CVE-2018-1999010

Critical

Advisory

Published 23 Jul 2018In the index since 6 Sept 2026

Severity: Critical; worst across findings
CVSS: 9.8; base score, highest
EPSS: 0.031; 87th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 7; of 17,781 indexed, latest versions
Container images: 6; deployed by those charts
Fix available: 1 of 2; affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 7 of 17,781 indexed charts deploy, on 6 images.

Affected package	Affected versions	Fixed in	Images
gst-libav1.0deb	1.14.5-0ubuntu1~18.04.1, 1.16.2-2, 1.20.3-0ubuntu1, 1.24.1-1build1	no fix listed	5
ffmpegdeb	7:2.8.11-0ubuntu0.16.04.1	7:2.8.15-0ubuntu0.16.04.1	1

OSV records: UBUNTU-CVE-2018-1999010

Charts affected

7 by stars

Chart

Latest

Affected images

Radar Score

smarter-demosmarter

0.1.5

1 of 7 See more

smarter-demo smarter 0.1.5

1 of the 7 container images this version deploys carry CVE-2018-1999010.

Container image	Digest	Package	Fixed in
ghcr.io/smarter-project/image-detector :v2.5.3	1dcca70c6446	gst-libav1.0@1.16.2-2	no fix listed

Open the chart page →

45,832

webpagetest-agentcloudnativeapp

0.2.0

1 of 1 See more

webpagetest-agent cloudnativeapp 0.2.0

1 of the 1 container images this version deploys carry CVE-2018-1999010.

Container image	Digest	Package	Fixed in
timothyclarke/wptagent :2018-01-23	22c41e5ca7e2	ffmpeg@7:2.8.11-0ubuntu0.16.04.1	7:2.8.15-0ubuntu0.16.04.1

Open the chart page →

77,758

itm-servicesintel

2.0.0

1 of 8 See more

itm-services intel 2.0.0

1 of the 8 container images this version deploys carry CVE-2018-1999010.

Container image	Digest	Package	Fixed in
intel/dlstreamer-pipeline-server :2022.1.1-ubuntu20	aa8f5483a2ef	gst-libav1.0@1.16.2-2	no fix listed

Open the chart page →

18,066

splashntppool

1.0.4

1 of 1 See more

splash ntppool 1.0.4

1 of the 1 container images this version deploys carry CVE-2018-1999010.

Container image	Digest	Package	Fixed in
scrapinghub/splash :3.4.1	a5f89bc84606	gst-libav1.0@1.14.5-0ubuntu1~18.04.1	no fix listed

Open the chart page →

27,633

kurento_webrtc_demostunner

0.1.0

1 of 2 See more

kurento_webrtc_demo stunner 0.1.0

1 of the 2 container images this version deploys carry CVE-2018-1999010.

Container image	Digest	Package	Fixed in
kurento/kurento-media-server :latest	03c0d34d0828	gst-libav1.0@1.24.1-1build1	no fix listed

Open the chart page →

12,460

stunner-kurento-one2one-callstunner

0.1.0

1 of 2 See more

stunner-kurento-one2one-call stunner 0.1.0

1 of the 2 container images this version deploys carry CVE-2018-1999010.

Container image	Digest	Package	Fixed in
kurento/kurento-media-server :latest	03c0d34d0828	gst-libav1.0@1.24.1-1build1	no fix listed

Open the chart page →

12,460

playwright-synthetic-monitoringwork-adventure

1.0.1

1 of 1 See more

playwright-synthetic-monitoring work-adventure 1.0.1

1 of the 1 container images this version deploys carry CVE-2018-1999010.

Container image	Digest	Package	Fixed in
workadventure/playwright-synthetic-monitoring :main	92b664c2a06f	gst-libav1.0@1.20.3-0ubuntu1	no fix listed

Open the chart page →

14,100

Container images carrying it

6 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
kurento/kurento-media-server :latest	03c0d34d0828	gst-libav1.0@1.24.1-1build1	no fix listed	2
intel/dlstreamer-pipeline-server :2022.1.1-ubuntu20	aa8f5483a2ef	gst-libav1.0@1.16.2-2	no fix listed	1
scrapinghub/splash :3.4.1	a5f89bc84606	gst-libav1.0@1.14.5-0ubuntu1~18.04.1	no fix listed	1
timothyclarke/wptagent :2018-01-23	22c41e5ca7e2	ffmpeg@7:2.8.11-0ubuntu0.16.04.1	7:2.8.15-0ubuntu0.16.04.1	1
workadventure/playwright-synthetic-monitoring :main	92b664c2a06f	gst-libav1.0@1.20.3-0ubuntu1	no fix listed	1
ghcr.io/smarter-project/image-detector :v2.5.3	1dcca70c6446	gst-libav1.0@1.16.2-2	no fix listed	1