StackRadar

CVE-2018-16435

Medium

Advisory

Published 3 Sept 2018In the index since 6 Sept 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
0.018
77th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
58
of 17,781 indexed, latest versions
Container images
51
deployed by those charts
Fix available
3 of 3
affected packages

lcms2 - security update

Carried by container images the latest versions of 58 of 17,781 indexed charts deploy, on 51 images.

Affected packageAffected versionsFixed inImages
lcms2deb2.5-0ubuntu4, 2.5-0ubuntu4.1, 2.6-3+b3, 2.6-3+deb8u1+2 more2.5-0ubuntu4.2, 2.6-3+deb8u2, 2.6-3ubuntu2.1, 2.8-4+deb9u139
lcms2apk2.9-r02.9-r112
chromium-browserdeb63.0.3239.84-0ubuntu0.16.04.169.0.3497.81-0ubuntu0.16.04.11
OSV records
ALPINE-CVE-2018-16435UBUNTU-CVE-2018-16435DLA-1496-1DSA-4284-1
Also known as
USN-3770-1

Charts affected

58 by stars
ChartLatestAffected imagesRadar Score
hivedmwm-bigdataVerified publisher0.1.62 of 5See more

hive dmwm-bigdata 0.1.6

2 of the 5 container images this version deploys carry CVE-2018-16435.

Container imageDigestPackageFixed in
bde2020/hive:2.3.2-postgresql-metastore620267768985
lcms2@2.6-3+deb8u1
2.6-3+deb8u2
gradiant/hive:2.3.2-postgresql-metastoreaae4f8a21f8b
lcms2@2.6-3+deb8u1
2.6-3+deb8u2

Open the chart page →

20,837
rocketmqgin1.1.01 of 2See more

rocketmq gin 1.1.0

1 of the 2 container images this version deploys carry CVE-2018-16435.

Container imageDigestPackageFixed in
apacherocketmq/rocketmq-dashboard:1.0.024799aff6cf8
lcms2@2.6-3+b3
2.6-3+deb8u2

Open the chart page →

9,154
dltbrokerassist-iot-distributed-broker0.2.01 of 9See more

dltbroker assist-iot-distributed-broker 0.2.0

1 of the 9 container images this version deploys carry CVE-2018-16435.

Container imageDigestPackageFixed in
hyperledger/fabric-ca-tools:latest4ce6f43ded2e
lcms2@2.6-3ubuntu2
2.6-3ubuntu2.1

Open the chart page →

77,706
dltloggingassist-iot-logging-auditing0.2.01 of 9See more

dltlogging assist-iot-logging-auditing 0.2.0

1 of the 9 container images this version deploys carry CVE-2018-16435.

Container imageDigestPackageFixed in
hyperledger/fabric-ca-tools:latest4ce6f43ded2e
lcms2@2.6-3ubuntu2
2.6-3ubuntu2.1

Open the chart page →

77,687
hadoopcloudnativeapp1.1.01 of 1See more

hadoop cloudnativeapp 1.1.0

1 of the 1 container images this version deploys carry CVE-2018-16435.

Container imageDigestPackageFixed in
danisla/hadoop:2.9.0255ba2dd739b
lcms2@2.6-3+b3
2.6-3+deb8u2

Open the chart page →

5,772
ignitecloudnativeapp1.0.01 of 1See more

ignite cloudnativeapp 1.0.0

1 of the 1 container images this version deploys carry CVE-2018-16435.

Container imageDigestPackageFixed in
apacheignite/ignite:2.7.0d7deab68b8fa
lcms2@2.9-r0
2.9-r1

Open the chart page →

7,891
tensorflow-notebookcloudnativeapp0.1.21 of 1See more

tensorflow-notebook cloudnativeapp 0.1.2

1 of the 1 container images this version deploys carry CVE-2018-16435.

Container imageDigestPackageFixed in
tensorflow/tensorflow:1.6.0-devel1e3172090703
lcms2@2.6-3ubuntu2
2.6-3ubuntu2.1

Open the chart page →

36,094
hbasedmwm-bigdataVerified publisher0.1.61 of 5See more

hbase dmwm-bigdata 0.1.6

1 of the 5 container images this version deploys carry CVE-2018-16435.

Container imageDigestPackageFixed in
gradiant/hbase-base:2.0.1a1ee6de94c04
lcms2@2.9-r0
2.9-r1

Open the chart page →

13,392
hive-metastoredmwm-bigdataVerified publisher0.1.31 of 2See more

hive-metastore dmwm-bigdata 0.1.3

1 of the 2 container images this version deploys carry CVE-2018-16435.

Container imageDigestPackageFixed in
bde2020/hive:2.3.2-postgresql-metastore620267768985
lcms2@2.6-3+deb8u1
2.6-3+deb8u2

Open the chart page →

6,882
opentsdbdmwm-bigdataVerified publisher0.1.71 of 6See more

opentsdb dmwm-bigdata 0.1.7

1 of the 6 container images this version deploys carry CVE-2018-16435.

Container imageDigestPackageFixed in
gradiant/hbase-base:2.0.1a1ee6de94c04
lcms2@2.9-r0
2.9-r1

Open the chart page →

17,511
hbasegradiant-bigdataVerified publisher0.1.61 of 5See more

hbase gradiant-bigdata 0.1.6

1 of the 5 container images this version deploys carry CVE-2018-16435.

Container imageDigestPackageFixed in
gradiant/hbase-base:2.0.1a1ee6de94c04
lcms2@2.9-r0
2.9-r1

Open the chart page →

13,392
hadoopmiuler1.2.21 of 1See more

hadoop miuler 1.2.2

1 of the 1 container images this version deploys carry CVE-2018-16435.

Container imageDigestPackageFixed in
danisla/hadoop:2.9.0255ba2dd739b
lcms2@2.6-3+b3
2.6-3+deb8u2

Open the chart page →

5,772
seldon-coreseldon0.2.72 of 3See more

seldon-core seldon 0.2.7

2 of the 3 container images this version deploys carry CVE-2018-16435.

Container imageDigestPackageFixed in
seldonio/apife:0.2.7ba81b17f00eb
lcms2@2.9-r0
2.9-r1
seldonio/cluster-manager:0.2.729e362bb1ba2
lcms2@2.9-r0
2.9-r1

Open the chart page →

13,798
graylogt3n1.0.01 of 3See more

graylog t3n 1.0.0

1 of the 3 container images this version deploys carry CVE-2018-16435.

Container imageDigestPackageFixed in
graylog2/server:2.4.3-38ff28c66e6c1
lcms2@2.6-3+deb8u1
2.6-3+deb8u2

Open the chart page →

8,063
kafka-devwikimedia0.2.01 of 1See more

kafka-dev wikimedia 0.2.0

1 of the 1 container images this version deploys carry CVE-2018-16435.

Container imageDigestPackageFixed in
wurstmeister/zookeeper:latest7a7fd44a7210
lcms2@2.5-0ubuntu4
2.5-0ubuntu4.2

Open the chart page →

41,427
dltkvassist-iot-data-integrity-verification0.2.01 of 9See more

dltkv assist-iot-data-integrity-verification 0.2.0

1 of the 9 container images this version deploys carry CVE-2018-16435.

Container imageDigestPackageFixed in
hyperledger/fabric-ca-tools:latest4ce6f43ded2e
lcms2@2.6-3ubuntu2
2.6-3ubuntu2.1

Open the chart page →

77,706
dltflassist-iot-dlt-based-fl0.2.01 of 9See more

dltfl assist-iot-dlt-based-fl 0.2.0

1 of the 9 container images this version deploys carry CVE-2018-16435.

Container imageDigestPackageFixed in
hyperledger/fabric-ca-tools:latest4ce6f43ded2e
lcms2@2.6-3ubuntu2
2.6-3ubuntu2.1

Open the chart page →

77,706
aks-helloworldazure-sample0.1.11 of 1See more

aks-helloworld azure-sample 0.1.1

1 of the 1 container images this version deploys carry CVE-2018-16435.

Container imageDigestPackageFixed in
neilpeterson/aks-helloworld:v1fb47732ef36b
lcms2@2.8-4
2.8-4+deb9u1

Open the chart page →

4,269
azure-voteazure-sample0.1.11 of 2See more

azure-vote azure-sample 0.1.1

1 of the 2 container images this version deploys carry CVE-2018-16435.

Container imageDigestPackageFixed in
neilpeterson/azure-vote-front:v384062718347c
lcms2@2.8-4
2.8-4+deb9u1

Open the chart page →

5,224
azure-vote-osbaazure-sample0.1.01 of 1See more

azure-vote-osba azure-sample 0.1.0

1 of the 1 container images this version deploys carry CVE-2018-16435.

Container imageDigestPackageFixed in
neilpeterson/azure-vote-front:v384062718347c
lcms2@2.8-4
2.8-4+deb9u1

Open the chart page →

4,269
osba-container-instances-demoazure-sample0.1.01 of 1See more

osba-container-instances-demo azure-sample 0.1.0

1 of the 1 container images this version deploys carry CVE-2018-16435.

Container imageDigestPackageFixed in
neilpeterson/osba-container-instances-demo:latest6527b05d5d03
lcms2@2.6-3+deb8u1
2.6-3+deb8u2

Open the chart page →

3,212
osba-cosmos-mongodb-demoazure-sample0.1.01 of 1See more

osba-cosmos-mongodb-demo azure-sample 0.1.0

1 of the 1 container images this version deploys carry CVE-2018-16435.

Container imageDigestPackageFixed in
neilpeterson/osba-cosmos-mongodb-demo:latestf4940e84ed05
lcms2@2.6-3+deb8u1
2.6-3+deb8u2

Open the chart page →

2,904
osba-mysql-demoazure-sample0.1.01 of 1See more

osba-mysql-demo azure-sample 0.1.0

1 of the 1 container images this version deploys carry CVE-2018-16435.

Container imageDigestPackageFixed in
neilpeterson/osba-mysql-demo:latest5859d68a6c9f
lcms2@2.6-3+deb8u1
2.6-3+deb8u2

Open the chart page →

2,895
osba-storage-demoazure-sample0.1.01 of 1See more

osba-storage-demo azure-sample 0.1.0

1 of the 1 container images this version deploys carry CVE-2018-16435.

Container imageDigestPackageFixed in
neilpeterson/osba-storage-demo:latest29d229ab446e
lcms2@2.6-3+deb8u1
2.6-3+deb8u2

Open the chart page →

3,425
osba-text-analytics-demoazure-sample0.1.01 of 1See more

osba-text-analytics-demo azure-sample 0.1.0

1 of the 1 container images this version deploys carry CVE-2018-16435.

Container imageDigestPackageFixed in
neilpeterson/osba-text-analytics-demo:latest969af3cb8466
lcms2@2.6-3+deb8u1
2.6-3+deb8u2

Open the chart page →

3,089
twitter-sentimentazure-sample0.1.03 of 3See more

twitter-sentiment azure-sample 0.1.0

3 of the 3 container images this version deploys carry CVE-2018-16435.

Container imageDigestPackageFixed in
neilpeterson/chart-tweet:latest64fd8dab075f
lcms2@2.8-4
2.8-4+deb9u1
neilpeterson/get-tweet:v28b645ac1a23e
lcms2@2.6-3+deb8u1
2.6-3+deb8u2
neilpeterson/process-tweet:latest39ce9f92e899
lcms2@2.8-4
2.8-4+deb9u1

Open the chart page →

11,833
honeywell-exporterbryanalves0.1.11 of 1See more

honeywell-exporter bryanalves 0.1.1

1 of the 1 container images this version deploys carry CVE-2018-16435.

Container imageDigestPackageFixed in
bryanalves/honeywell_exporter:0.0.1195f73dce8b21
lcms2@2.8-4
2.8-4+deb9u1

Open the chart page →

5,437
cassandra-reapercloudnativeapp0.2.01 of 1See more

cassandra-reaper cloudnativeapp 0.2.0

1 of the 1 container images this version deploys carry CVE-2018-16435.

Container imageDigestPackageFixed in
thelastpickle/cassandra-reaper:1.3.09c53996c457d
lcms2@2.9-r0
2.9-r1

Open the chart page →

5,078
cosbenchcloudnativeapp1.0.11 of 1See more

cosbench cloudnativeapp 1.0.1

1 of the 1 container images this version deploys carry CVE-2018-16435.

Container imageDigestPackageFixed in
zenko/zenko-cosbench:0.0.6386a1f48ec0e
lcms2@2.6-3+b3
2.6-3+deb8u2

Open the chart page →

4,906
distributed-tensorflowcloudnativeapp0.1.11 of 1See more

distributed-tensorflow cloudnativeapp 0.1.1

1 of the 1 container images this version deploys carry CVE-2018-16435.

Container imageDigestPackageFixed in
cheyang/distributed-tf:1.6.046cc34755493
lcms2@2.6-3ubuntu2
2.6-3ubuntu2.1

Open the chart page →

36,094
hazelcastcloudnativeapp1.3.11 of 1See more

hazelcast cloudnativeapp 1.3.1

1 of the 1 container images this version deploys carry CVE-2018-16435.

Container imageDigestPackageFixed in
hazelcast/hazelcast:3.11.2ca7d5589744f
lcms2@2.9-r0
2.9-r1

Open the chart page →

4,982
hlf-couchdbcloudnativeapp1.0.61 of 1See more

hlf-couchdb cloudnativeapp 1.0.6

1 of the 1 container images this version deploys carry CVE-2018-16435.

Container imageDigestPackageFixed in
hyperledger/fabric-couchdb:0.4.10c65891b6c237
lcms2@2.6-3ubuntu2
2.6-3ubuntu2.1

Open the chart page →

33,963
linkerdcloudnativeapp0.4.11 of 2See more

linkerd cloudnativeapp 0.4.1

1 of the 2 container images this version deploys carry CVE-2018-16435.

Container imageDigestPackageFixed in
buoyantio/linkerd:1.1.2f4048edaca6f
lcms2@2.6-3+deb8u1
2.6-3+deb8u2

Open the chart page →

1,419
metabasecloudnativeapp0.5.01 of 1See more

metabase cloudnativeapp 0.5.0

1 of the 1 container images this version deploys carry CVE-2018-16435.

Container imageDigestPackageFixed in
metabase/metabase:v0.31.2ffb2dccacefc
lcms2@2.9-r0
2.9-r1

Open the chart page →

4,601
prestocloudnativeapp0.1.11 of 1See more

presto cloudnativeapp 0.1.1

1 of the 1 container images this version deploys carry CVE-2018-16435.

Container imageDigestPackageFixed in
bivas/presto:0.19605545994f806
lcms2@2.8-4
2.8-4+deb9u1

Open the chart page →

7,226
puppet-forgecloudnativeapp0.1.81 of 2See more

puppet-forge cloudnativeapp 0.1.8

1 of the 2 container images this version deploys carry CVE-2018-16435.

Container imageDigestPackageFixed in
hickey/puppet_forge:1.10.0c1148a09ef20
lcms2@2.6-3+deb8u1
2.6-3+deb8u2

Open the chart page →

4,086
riemanncloudnativeapp0.1.21 of 1See more

riemann cloudnativeapp 0.1.2

1 of the 1 container images this version deploys carry CVE-2018-16435.

Container imageDigestPackageFixed in
raykrueger/riemann:0.2.14c8baf3de57bb
lcms2@2.8-4
2.8-4+deb9u1

Open the chart page →

6,497
spark-history-servercloudnativeapp1.0.01 of 3See more

spark-history-server cloudnativeapp 1.0.0

1 of the 3 container images this version deploys carry CVE-2018-16435.

Container imageDigestPackageFixed in
lightbend/spark-history-server:2.4.00bedf37f428a
lcms2@2.9-r0
2.9-r1

Open the chart page →

14,066
webpagetest-agentcloudnativeapp0.2.01 of 1See more

webpagetest-agent cloudnativeapp 0.2.0

1 of the 1 container images this version deploys carry CVE-2018-16435.

Container imageDigestPackageFixed in
timothyclarke/wptagent:2018-01-2322c41e5ca7e2
chromium-browser@63.0.3239.84-0ubuntu0.16.04.1
lcms2@2.6-3ubuntu2
69.0.3497.81-0ubuntu0.16.04.1
2.6-3ubuntu2.1

Open the chart page →

77,758
webpagetest-servercloudnativeapp0.2.11 of 1See more

webpagetest-server cloudnativeapp 0.2.1

1 of the 1 container images this version deploys carry CVE-2018-16435.

Container imageDigestPackageFixed in
timothyclarke/wptserver:2018-03-0840a80ced8031
lcms2@2.6-3+deb8u1
2.6-3+deb8u2

Open the chart page →

3,716
h2-databasecnieg1.0.31 of 1See more

h2-database cnieg 1.0.3

1 of the 1 container images this version deploys carry CVE-2018-16435.

Container imageDigestPackageFixed in
oscarfonts/h2:alpinef45075ef301f
lcms2@2.9-r0
2.9-r1

Open the chart page →

712
bae-activation-servicefiware0.1.21 of 1See more

bae-activation-service fiware 0.1.2

1 of the 1 container images this version deploys carry CVE-2018-16435.

Container imageDigestPackageFixed in
fiware/bae-activation-service:v0.0.33e3ec88d59ed
lcms2@2.6-3+deb8u1
2.6-3+deb8u2

Open the chart page →

3,186
my-chartfleet-web-app0.1.02 of 6See more

my-chart fleet-web-app 0.1.0

2 of the 6 container images this version deploys carry CVE-2018-16435.

Container imageDigestPackageFixed in
richardchesterwood/k8s-fleetman-position-simulator:release20b540a28f5a6
lcms2@2.8-4
2.8-4+deb9u1
richardchesterwood/k8s-fleetman-position-tracker:release336c43961214c
lcms2@2.8-4
2.8-4+deb9u1

Open the chart page →

24,296
comcastgeek-cookbookVerified publisher6.4.21 of 1See more

comcast geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2018-16435.

Container imageDigestPackageFixed in
billimek/comcastusage-for-influxdb:latest801bba1228ac
lcms2@2.6-3+deb8u1
2.6-3+deb8u2

Open the chart page →

3,245
hivegradiant-bigdataVerified publisher0.1.62 of 5See more

hive gradiant-bigdata 0.1.6

2 of the 5 container images this version deploys carry CVE-2018-16435.

Container imageDigestPackageFixed in
bde2020/hive:2.3.2-postgresql-metastore620267768985
lcms2@2.6-3+deb8u1
2.6-3+deb8u2
gradiant/hive:2.3.2-postgresql-metastoreaae4f8a21f8b
lcms2@2.6-3+deb8u1
2.6-3+deb8u2

Open the chart page →

20,837
hive-metastoregradiant-bigdataVerified publisher0.1.31 of 2See more

hive-metastore gradiant-bigdata 0.1.3

1 of the 2 container images this version deploys carry CVE-2018-16435.

Container imageDigestPackageFixed in
bde2020/hive:2.3.2-postgresql-metastore620267768985
lcms2@2.6-3+deb8u1
2.6-3+deb8u2

Open the chart page →

6,882
opentsdbgradiant-bigdataVerified publisher0.1.71 of 6See more

opentsdb gradiant-bigdata 0.1.7

1 of the 6 container images this version deploys carry CVE-2018-16435.

Container imageDigestPackageFixed in
gradiant/hbase-base:2.0.1a1ee6de94c04
lcms2@2.9-r0
2.9-r1

Open the chart page →

17,511
hapi-fhirhapi-fhirVerified publisher0.1.01 of 1See more

hapi-fhir hapi-fhir 0.1.0

1 of the 1 container images this version deploys carry CVE-2018-16435.

Container imageDigestPackageFixed in
polyakov/hapi-fhir-jpaserver-example:latestdbcef69146b8
lcms2@2.6-3+b3
2.6-3+deb8u2

Open the chart page →

6,362
springboothelmcharts1.0.01 of 1See more

springboot helmcharts 1.0.0

1 of the 1 container images this version deploys carry CVE-2018-16435.

Container imageDigestPackageFixed in
kimb88/hello-world-spring-boot:latest0639155241cb
lcms2@2.9-r0
2.9-r1

Open the chart page →

6,451
jenkinsjenkins-x0.10.381 of 2See more

jenkins jenkins-x 0.10.38

1 of the 2 container images this version deploys carry CVE-2018-16435.

Container imageDigestPackageFixed in
jenkinsci/jenkins:2.67a1f33f004659
lcms2@2.8-4
2.8-4+deb9u1

Open the chart page →

10,682

Container images carrying it

51 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
zenko/zenko-cosbench:0.0.6386a1f48ec0e
lcms2@2.6-3+b3
2.6-3+deb8u2
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.