.1.31 of 3See more

mautic romholdings 0.1.3

1 of the 3 container images this version deploys carry CVE-2018-14618.

Container imageDigestPackageFixed in
mautic/mautic:2.13-apachea954c5868d76
curl@7.38.0-4+deb8u10
7.38.0-4+deb8u12

Open the chart page →

2,939
Wordresssix0.2.01 of 2See more

Wordress six 0.2.0

1 of the 2 container images this version deploys carry CVE-2018-14618.

Container imageDigestPackageFixed in
library/wordpress:4.8-apache6216f64ab88f
curl@7.38.0-4+deb8u7
7.38.0-4+deb8u12

Open the chart page →

1,339
consulsmo-helm-chart6.0.02 of 2See more

consul smo-helm-chart 6.0.0

2 of the 2 container images this version deploys carry CVE-2018-14618.

Container imageDigestPackageFixed in
library/consul:1.0.66ffe55dcc100
curl@7.58.0-r0
7.61.1-r0
oomk8s/consul:1.0.0ba60171909c7
curl@7.58.0-r0
7.61.1-r0

Open the chart page →

1,284
dgbuildersmo-helm-chart6.0.01 of 3See more

dgbuilder smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2018-14618.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.07daa08b81954
curl@7.47.0-1ubuntu2.7
7.47.0-1ubuntu2.9

Open the chart page →

28,470
logsmo-helm-chart6.0.01 of 6See more

log smo-helm-chart 6.0.0

1 of the 6 container images this version deploys carry CVE-2018-14618.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.07daa08b81954
curl@7.47.0-1ubuntu2.7
7.47.0-1ubuntu2.9

Open the chart page →

29,220
msbsmo-helm-chart6.0.01 of 6See more

msb smo-helm-chart 6.0.0

1 of the 6 container images this version deploys carry CVE-2018-14618.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.07daa08b81954
curl@7.47.0-1ubuntu2.7
7.47.0-1ubuntu2.9

Open the chart page →

27,477
pndasmo-helm-chart6.0.01 of 3See more

pnda smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2018-14618.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.07daa08b81954
curl@7.47.0-1ubuntu2.7
7.47.0-1ubuntu2.9

Open the chart page →

27,477
pombasmo-helm-chart6.0.01 of 17See more

pomba smo-helm-chart 6.0.0

1 of the 17 container images this version deploys carry CVE-2018-14618.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.07daa08b81954
curl@7.47.0-1ubuntu2.7
7.47.0-1ubuntu2.9

Open the chart page →

29,220
portalsmo-helm-chart6.0.01 of 8See more

portal smo-helm-chart 6.0.0

1 of the 8 container images this version deploys carry CVE-2018-14618.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.07daa08b81954
curl@7.47.0-1ubuntu2.7
7.47.0-1ubuntu2.9

Open the chart page →

27,477
grafanastakaterVerified publisher1.0.391 of 3See more

grafana stakater 1.0.39

1 of the 3 container images this version deploys carry CVE-2018-14618.

Container imageDigestPackageFixed in
grafana/grafana:5.2.1104f434d47c8
curl@7.52.1-5+deb9u6
7.52.1-5+deb9u7

Open the chart page →

1,355
logrotatestakaterVerified publisher1.0.191 of 1See more

logrotate stakater 1.0.19

1 of the 1 container images this version deploys carry CVE-2018-14618.

Container imageDigestPackageFixed in
stakater/logrotate:3.13.05c0e01c23993
curl@7.57.0-r0
7.61.1-r0

Open the chart page →

1,011
restful-distributed-lock-managerstakaterVerified publisher1.0.41 of 1See more

restful-distributed-lock-manager stakater 1.0.4

1 of the 1 container images this version deploys carry CVE-2018-14618.

Container imageDigestPackageFixed in
stakater/restful-distributed-lock-manager:0.5.34f8e409f30c2
curl@7.38.0-4+deb8u9
7.38.0-4+deb8u12

Open the chart page →

3,116
democharttech-challenge0.1.01 of 4See more

demochart tech-challenge 0.1.0

1 of the 4 container images this version deploys carry CVE-2018-14618.

Container imageDigestPackageFixed in
grafana/grafana:5.1.0a6b37f9afdd9
curl@7.52.1-5+deb9u5
7.52.1-5+deb9u7

Open the chart page →

3,632
standard-applicationthebitgram1.0.121 of 1See more

standard-application thebitgram 1.0.12

1 of the 1 container images this version deploys carry CVE-2018-14618.

Container imageDigestPackageFixed in
gcr.io/google_containers/echoserver:1.10cb5c1bddd1b5
curl@7.47.0-1ubuntu2.2
7.47.0-1ubuntu2.9

Open the chart page →

11,007
Wordressuvaise-wordpress0.2.01 of 2See more

Wordress uvaise-wordpress 0.2.0

1 of the 2 container images this version deploys carry CVE-2018-14618.

Container imageDigestPackageFixed in
library/wordpress:4.8-apache6216f64ab88f
curl@7.38.0-4+deb8u7
7.38.0-4+deb8u12

Open the chart page →

1,339
voteappvoting-app-helm-charts-repoVerified publisher1.0.01 of 5See more

voteapp voting-app-helm-charts-repo 1.0.0

1 of the 5 container images this version deploys carry CVE-2018-14618.

Container imageDigestPackageFixed in
kodekloud/examplevotingapp_worker:v1741e3aaaa812
curl@7.52.1-5+deb9u1
7.52.1-5+deb9u7

Open the chart page →

8,262
workerappvoting-app-helm-charts-repoVerified publisher1.0.01 of 1See more

workerapp voting-app-helm-charts-repo 1.0.0

1 of the 1 container images this version deploys carry CVE-2018-14618.

Container imageDigestPackageFixed in
kodekloud/examplevotingapp_worker:v1741e3aaaa812
curl@7.52.1-5+deb9u1
7.52.1-5+deb9u7

Open the chart page →

3,329
voteappvoting-app-helm-charts-repo-cloudVerified publisher1.0.01 of 5See more

voteapp voting-app-helm-charts-repo-cloud 1.0.0

1 of the 5 container images this version deploys carry CVE-2018-14618.

Container imageDigestPackageFixed in
kodekloud/examplevotingapp_worker:v1741e3aaaa812
curl@7.52.1-5+deb9u1
7.52.1-5+deb9u7

Open the chart page →

8,262
workerappvoting-app-helm-charts-repo-cloudVerified publisher1.0.01 of 1See more

workerapp voting-app-helm-charts-repo-cloud 1.0.0

1 of the 1 container images this version deploys carry CVE-2018-14618.

Container imageDigestPackageFixed in
kodekloud/examplevotingapp_worker:v1741e3aaaa812
curl@7.52.1-5+deb9u1
7.52.1-5+deb9u7

Open the chart page →

3,329
Wordresswordpress0.2.01 of 2See more

Wordress wordpress 0.2.0

1 of the 2 container images this version deploys carry CVE-2018-14618.

Container imageDigestPackageFixed in
library/wordpress:4.8-apache6216f64ab88f
curl@7.38.0-4+deb8u7
7.38.0-4+deb8u12

Open the chart page →

1,339

Container images carrying it

98 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
ibmcom/app-nav-was-controller:1.0.1a6748792da26
curl@7.29.0-51.el7
0:7.29.0-51.el7_6.3
1
ibmcom/galera-mariadb:10.2.142dcde9774493
curl@7.38.0-4+deb8u10
7.38.0-4+deb8u12
1
ibmcom/ibm-workload-scheduler-agent-dynamic-dev:9.4.0.047e4dc1e27cdf
curl@7.47.0-1ubuntu2.8
7.47.0-1ubuntu2.9
1
ibmcom/icp-swift-sample:latestb5d8c6714dbc
curl@7.47.0-1ubuntu2.7
7.47.0-1ubuntu2.9
1
ibmcom/microclimate-file-watcher:latestab3fd1fdfa18
curl@7.59.0-r0
7.61.1-r0
1
ibmcom/microclimate-portal:latested5505e5c7ec
curl@7.59.0-r0
7.61.1-r0
1
ibmcom/microclimate-theia:lateste17bdccc5030
curl@7.47.0-1ubuntu2.7
7.47.0-1ubuntu2.9
1
jenkinsci/jenkins:2.67a1f33f004659
curl@7.52.1-5
7.52.1-5+deb9u7
1
library/consul:1.0.66ffe55dcc100
curl@7.58.0-r0
7.61.1-r0
1
library/elasticsearch:2.4.641ed3a1a16b6
curl@7.52.1-5+deb9u6
7.52.1-5+deb9u7
1
library/percona:5.7.17d5d7f368de4a
curl@7.38.0-4+deb8u5
7.38.0-4+deb8u12
1
minio/minio:RELEASE.2017-12-28T01-21-00Z3611f1644cf5
curl@7.57.0-r0
7.61.1-r0
1
muluder/prograncontrollermcord:0.1.843b597a93da7
curl@7.47.0-1ubuntu2.5
7.47.0-1ubuntu2.9
1
mumoshu/kube-magic-ip-assigner:0.9.0-1.9.802808a23186b
curl@7.52.1-5+deb9u6
7.52.1-5+deb9u7
1
ncsapolyglot/converters-avconv:latestc44b22eb58bb
curl@7.52.1-5+deb9u3
7.52.1-5+deb9u7
1
ncsapolyglot/converters-openjpeg:latest2ba4af461d51
curl@7.38.0-4+deb8u5
7.38.0-4+deb8u12
1
neilpeterson/aks-helloworld:v1fb47732ef36b
curl@7.52.1-5+deb9u3
7.52.1-5+deb9u7
1
neilpeterson/burst-scheduler:v1.23a8877032972
curl@7.52.1-5+deb9u3
7.52.1-5+deb9u7
1
neilpeterson/chart-tweet:latest64fd8dab075f
curl@7.52.1-5+deb9u3
7.52.1-5+deb9u7
1
neilpeterson/get-tweet:v28b645ac1a23e
curl@7.38.0-4+deb8u10
7.38.0-4+deb8u12
1
neilpeterson/osba-container-instances-demo:latest6527b05d5d03
curl@7.38.0-4+deb8u9
7.38.0-4+deb8u12
1
neilpeterson/osba-cosmos-mongodb-demo:latestf4940e84ed05
curl@7.38.0-4+deb8u9
7.38.0-4+deb8u12
1
neilpeterson/osba-mysql-demo:latest5859d68a6c9f
curl@7.38.0-4+deb8u9
7.38.0-4+deb8u12
1
neilpeterson/osba-storage-demo:latest29d229ab446e
curl@7.38.0-4+deb8u9
7.38.0-4+deb8u12
1
neilpeterson/osba-text-analytics-demo:latest969af3cb8466
curl@7.38.0-4+deb8u10
7.38.0-4+deb8u12
1
neilpeterson/process-tweet:latest39ce9f92e899
curl@7.52.1-5+deb9u5
7.52.1-5+deb9u7
1
omecproject/onos-progran:1.0.05715e5648aa0
curl@7.47.0-1ubuntu2.5
7.47.0-1ubuntu2.9
1
oomk8s/consul:1.0.0ba60171909c7
curl@7.58.0-r0
7.61.1-r0
1
opsmx11/issuegen:v2.1.05c50ca123d88
curl@7.35.0-1ubuntu2.16
7.35.0-1ubuntu2.17
1
osixia/phpldapadmin:0.7.058cce1b08592
curl@7.52.1-5
7.52.1-5+deb9u7
1
percona/percona-xtradb-cluster:5.7.19eaa3fcb7a5a2
curl@7.38.0-4+deb8u6
7.38.0-4+deb8u12
1
polyakov/hapi-fhir-jpaserver-example:latestdbcef69146b8
curl@7.38.0-4+deb8u4
7.38.0-4+deb8u12
1
rawlingsj/build-controller:upstream306dd328e3d79
curl@7.59.0-r0
7.61.1-r0
1
raykrueger/riemann:0.2.14c8baf3de57bb
curl@7.52.1-5+deb9u1
7.52.1-5+deb9u7
1
resouer/redis-slave:v2e2f198b49ba7
curl@7.35.0-1ubuntu2.3
7.35.0-1ubuntu2.17
1
richardchesterwood/k8s-fleetman-position-simulator:release20b540a28f5a6
curl@7.52.1-5
7.52.1-5+deb9u7
1
richardchesterwood/k8s-fleetman-position-tracker:release336c43961214c
curl@7.52.1-5
7.52.1-5+deb9u7
1
stakater/logrotate:3.13.05c0e01c23993
curl@7.57.0-r0
7.61.1-r0
1
stakater/restful-distributed-lock-manager:0.5.34f8e409f30c2
curl@7.38.0-4+deb8u9
7.38.0-4+deb8u12
1
tensorflow/tensorflow:1.6.0-devel1e3172090703
curl@7.47.0-1ubuntu2.6
7.47.0-1ubuntu2.9
1
timothyclarke/wptagent:2018-01-2322c41e5ca7e2
curl@7.47.0-1ubuntu2.5
7.47.0-1ubuntu2.9
1
timothyclarke/wptserver:2018-03-0840a80ced8031
curl@7.38.0-4+deb8u9
7.38.0-4+deb8u12
1
tpdock/freeradius:2.2.93da600c95a49
curl@7.47.0-1ubuntu2.5
7.47.0-1ubuntu2.9
1
wiremind/sshd:latestb3d63ce7d198
curl@7.60.0-r1
7.61.1-r0
1
zenko/zenko-cosbench:0.0.6386a1f48ec0e
curl@7.38.0-4+deb8u10
7.38.0-4+deb8u12
1
gcr.io/google-containers/echoserver:1.910f4dbc8eeeb
curl@7.47.0-1ubuntu2.2
7.47.0-1ubuntu2.9
1
gcr.io/google_containers/echoserver:1.10cb5c1bddd1b5
curl@7.47.0-1ubuntu2.2
7.47.0-1ubuntu2.9
1
quay.io/helmpack/monocular-ui:v1.10.086b71e90319f
curl@7.38.0-4+deb8u10
7.38.0-4+deb8u12
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.