StackRadar

CVE-2018-20796

High

Advisory

Published 26 Feb 2019In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.058
93rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,056
of 17,790 indexed, latest versions
Container images
1,936
deployed by those charts
Fix available
None
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 2,056 of 17,790 indexed charts deploy, on 1,936 images.

Affected packageAffected versionsFixed inImages
glibcdeb2.23-0ubuntu5, 2.23-0ubuntu7, 2.23-0ubuntu9, 2.23-0ubuntu10+37 moreno fix listed1,929
eglibcdeb2.19-0ubuntu6.3, 2.19-0ubuntu6.6, 2.19-0ubuntu6.13, 2.19-0ubuntu6.14+1 moreno fix listed7
OSV records
DEBIAN-CVE-2018-20796UBUNTU-CVE-2018-20796

Charts affected

2,056 by stars
ChartLatestAffected imagesRadar Score
my-nginx-appyasser-nginx-app0.1.01 of 1See more

my-nginx-app yasser-nginx-app 0.1.0

1 of the 1 container images this version deploys carry CVE-2018-20796.

Container imageDigestPackageFixed in
library/nginx:stabled5792f71a949
glibc@2.41-12+deb13u3
no fix listed

Open the chart page →

1,839
api-snapyoukadevVerified publisher0.1.11 of 1See more

api-snap youkadev 0.1.1

1 of the 1 container images this version deploys carry CVE-2018-20796.

Container imageDigestPackageFixed in
youkadev/api-snap:0.1.14db0f9428e67
glibc@2.36-9+deb12u4
no fix listed

Open the chart page →

2,674
zahori-schedulerzahoriVerified publisher1.0.11 of 1See more

zahori-scheduler zahori 1.0.1

1 of the 1 container images this version deploys carry CVE-2018-20796.

Container imageDigestPackageFixed in
zahoriaut/zahori-scheduler:1.0.047d0979b1184
glibc@2.27-3ubuntu1.6
no fix listed

Open the chart page →

2,464
endlessh-gozekker6Verified publisher0.4.01 of 1See more

endlessh-go zekker6 0.4.0

1 of the 1 container images this version deploys carry CVE-2018-20796.

Container imageDigestPackageFixed in
ghcr.io/shizunge/endlessh-go:2026.0730.08826dad32623
glibc@2.41-12+deb13u3
no fix listed

Open the chart page →

467
NEW_APPzekker6Verified publisher0.0.01 of 1See more

NEW_APP zekker6 0.0.0

1 of the 1 container images this version deploys carry CVE-2018-20796.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
glibc@2.41-12+deb13u3
no fix listed

Open the chart page →

1,839
clickhousezloi-space1.2.02 of 3See more

clickhouse zloi-space 1.2.0

2 of the 3 container images this version deploys carry CVE-2018-20796.

Container imageDigestPackageFixed in
yandex/clickhouse-client:21.3863f94a0f607
glibc@2.27-3ubuntu1.4
no fix listed
yandex/clickhouse-server:21.3.204eccfffb01d7
glibc@2.31-0ubuntu9.2
no fix listed

Open the chart page →

9,250

Container images carrying it

1,936 by charts deploying them

A fixed version is listed for 0 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
quay.io/devtron/notifier:9804331c-372-39294709c7da19c5a
glibc@2.36-9+deb12u13
no fix listed
3
actualbudget/actual-server:26.9.0552beab3dec8
glibc@2.36-9+deb12u14
no fix listed
2
apache/apisix-ingress-controller:2.2.05c5efa4c7f2a
glibc@2.36-9+deb12u14
no fix listed
2
apache/druid:37.0.00116fb802786
glibc@2.36-9+deb12u13
no fix listed
2
bitnamilegacy/elasticsearch:9.1.2-debian-12-r000176a47afa0
glibc@2.36-9+deb12u10
no fix listed
2
bitnamilegacy/etcd:latest99b408c15272
glibc@2.36-9+deb12u10
no fix listed
2
bitnamilegacy/mariadb:11.4.5-debian-12-r933ce23601fc9
glibc@2.36-9+deb12u10
no fix listed
2
bitnamilegacy/pgpool:4.6.3-debian-12-r0d3bf3910f148
glibc@2.36-9+deb12u10
no fix listed
2
bitnamilegacy/postgresql:16.4.0-debian-12-r1494bc968141e7
glibc@2.36-9+deb12u8
no fix listed
2
bitnamilegacy/postgresql-repmgr:17.6.0-debian-12-r2f12387ec882b
glibc@2.36-9+deb12u10
no fix listed
2
bitnamilegacy/redis:latest5927ff3702df
glibc@2.36-9+deb12u10
no fix listed
2
bitnamilegacy/valkey-cluster:8.1.3-debian-12-r332869e769b7e
glibc@2.36-9+deb12u10
no fix listed
2
bitnami/minideb:latestab4d5b45116e
glibc@2.41-12+deb13u3
no fix listed
2
blockstack/stacks-core:3.2.0.0.0f79944317326
glibc@2.36-9+deb12u10
no fix listed
2
cagriekin/pg-ha:2.0.1-pg1899e17aa165df
glibc@2.41-12+deb13u3
no fix listed
2
cfssl/cfssl:latest:v1.6.5c9018c2ddf0b
glibc@2.36-9+deb12u4
no fix listed
2
chromedp/headless-shell:148.0.7778.97313ed7255ae1
glibc@2.41-12+deb13u2
no fix listed
2
clickhouse/clickhouse-server:24.2ed9640bfff07
glibc@2.31-0ubuntu9.15
no fix listed
2
cloudflare/cloudflared:2026.6.16d91c121b803
glibc@2.41-12+deb13u3
no fix listed
2
dagster/user-code-example:1.13.225947f9ae481c
glibc@2.41-12+deb13u3
no fix listed
2
eqalpha/keydb:latest6537505c4235
glibc@2.31-0ubuntu9.12
no fix listed
2
eqalpha/keydb:x86_64_v6.3.4eceb1806730c
glibc@2.31-0ubuntu9.12
no fix listed
2
fireflyiii/core:version-6.5.9fe4ecec4c2ba
glibc@2.41-12+deb13u2
no fix listed
2
fireflyiii/data-importer:version-2.2.3ab52bf932546
glibc@2.41-12+deb13u2
no fix listed
2
freeradius/freeradius-server:3.0.2121c8bfa904d8
glibc@2.27-3ubuntu1
no fix listed
2
freikin/dawarich:1.14.511826c67e4b1
glibc@2.41-12+deb13u4
no fix listed
2
geoservercloud/geoserver-cloud-gateway:1.0-RC3756559ee788a
glibc@2.31-0ubuntu9.2
no fix listed
2
geoservercloud/geoserver-cloud-rest:1.0-RC399540eef78ad
glibc@2.31-0ubuntu9.2
no fix listed
2
geoservercloud/geoserver-cloud-wcs:1.0-RC35c254c53a357
glibc@2.31-0ubuntu9.2
no fix listed
2
geoservercloud/geoserver-cloud-webui:1.0-RC3c687b1cbc891
glibc@2.31-0ubuntu9.2
no fix listed
2
geoservercloud/geoserver-cloud-wfs:1.0-RC35288f320cf36
glibc@2.31-0ubuntu9.2
no fix listed
2
geoservercloud/geoserver-cloud-wms:1.0-RC3a30a60ac6cd0
glibc@2.31-0ubuntu9.2
no fix listed
2
gisaia/arlas-permissions-server:28.0.0e612fc722e02
glibc@2.41-12+deb13u2
no fix listed
2
gisaia/arlas-persistence-server:28.0.0f667e0ee79be
glibc@2.41-12+deb13u2
no fix listed
2
gisaia/arlas-server:28.0.04e693e7b6f37
glibc@2.41-12+deb13u2
no fix listed
2
gjeanmart/safe-ganache-node:latest926264c8f2d1
glibc@2.36-9
no fix listed
2
gotenberg/gotenberg:8.36.087c16b9f3642
glibc@2.41-12+deb13u3
no fix listed
2
gotenberg/gotenberg:8:8.37.0f29984bd1e22
glibc@2.41-12+deb13u3
no fix listed
2
graviteeio/apim-gateway:4.12.19-debian05fd67a93056
glibc@2.41-12+deb13u3
no fix listed
2
graviteeio/apim-management-api:4.12.19-debian27374522cd04
glibc@2.41-12+deb13u3
no fix listed
2
hjacobs/kube-downscaler:23.2.0-6-gc9b88e84b2147f47425
glibc@2.36-9
no fix listed
2
honestica/kube-iptables-tailer:master-91a393242fb939
glibc@2.31-0ubuntu9.7
no fix listed
2
hookiesolutions/webhookie:latest0629694246ba
glibc@2.31-0ubuntu9.2
no fix listed
2
hyperledger/besu:22.4-openjdk-latesta674d35eec9a
glibc@2.31-0ubuntu9.9
no fix listed
2
ilum/api:6.7.3624fd09528c8
glibc@2.41-12+deb13u3
no fix listed
2
ilum/marquez:0.54.06e1d709d41f8
glibc@2.36-9+deb12u13
no fix listed
2
infisical/infisical:latest:v0.165.602082bf13163
glibc@2.41-12+deb13u3
no fix listed
2
interlayhq/interbtc:latesta66d0e35e70f
glibc@2.31-0ubuntu9.18
no fix listed
2
interlayhq/interbtc-clients:vault-masterc3e311de67da
glibc@2.31-0ubuntu9.2
no fix listed
2
iomesh/node-disk-exporter:1.8.0f03148764f38
glibc@2.31-0ubuntu9.2
no fix listed
2

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.