CVE-2018-20217
MediumAdvisory
Published 26 Dec 2018In the index since 6 Sept 2026
- Severity
- Medium
- worst across findings
- CVSS
- 5.3
- base score, highest
- EPSS
- 0.014
- 71st percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 249
- of 17,781 indexed, latest versions
- Container images
- 150
- deployed by those charts
- Fix available
- 3 of 3
- affected packages
Red Hat Bug Fix Advisory: krb5 bug fix update
Carried by container images the latest versions of 249 of 17,781 indexed charts deploy, on 150 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| krb5deb | 1.12+dfsg-2ubuntu5, 1.12+dfsg-2ubuntu5.1, 1.12+dfsg-2ubuntu5.3, 1.12+dfsg-2ubuntu5.4+6 more | 1.12+dfsg-2ubuntu5.4+esm1, 1.13.2+dfsg-5ubuntu2.2+esm3, 1.16-2ubuntu0.3 | 122 |
| krb5apk | 1.14.3-r2, 1.15.2-r1, 1.15.2-r2, 1.15.3-r0 | 1.14.3-r3, 1.15.4-r0 | 22 |
| krb5rpm | 1.15.1-37.el7_6 | 0:1.15.1-37.el7_7.2 | 6 |
- OSV records
- ALPINE-CVE-2018-20217RHBA-2019:2599UBUNTU-CVE-2018-20217
- Also known as
- USN-5828-1
Charts affected
249 by stars
Container images carrying it
150 by charts deploying them
A fixed version is listed for 3 of the 3 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| greenbirdit/ | e99d53bdc944 | krb5 | 1.15.4-r0 | 1 |
| hazelcast/ | ca7d5589744f | krb5 | 1.15.4-r0 | 1 |
| huginn/ | c794eddc7b47 | krb5 | 1.16-2ubuntu0.3 | 1 |
| hyperledger/ | c65891b6c237 | krb5 | 1.13.2+dfsg-5ubuntu2.2+esm3 | 1 |
| ibmcom/ | ce9d2a564273 | krb5 | 0:1.15.1-37.el7_7.2 | 1 |
| ibmcom/ | ee4624ba513d | krb5 | 0:1.15.1-37.el7_7.2 | 1 |
| ibmcom/ | 240ff499eb5b | krb5 | 0:1.15.1-37.el7_7.2 | 1 |
| ibmcom/ | e2a86997b36b | krb5 | 0:1.15.1-37.el7_7.2 | 1 |
| ibmcom/ | a6748792da26 | krb5 | 0:1.15.1-37.el7_7.2 | 1 |
| ibmcom/ | 7e4dc1e27cdf | krb5 | 1.13.2+dfsg-5ubuntu2.2+esm3 | 1 |
| ibmcom/ | b5d8c6714dbc | krb5 | 1.13.2+dfsg-5ubuntu2.2+esm3 | 1 |
| ibmcom/ | e17bdccc5030 | krb5 | 1.13.2+dfsg-5ubuntu2.2+esm3 | 1 |
| ibmcom/ | 395e60cc6e3d | krb5 | 1.16-2ubuntu0.3 | 1 |
| istio/ | 2232f365aed6 | krb5 | 1.16-2ubuntu0.3 | 1 |
| istio/ | 268ab879ea51 | krb5 | 1.13.2+dfsg-5ubuntu2.2+esm3 | 1 |
| istio/ | 655eefa11c84 | krb5 | 1.16-2ubuntu0.3 | 1 |
| istio/ | 294ca55bd1cc | krb5 | 1.16-2ubuntu0.3 | 1 |
| istio/ | c09319753454 | krb5 | 1.13.2+dfsg-5ubuntu2.2+esm3 | 1 |
| istio/ | e7e110a421c2 | krb5 | 1.16-2ubuntu0.3 | 1 |
| istio/ | 0c78be035e98 | krb5 | 1.13.2+dfsg-5ubuntu2.2+esm3 | 1 |
| istio/ | 87a9db561d2e | krb5 | 1.16-2ubuntu0.3 | 1 |
| istio/ | 88c6c693e67a | krb5 | 1.16-2ubuntu0.3 | 1 |
| jacobalberty/ | 4a3616625dda | krb5 | 1.16-2ubuntu0.3 | 1 |
| jacobalberty/ | c409924e2463 | krb5 | 1.13.2+dfsg-5ubuntu2.2+esm3 | 1 |
| jmferrer/ | 030f68ec6998 | krb5 | 1.13.2+dfsg-5ubuntu2.2+esm3 | 1 |
| kimb88/ | 0639155241cb | krb5 | 1.15.4-r0 | 1 |
| kodekloud/ | 99c3821ea49b | krb5 | 1.15.4-r0 | 1 |
| kubedex/ | 4f1008c51ef9 | krb5 | 0:1.15.1-37.el7_7.2 | 1 |
| kubeoperator/ | be8f0d624640 | krb5 | 1.16-2ubuntu0.3 | 1 |
| library/ | 3d0e6df9fd5b | krb5 | 1.16-2ubuntu0.3 | 1 |
| library/ | 6ca49afbcb2b | krb5 | 1.16-2ubuntu0.3 | 1 |
| library/ | 9cb28f7291d9 | krb5 | 1.16-2ubuntu0.3 | 1 |
| lightbend/ | b0c9894ac8dd | krb5 | 1.13.2+dfsg-5ubuntu2.2+esm3 | 1 |
| lightbend/ | 0bedf37f428a | krb5 | 1.15.4-r0 | 1 |
| linuxserver/ | a847b5b2d860 | krb5 | 1.16-2ubuntu0.3 | 1 |
| linuxserver/ | 45c5fe102ff3 | krb5 | 1.16-2ubuntu0.3 | 1 |
| linuxserver/ | b801bbcf6386 | krb5 | 1.16-2ubuntu0.3 | 1 |
| linuxserver/ | 0ac871624394 | krb5 | 1.16-2ubuntu0.3 | 1 |
| linuxserver/ | 2ce561a95e7b | krb5 | 1.16-2ubuntu0.3 | 1 |
| linuxserver/ | f93d2560e233 | krb5 | 1.16-2ubuntu0.3 | 1 |
| linuxserver/ | 2fbb21fb4903 | krb5 | 1.16-2ubuntu0.3 | 1 |
| litmuschaos/ | 99961210d467 | krb5 | 1.16-2ubuntu0.3 | 1 |
| longhornio/ | ede61fe2a472 | krb5 | 1.16-2ubuntu0.3 | 1 |
| metabase/ | ffb2dccacefc | krb5 | 1.15.4-r0 | 1 |
| muluder/ | 43b597a93da7 | krb5 | 1.13.2+dfsg-5ubuntu2.2+esm3 | 1 |
| ngick8stesting/ | 8dd6dea45be4 | krb5 | 1.13.2+dfsg-5ubuntu2.2+esm3 | 1 |
| nvidia/ | 964847cc3fd8 | krb5 | 1.13.2+dfsg-5ubuntu2.2+esm3 | 1 |
| omecproject/ | b4ae7d0d6b74 | krb5 | 1.16-2ubuntu0.3 | 1 |
| omecproject/ | b5ddd36ec20c | krb5 | 1.16-2ubuntu0.3 | 1 |
| omecproject/ | 686f8bc37d8c | krb5 | 1.16-2ubuntu0.3 | 1 |