StackRadarChart IndexLive demo

CVE-2018-25020

High

Advisory

Published 8 Dec 2021In the index since 6 Sept 2026

Severity: High; worst across findings
CVSS: 7.8; base score, highest
EPSS: 0.005; 42nd percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 25; of 17,803 indexed, latest versions
Container images: 22; deployed by those charts
Fix available: 1 of 1; affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 25 of 17,803 indexed charts deploy, on 22 images.

Affected package	Affected versions	Fixed in	Images
linuxdeb	4.15.0-38.41, 4.15.0-46.49, 4.15.0-50.54, 4.15.0-74.84+11 more	4.15.0-166.174	22

OSV records: UBUNTU-CVE-2018-25020

Charts affected

25 by stars

Chart

Latest

Affected images

Radar Score

openvpn-asstenic

1 of 1 See more

openvpn-as stenic 0.1.9

1 of the 1 container images this version deploys carry CVE-2018-25020.

Container image	Digest	Package	Fixed in
ghcr.io/linuxserver/openvpn-as :version-2.8.6-916f8e7d-ubuntu18	4ee0764310e7	linux@4.15.0-126.129	4.15.0-166.174

Open the chart page →

77,005

kubeflowkubeflow

1 of 45 See more

kubeflow kubeflow 1.6.2

1 of the 45 container images this version deploys carry CVE-2018-25020.

Container image	Digest	Package	Fixed in
istio/proxyv2 :1.9.6	87a9db561d2e	linux@4.15.0-144.148	4.15.0-166.174

Open the chart page →

157,323

huginnutkuozdemir

1 of 4 See more

huginn utkuozdemir 2.2.1

1 of the 4 container images this version deploys carry CVE-2018-25020.

Container image	Digest	Package	Fixed in
huginn/huginn-single-process :4d17829cf6b15b004ad3f4be196303dca4944810	c794eddc7b47	linux@4.15.0-135.139	4.15.0-166.174

Open the chart page →

79,121

flink-operatorflink-operator

1 of 2 See more

flink-operator flink-operator 0.1.1

1 of the 2 container images this version deploys carry CVE-2018-25020.

Container image	Digest	Package	Fixed in
gcr.io/flink-operator/deployer :webhook-cert	809338a69bd5	linux@4.15.0-88.88	4.15.0-166.174

Open the chart page →

75,837

cniistio

1 of 1 See more

cni istio 1.10.3

1 of the 1 container images this version deploys carry CVE-2018-25020.

Container image	Digest	Package	Fixed in
istio/install-cni :1.10.3	2232f365aed6	linux@4.15.0-147.151	4.15.0-166.174

Open the chart page →

70,366

1 of 1 See more

discovery istio 1.10.3

1 of the 1 container images this version deploys carry CVE-2018-25020.

Container image	Digest	Package	Fixed in
istio/pilot :1.10.3	e7e110a421c2	linux@4.15.0-147.151	4.15.0-166.174

Open the chart page →

70,440

1 of 1 See more

egress istio 1.10.3

1 of the 1 container images this version deploys carry CVE-2018-25020.

Container image	Digest	Package	Fixed in
istio/proxyv2 :1.10.3	a78b7a165744	linux@4.15.0-147.151	4.15.0-166.174

Open the chart page →

70,386

1 of 1 See more

ingress istio 1.10.3

1 of the 1 container images this version deploys carry CVE-2018-25020.

Container image	Digest	Package	Fixed in
istio/proxyv2 :1.10.3	a78b7a165744	linux@4.15.0-147.151	4.15.0-166.174

Open the chart page →

70,386

1 of 1 See more

operator istio 1.10.3

1 of the 1 container images this version deploys carry CVE-2018-25020.

Container image	Digest	Package	Fixed in
istio/operator :1.10.3	655eefa11c84	linux@4.15.0-147.151	4.15.0-166.174

Open the chart page →

70,667

acos-prometheus-exporter-helm-charta10-prometheus-exporter

1 of 1 See more

acos-prometheus-exporter-helm-chart a10-prometheus-exporter 0.1.0

1 of the 1 container images this version deploys carry CVE-2018-25020.

Container image	Digest	Package	Fixed in
a10networks/acos-prometheus-exporter :latest	8dc58d434d71	linux@4.15.0-101.102	4.15.0-166.174

Open the chart page →

74,391

huebigdata-charts

1 of 2 See more

hue bigdata-charts 1.0.4

1 of the 2 container images this version deploys carry CVE-2018-25020.

Container image	Digest	Package	Fixed in
gethue/hue :4.10.0	5702b2c37ff9	linux@4.15.0-144.148	4.15.0-166.174

Open the chart page →

83,011

janisterminalcloudve

1 of 2 See more

janisterminal cloudve 0.1.0

1 of the 2 container images this version deploys carry CVE-2018-25020.

Container image	Digest	Package	Fixed in
cloudve/janis-terminal :latest	af56e77ca587	linux@4.15.0-106.107	4.15.0-166.174

Open the chart page →

76,586

datacubedatacube-charts

1 of 1 See more

datacube datacube-charts 0.18.2

1 of the 1 container images this version deploys carry CVE-2018-25020.

Container image	Digest	Package	Fixed in
opendatacube/wms :latest	1b90cdf68831	linux@4.15.0-50.54	4.15.0-166.174

Open the chart page →

93,624

datacube-datadatacube-charts

1 of 1 See more

datacube-data datacube-charts 0.2.6

1 of the 1 container images this version deploys carry CVE-2018-25020.

Container image	Digest	Package	Fixed in
geoscienceaustralia/dea-k8s-data :latest	f4039b45572a	linux@4.15.0-117.118	4.15.0-166.174

Open the chart page →

80,703

datacube-processingdatacube-charts

1 of 2 See more

datacube-processing datacube-charts 0.1.1

1 of the 2 container images this version deploys carry CVE-2018-25020.

Container image	Digest	Package	Fixed in
opendatacube/pipelines :wofs-1.22	5d810e8504b8	linux@4.15.0-46.49	4.15.0-166.174

Open the chart page →

88,672

restcubedatacube-charts

1 of 1 See more

restcube datacube-charts 0.2.9

1 of the 1 container images this version deploys carry CVE-2018-25020.

Container image	Digest	Package	Fixed in
opendatacube/restcube :latest	91870111837c	linux@4.15.0-50.54	4.15.0-166.174

Open the chart page →

90,231

eg-edge-stackdatawire

1 of 7 See more

eg-edge-stack datawire 0.0.1

1 of the 7 container images this version deploys carry CVE-2018-25020.

Container image	Digest	Package	Fixed in
istio/kubectl :1.5.10	dbb7726d1bf0	linux@4.15.0-112.113	4.15.0-166.174

Open the chart page →

77,853

kovi-appkovi-charts

1 of 1 See more

kovi-app kovi-charts 0.8.1

1 of the 1 container images this version deploys carry CVE-2018-25020.

Container image	Digest	Package	Fixed in
kennethreitz/httpbin :latest	599fe5e50731	linux@4.15.0-38.41	4.15.0-166.174

Open the chart page →

81,497

splashntppool

1 of 1 See more

splash ntppool 1.0.4

1 of the 1 container images this version deploys carry CVE-2018-25020.

Container image	Digest	Package	Fixed in
scrapinghub/splash :3.4.1	a5f89bc84606	linux@4.15.0-74.84	4.15.0-166.174

Open the chart page →

91,000

omec-control-planeopencord

1 of 8 See more

omec-control-plane opencord 0.1.31

1 of the 8 container images this version deploys carry CVE-2018-25020.

Container image	Digest	Package	Fixed in
omecproject/mme-exporter :paging-latest	bcc5f19fd676	linux@4.15.0-88.88	4.15.0-166.174

Open the chart page →

104,037

open-vpnopenvpn

1 of 1 See more

open-vpn openvpn 0.0.1

1 of the 1 container images this version deploys carry CVE-2018-25020.

Container image	Digest	Package	Fixed in
ghcr.io/linuxserver/openvpn-as :version-2.8.6-916f8e7d-ubuntu18	4ee0764310e7	linux@4.15.0-126.129	4.15.0-166.174

Open the chart page →

77,005

openwhiskopenwhisk

1 of 10 See more

openwhisk openwhisk 1.0.0

1 of the 10 container images this version deploys carry CVE-2018-25020.

Container image	Digest	Package	Fixed in
openwhisk/ow-utils :1.0.0	c80dba0de3aa	linux@4.15.0-122.124	4.15.0-166.174

Open the chart page →

97,725

istio-discoverytemp-charts

1 of 1 See more

istio-discovery temp-charts 0.3.3

1 of the 1 container images this version deploys carry CVE-2018-25020.

Container image	Digest	Package	Fixed in
istio/pilot :1.10.0	294ca55bd1cc	linux@4.15.0-143.147	4.15.0-166.174

Open the chart page →

70,897

istio-ingresstemp-charts

1 of 1 See more

istio-ingress temp-charts 0.3.3

1 of the 1 container images this version deploys carry CVE-2018-25020.

Container image	Digest	Package	Fixed in
istio/proxyv2 :1.10.0	88c6c693e67a	linux@4.15.0-143.147	4.15.0-166.174

Open the chart page →

70,842

emissary-ingresswenerme

1 of 2 See more

emissary-ingress wenerme 8.12.2

1 of the 2 container images this version deploys carry CVE-2018-25020.

Container image	Digest	Package	Fixed in
istio/kubectl :1.5.10	dbb7726d1bf0	linux@4.15.0-112.113	4.15.0-166.174

Open the chart page →

72,845

Container images carrying it

22 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
istio/kubectl :1.5.10	dbb7726d1bf0	linux@4.15.0-112.113	4.15.0-166.174	2
istio/proxyv2 :1.10.3	a78b7a165744	linux@4.15.0-147.151	4.15.0-166.174	2
ghcr.io/linuxserver/openvpn-as :version-2.8.6-916f8e7d-ubuntu18	4ee0764310e7	linux@4.15.0-126.129	4.15.0-166.174	2
a10networks/acos-prometheus-exporter :latest	8dc58d434d71	linux@4.15.0-101.102	4.15.0-166.174	1
cloudve/janis-terminal :latest	af56e77ca587	linux@4.15.0-106.107	4.15.0-166.174	1
geoscienceaustralia/dea-k8s-data :latest	f4039b45572a	linux@4.15.0-117.118	4.15.0-166.174	1
gethue/hue :4.10.0	5702b2c37ff9	linux@4.15.0-144.148	4.15.0-166.174	1
huginn/huginn-single-process :4d17829cf6b15b004ad3f4be196303dca4944810	c794eddc7b47	linux@4.15.0-135.139	4.15.0-166.174	1
istio/install-cni :1.10.3	2232f365aed6	linux@4.15.0-147.151	4.15.0-166.174	1
istio/operator :1.10.3	655eefa11c84	linux@4.15.0-147.151	4.15.0-166.174	1
istio/pilot :1.10.0	294ca55bd1cc	linux@4.15.0-143.147	4.15.0-166.174	1
istio/pilot :1.10.3	e7e110a421c2	linux@4.15.0-147.151	4.15.0-166.174	1
istio/proxyv2 :1.9.6	87a9db561d2e	linux@4.15.0-144.148	4.15.0-166.174	1
istio/proxyv2 :1.10.0	88c6c693e67a	linux@4.15.0-143.147	4.15.0-166.174	1
kennethreitz/httpbin :latest	599fe5e50731	linux@4.15.0-38.41	4.15.0-166.174	1
omecproject/mme-exporter :paging-latest	bcc5f19fd676	linux@4.15.0-88.88	4.15.0-166.174	1
opendatacube/pipelines :wofs-1.22	5d810e8504b8	linux@4.15.0-46.49	4.15.0-166.174	1
opendatacube/restcube :latest	91870111837c	linux@4.15.0-50.54	4.15.0-166.174	1
opendatacube/wms :latest	1b90cdf68831	linux@4.15.0-50.54	4.15.0-166.174	1
openwhisk/ow-utils :1.0.0	c80dba0de3aa	linux@4.15.0-122.124	4.15.0-166.174	1
scrapinghub/splash :3.4.1	a5f89bc84606	linux@4.15.0-74.84	4.15.0-166.174	1
gcr.io/flink-operator/deployer :webhook-cert	809338a69bd5	linux@4.15.0-88.88	4.15.0-166.174	1