CVE-2018-20217
MediumAdvisory
Published 26 Dec 2018In the index since 6 Sept 2026
- Severity
- Medium
- worst across findings
- CVSS
- 5.3
- base score, highest
- EPSS
- 0.014
- 71st percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 249
- of 17,781 indexed, latest versions
- Container images
- 150
- deployed by those charts
- Fix available
- 3 of 3
- affected packages
Red Hat Bug Fix Advisory: krb5 bug fix update
Carried by container images the latest versions of 249 of 17,781 indexed charts deploy, on 150 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| krb5deb | 1.12+dfsg-2ubuntu5, 1.12+dfsg-2ubuntu5.1, 1.12+dfsg-2ubuntu5.3, 1.12+dfsg-2ubuntu5.4+6 more | 1.12+dfsg-2ubuntu5.4+esm1, 1.13.2+dfsg-5ubuntu2.2+esm3, 1.16-2ubuntu0.3 | 122 |
| krb5apk | 1.14.3-r2, 1.15.2-r1, 1.15.2-r2, 1.15.3-r0 | 1.14.3-r3, 1.15.4-r0 | 22 |
| krb5rpm | 1.15.1-37.el7_6 | 0:1.15.1-37.el7_7.2 | 6 |
- OSV records
- ALPINE-CVE-2018-20217RHBA-2019:2599UBUNTU-CVE-2018-20217
- Also known as
- USN-5828-1
Charts affected
249 by stars
Container images carrying it
150 by charts deploying them
A fixed version is listed for 3 of the 3 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| omecproject/ | 5715e5648aa0 | krb5 | 1.13.2+dfsg-5ubuntu2.2+esm3 | 1 |
| omecproject/ | 64776cb9edb3 | krb5 | 1.13.2+dfsg-5ubuntu2.2+esm3 | 1 |
| omecproject/ | d109a8e57e71 | krb5 | 1.13.2+dfsg-5ubuntu2.2+esm3 | 1 |
| onosproject/ | 44914a8d4b3f | krb5 | 1.16-2ubuntu0.3 | 1 |
| oomk8s/ | 3adf3d21ad3b | krb5 | 1.13.2+dfsg-5ubuntu2.2+esm3 | 1 |
| opencord/ | 4187e2a8c918 | krb5 | 1.15.4-r0 | 1 |
| opendatacube/ | 5d810e8504b8 | krb5 | 1.16-2ubuntu0.3 | 1 |
| opendatacube/ | 91870111837c | krb5 | 1.16-2ubuntu0.3 | 1 |
| opendatacube/ | 1b90cdf68831 | krb5 | 1.16-2ubuntu0.3 | 1 |
| openwhisk/ | c80dba0de3aa | krb5 | 1.16-2ubuntu0.3 | 1 |
| opsmx11/ | 5c50ca123d88 | krb5 | 1.12+dfsg-2ubuntu5.4+esm1 | 1 |
| oscarfonts/ | f45075ef301f | krb5 | 1.15.4-r0 | 1 |
| plexinc/ | b598abb134ad | krb5 | 1.13.2+dfsg-5ubuntu2.2+esm3 | 1 |
| pozetroninc/ | 53ae64f29da8 | krb5 | 1.16-2ubuntu0.3 | 1 |
| radarbase/ | 1d2af7dd5a4e | krb5 | 1.15.4-r0 | 1 |
| rancher/ | e66f32d19eb9 | krb5 | 1.13.2+dfsg-5ubuntu2.2+esm3 | 1 |
| resouer/ | e2f198b49ba7 | krb5 | 1.12+dfsg-2ubuntu5.4+esm1 | 1 |
| richardchesterwood/ | 518f946b9f05 | krb5 | 1.14.3-r3 | 1 |
| rundeck/ | 4d64fe56f767 | krb5 | 1.13.2+dfsg-5ubuntu2.2+esm3 | 1 |
| rundeck/ | b13e8059ad72 | krb5 | 1.13.2+dfsg-5ubuntu2.2+esm3 | 1 |
| scrapinghub/ | a5f89bc84606 | krb5 | 1.16-2ubuntu0.3 | 1 |
| seldonio/ | ba81b17f00eb | krb5 | 1.15.4-r0 | 1 |
| seldonio/ | 29e362bb1ba2 | krb5 | 1.15.4-r0 | 1 |
| seldonio/ | 1d0da98a2d76 | krb5 | 1.13.2+dfsg-5ubuntu2.2+esm3 | 1 |
| sismics/ | f4b0ef019cf1 | krb5 | 1.16-2ubuntu0.3 | 1 |
| slagattollas/ | 68e7f56393fc | krb5 | 1.16-2ubuntu0.3 | 1 |
| snappydatainc/ | fd4b2070466f | krb5 | 1.15.4-r0 | 1 |
| tensorflow/ | 1e3172090703 | krb5 | 1.13.2+dfsg-5ubuntu2.2+esm3 | 1 |
| thelastpickle/ | 9c53996c457d | krb5 | 1.15.4-r0 | 1 |
| timothyclarke/ | 22c41e5ca7e2 | krb5 | 1.13.2+dfsg-5ubuntu2.2+esm3 | 1 |
| tpdock/ | 3da600c95a49 | krb5 | 1.13.2+dfsg-5ubuntu2.2+esm3 | 1 |
| voltha/ | c4e41e92f046 | krb5 | 1.13.2+dfsg-5ubuntu2.2+esm3 | 1 |
| voltha/ | 59ab2a00f712 | krb5 | 1.12+dfsg-2ubuntu5.4+esm1 | 1 |
| voltha/ | e038acb950d3 | krb5 | 1.16-2ubuntu0.3 | 1 |
| wavefronthq/ | d1064d28f6eb | krb5 | 1.16-2ubuntu0.3 | 1 |
| gcr.io/ | 809338a69bd5 | krb5 | 1.16-2ubuntu0.3 | 1 |
| gcr.io/ | 10f4dbc8eeeb | krb5 | 1.13.2+dfsg-5ubuntu2.2+esm3 | 1 |
| gcr.io/ | cb5c1bddd1b5 | krb5 | 1.13.2+dfsg-5ubuntu2.2+esm3 | 1 |
| gcr.io/ | 5ea7b7f3632a | krb5 | 1.13.2+dfsg-5ubuntu2.2+esm3 | 1 |
| gcr.io/ | 8f9ff98fdbef | krb5 | 1.13.2+dfsg-5ubuntu2.2+esm3 | 1 |
| ghcr.io/ | bcd5b8d4c45c | krb5 | 1.16-2ubuntu0.3 | 1 |
| ghcr.io/ | f52e66eff50b | krb5 | 1.16-2ubuntu0.3 | 1 |
| ghcr.io/ | baa4fa9549dc | krb5 | 1.16-2ubuntu0.3 | 1 |
| ghcr.io/ | 605b6d544028 | krb5 | 1.16-2ubuntu0.3 | 1 |
| ghcr.io/ | 41b45003c6b6 | krb5 | 1.15.4-r0 | 1 |
| ghcr.io/ | 8e6a9516eac0 | krb5 | 1.16-2ubuntu0.3 | 1 |
| public.ecr.aws/ | efcecf98b912 | krb5 | 1.16-2ubuntu0.3 | 1 |
| quay.io/ | a2d3a4c67b0f | krb5 | 1.16-2ubuntu0.3 | 1 |
| quay.io/ | a1c3843b03bc | krb5 | 1.13.2+dfsg-5ubuntu2.2+esm3 | 1 |
| quay.io/ | c6a934439421 | krb5 | 1.13.2+dfsg-5ubuntu2.2+esm3 | 1 |