StackRadar

CVE-2018-16868

Medium

Advisory

Published 3 Dec 2018In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.6
base score, highest
EPSS
0.006
46th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
271
of 17,781 indexed, latest versions
Container images
170
deployed by those charts
Fix available
None
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 271 of 17,781 indexed charts deploy, on 170 images.

Affected packageAffected versionsFixed inImages
gnutls28deb3.4.10-4ubuntu1.3, 3.4.10-4ubuntu1.4, 3.4.10-4ubuntu1.5, 3.4.10-4ubuntu1.7+10 moreno fix listed163
gnutls26deb2.12.23-12ubuntu2.1, 2.12.23-12ubuntu2.8no fix listed7
OSV records
UBUNTU-CVE-2018-16868

Charts affected

271 by stars
ChartLatestAffected imagesRadar Score
sdnc-websmo-helm-chart6.0.01 of 3See more

sdnc-web smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2018-16868.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
gnutls28@3.4.10-4ubuntu1.4
no fix listed

Open the chart page →

24,776
ueb-listenersmo-helm-chart6.0.01 of 3See more

ueb-listener smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2018-16868.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
gnutls28@3.4.10-4ubuntu1.4
no fix listed

Open the chart page →

25,769
spotinst-ocean-network-clientspot1.0.01 of 1See more

spotinst-ocean-network-client spot 1.0.0

1 of the 1 container images this version deploys carry CVE-2018-16868.

Container imageDigestPackageFixed in
public.ecr.aws/spotinst/spot-network-client:1.0.0-8-lb_endpoint-d0ec127efcecf98b912
gnutls28@3.5.18-1ubuntu1.5
no fix listed

Open the chart page →

6,950
pagessrinipages1.0.01 of 3See more

pages srinipages 1.0.0

1 of the 3 container images this version deploys carry CVE-2018-16868.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
gnutls28@3.5.18-1ubuntu1.3
no fix listed

Open the chart page →

20,190
unifistartechnicaVerified publisher0.1.31 of 2See more

unifi startechnica 0.1.3

1 of the 2 container images this version deploys carry CVE-2018-16868.

Container imageDigestPackageFixed in
jacobalberty/unifi:v7.1.664a3616625dda
gnutls28@3.5.18-1ubuntu1.5
no fix listed

Open the chart page →

14,493
pagesstephendillondell1.0.01 of 3See more

pages stephendillondell 1.0.0

1 of the 3 container images this version deploys carry CVE-2018-16868.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
gnutls28@3.5.18-1ubuntu1.3
no fix listed

Open the chart page →

20,190
pagessunilb2590-pages1.0.01 of 3See more

pages sunilb2590-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2018-16868.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
gnutls28@3.5.18-1ubuntu1.3
no fix listed

Open the chart page →

20,190
istio-discoverytemp-charts0.3.31 of 1See more

istio-discovery temp-charts 0.3.3

1 of the 1 container images this version deploys carry CVE-2018-16868.

Container imageDigestPackageFixed in
istio/pilot:1.10.0294ca55bd1cc
gnutls28@3.5.18-1ubuntu1.4
no fix listed

Open the chart page →

10,568
istio-ingresstemp-charts0.3.31 of 1See more

istio-ingress temp-charts 0.3.3

1 of the 1 container images this version deploys carry CVE-2018-16868.

Container imageDigestPackageFixed in
istio/proxyv2:1.10.088c6c693e67a
gnutls28@3.5.18-1ubuntu1.4
no fix listed

Open the chart page →

10,514
pagestest43221.0.01 of 3See more

pages test4322 1.0.0

1 of the 3 container images this version deploys carry CVE-2018-16868.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
gnutls28@3.5.18-1ubuntu1.3
no fix listed

Open the chart page →

20,190
standard-applicationthebitgram1.0.121 of 1See more

standard-application thebitgram 1.0.12

1 of the 1 container images this version deploys carry CVE-2018-16868.

Container imageDigestPackageFixed in
gcr.io/google_containers/echoserver:1.10cb5c1bddd1b5
gnutls28@3.4.10-4ubuntu1.3
no fix listed

Open the chart page →

11,007
pagesthiru-pages1.0.01 of 3See more

pages thiru-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2018-16868.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
gnutls28@3.5.18-1ubuntu1.3
no fix listed

Open the chart page →

20,190
pagesthuy-pages1.0.01 of 3See more

pages thuy-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2018-16868.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
gnutls28@3.5.18-1ubuntu1.3
no fix listed

Open the chart page →

20,190
todoapitodoapi-appVerified publisher0.1.01 of 2See more

todoapi todoapi-app 0.1.0

1 of the 2 container images this version deploys carry CVE-2018-16868.

Container imageDigestPackageFixed in
mcr.microsoft.com/mssql/server:2017-latest13221ac5f673
gnutls28@3.5.18-1ubuntu1.6
no fix listed

Open the chart page →

6,793
lightstepupdater-lightstep-satellite1.2.21 of 1See more

lightstep updater-lightstep-satellite 1.2.2

1 of the 1 container images this version deploys carry CVE-2018-16868.

Container imageDigestPackageFixed in
lightstep/collector:2021-01-26_23-02-36Z11c5569aaf3b
gnutls28@3.4.10-4ubuntu1.4
no fix listed

Open the chart page →

15,330
pagesvictor-pages1.0.01 of 3See more

pages victor-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2018-16868.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
gnutls28@3.5.18-1ubuntu1.3
no fix listed

Open the chart page →

20,190
kube-monitoring-telegram-botviento-repository1.0.01 of 1See more

kube-monitoring-telegram-bot viento-repository 1.0.0

1 of the 1 container images this version deploys carry CVE-2018-16868.

Container imageDigestPackageFixed in
vientoprojects/kubernetes-monitoring-telegram-bot:latesteb2a71531741
gnutls28@3.5.18-1ubuntu1.4
no fix listed

Open the chart page →

7,885
pageswalter1.0.01 of 3See more

pages walter 1.0.0

1 of the 3 container images this version deploys carry CVE-2018-16868.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
gnutls28@3.5.18-1ubuntu1.3
no fix listed

Open the chart page →

20,190
wbaas-backupwbstack0.1.01 of 1See more

wbaas-backup wbstack 0.1.0

1 of the 1 container images this version deploys carry CVE-2018-16868.

Container imageDigestPackageFixed in
ghcr.io/wmde/wbaas-backup:v0.1.78e6a9516eac0
gnutls28@3.5.18-1ubuntu1.5
no fix listed

Open the chart page →

9,743
emissary-ingresswenerme8.12.21 of 2See more

emissary-ingress wenerme 8.12.2

1 of the 2 container images this version deploys carry CVE-2018-16868.

Container imageDigestPackageFixed in
istio/kubectl:1.5.10dbb7726d1bf0
gnutls28@3.5.18-1ubuntu1.4
no fix listed

Open the chart page →

10,843
clickhousezloi-space1.2.01 of 3See more

clickhouse zloi-space 1.2.0

1 of the 3 container images this version deploys carry CVE-2018-16868.

Container imageDigestPackageFixed in
yandex/clickhouse-client:21.3863f94a0f607
gnutls28@3.5.18-1ubuntu1.5
no fix listed

Open the chart page →

9,207

Container images carrying it

170 by charts deploying them

A fixed version is listed for 0 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
gcr.io/flink-operator/deployer:webhook-cert809338a69bd5
gnutls28@3.5.18-1ubuntu1.1
no fix listed
1
gcr.io/google-containers/echoserver:1.910f4dbc8eeeb
gnutls28@3.4.10-4ubuntu1.3
no fix listed
1
gcr.io/google_containers/echoserver:1.10cb5c1bddd1b5
gnutls28@3.4.10-4ubuntu1.3
no fix listed
1
gcr.io/istio-release/pilot:release-1.0-latest-daily5ea7b7f3632a
gnutls28@3.4.10-4ubuntu1.5
no fix listed
1
gcr.io/istio-release/proxyv2:release-1.0-latest-daily8f9ff98fdbef
gnutls28@3.4.10-4ubuntu1.5
no fix listed
1
gcr.io/tfx-oss-public/ml_metadata_store_server:1.5.0db8691752b4c
gnutls28@3.5.18-1ubuntu1.5
no fix listed
1
ghcr.io/98jan/smalland-server/smalland-server:deveb7be822d5b2
gnutls28@3.5.18-1ubuntu1.6
no fix listed
1
ghcr.io/edgelesssys/coordinator:v0.5.0bcd5b8d4c45c
gnutls28@3.5.18-1ubuntu1.4
no fix listed
1
ghcr.io/jfwenisch/discord-experiencebot:latestb52ff07f9f0c
gnutls28@3.5.18-1ubuntu1.6
no fix listed
1
ghcr.io/kore3lab/kore-board.terminal:v0.5.5f52e66eff50b
gnutls28@3.5.18-1ubuntu1.6
no fix listed
1
ghcr.io/linuxserver/booksonic-air:version-v2009.1.0baa4fa9549dc
gnutls28@3.5.18-1ubuntu1.5
no fix listed
1
ghcr.io/linuxserver/resilio-sync:version-2.7.2.1375605b6d544028
gnutls28@3.5.18-1ubuntu1.4
no fix listed
1
ghcr.io/perceptolab/devops-demo-app:0.0.2cdc0658c40fb
gnutls28@3.5.18-1ubuntu1.6
no fix listed
1
ghcr.io/wmde/wbaas-backup:v0.1.78e6a9516eac0
gnutls28@3.5.18-1ubuntu1.5
no fix listed
1
mcr.microsoft.com/mssql/server:2017-latest13221ac5f673
gnutls28@3.5.18-1ubuntu1.6
no fix listed
1
mcr.microsoft.com/mssql/server:2017-latestfbf79e0fea59
gnutls28@3.5.18-1ubuntu1.6
no fix listed
1
public.ecr.aws/spotinst/spot-network-client:1.0.0-8-lb_endpoint-d0ec127efcecf98b912
gnutls28@3.5.18-1ubuntu1.5
no fix listed
1
quay.io/evryfs/docker-mcrouter:0.40.0-9a2d3a4c67b0f
gnutls28@3.5.18-1ubuntu1.6
no fix listed
1
quay.io/mongodb/mongodb-enterprise-operator:1.8.2a1c3843b03bc
gnutls28@3.4.10-4ubuntu1.8
no fix listed
1
quay.io/opsmxpublic/spin-sample-pipeline:v1.0.1c6a934439421
gnutls28@3.4.10-4ubuntu1.5
no fix listed
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.