StackRadar

CVE-2018-5407

Medium

Advisory

Published 15 Nov 2018In the index since 6 Sept 2026
Severity
Medium
worst across findings
CVSS
4.7
base score, highest
EPSS
0.034
88th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
77
of 17,781 indexed, latest versions
Container images
66
deployed by those charts
Fix available
2 of 2
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 77 of 17,781 indexed charts deploy, on 66 images.

Affected packageAffected versionsFixed inImages
openssldeb1.0.1f-1ubuntu2.5, 1.0.1f-1ubuntu2.8, 1.0.1f-1ubuntu2.22, 1.0.1f-1ubuntu2.25+8 more1.0.1f-1ubuntu2.27, 1.0.2g-1ubuntu4.14, 1.1.0g-2ubuntu4.339
opensslapk1.0.2h-r4, 1.0.2j-r0, 1.0.2k-r0, 1.0.2m-r0+3 more1.0.2q-r027
OSV records
ALPINE-CVE-2018-5407UBUNTU-CVE-2018-5407
Also known as
USN-3840-1

Charts affected

77 by stars
ChartLatestAffected imagesRadar Score
papergirlneoskop3.2.61 of 5See more

papergirl neoskop 3.2.6

1 of the 5 container images this version deploys carry CVE-2018-5407.

Container imageDigestPackageFixed in
janeczku/go-dnsmasq:release-1.0.73a99ad92353b
openssl@1.0.2h-r4
1.0.2q-r0

Open the chart page →

6,982
zookeeper-helm-chartnotesprojectchart0.1.01 of 1See more

zookeeper-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2018-5407.

Container imageDigestPackageFixed in
wurstmeister/zookeeper:latest7a7fd44a7210
openssl@1.0.1f-1ubuntu2.5
1.0.1f-1ubuntu2.27

Open the chart page →

41,427
comacopencord1.0.01 of 9See more

comac opencord 1.0.0

1 of the 9 container images this version deploys carry CVE-2018-5407.

Container imageDigestPackageFixed in
omecproject/onos-progran:1.0.05715e5648aa0
openssl@1.0.2g-1ubuntu4.10
1.0.2g-1ubuntu4.14

Open the chart page →

88,546
comac-cuopencord0.1.11 of 4See more

comac-cu opencord 0.1.1

1 of the 4 container images this version deploys carry CVE-2018-5407.

Container imageDigestPackageFixed in
ngick8stesting/c3po-mmeinit:latest1e764eab77b4
openssl@1.1.0g-2ubuntu4.1
1.1.0g-2ubuntu4.3

Open the chart page →

8,047
mcord-cdn-remoteopencord0.1.61 of 2See more

mcord-cdn-remote opencord 0.1.6

1 of the 2 container images this version deploys carry CVE-2018-5407.

Container imageDigestPackageFixed in
woojoong/wowza:latestec230db19652
openssl@1.1.0g-2ubuntu4.1
1.1.0g-2ubuntu4.3

Open the chart page →

42,614
mcord-control-planeopencord0.2.22 of 5See more

mcord-control-plane opencord 0.2.2

2 of the 5 container images this version deploys carry CVE-2018-5407.

Container imageDigestPackageFixed in
ngick8stesting/c3po-mme:mwca-mme-debug8dd6dea45be4
openssl@1.0.2g-1ubuntu4.13
1.0.2g-1ubuntu4.14
ngick8stesting/c3po-mmeinit:latest1e764eab77b4
openssl@1.1.0g-2ubuntu4.1
1.1.0g-2ubuntu4.3

Open the chart page →

15,648
onos-progranopencord1.2.71 of 2See more

onos-progran opencord 1.2.7

1 of the 2 container images this version deploys carry CVE-2018-5407.

Container imageDigestPackageFixed in
muluder/prograncontrollermcord:0.1.843b597a93da7
openssl@1.0.2g-1ubuntu4.10
1.0.2g-1ubuntu4.14

Open the chart page →

38,865
sebaopencord1.0.06 of 17See more

seba opencord 1.0.0

6 of the 17 container images this version deploys carry CVE-2018-5407.

Container imageDigestPackageFixed in
tpdock/freeradius:2.2.93da600c95a49
openssl@1.0.2g-1ubuntu4.9
1.0.2g-1ubuntu4.14
voltha/voltha-cli:1.6.0c4e41e92f046
openssl@1.0.2g-1ubuntu4.13
1.0.2g-1ubuntu4.14
voltha/voltha-envoy:1.6.059ab2a00f712
openssl@1.0.1f-1ubuntu2.22
1.0.1f-1ubuntu2.27
voltha/voltha-netconf:1.6.037f80524c207
openssl@1.0.2g-1ubuntu4.13
1.0.2g-1ubuntu4.14
voltha/voltha-ofagent:1.6.09ee8c1f4428c
openssl@1.0.2g-1ubuntu4.13
1.0.2g-1ubuntu4.14
voltha/voltha-voltha:1.6.0ff596b62de59
openssl@1.0.2g-1ubuntu4.13
1.0.2g-1ubuntu4.14

Open the chart page →

93,855
xos-coreopencord4.0.21 of 6See more

xos-core opencord 4.0.2

1 of the 6 container images this version deploys carry CVE-2018-5407.

Container imageDigestPackageFixed in
library/postgres:10.3-alpineb06cdddba62f
openssl@1.0.2n-r0
1.0.2q-r0

Open the chart page →

480
xos-dbopencord1.0.41 of 1See more

xos-db opencord 1.0.4

1 of the 1 container images this version deploys carry CVE-2018-5407.

Container imageDigestPackageFixed in
library/postgres:10.3-alpineb06cdddba62f
openssl@1.0.2n-r0
1.0.2q-r0

Open the chart page →

480
issuegenopsmxVerified publisher1.0.21 of 1See more

issuegen opsmx 1.0.2

1 of the 1 container images this version deploys carry CVE-2018-5407.

Container imageDigestPackageFixed in
opsmx11/issuegen:v2.1.05c50ca123d88
openssl@1.0.1f-1ubuntu2.25
1.0.1f-1ubuntu2.27

Open the chart page →

26,339
httpbinrgnu1.0.01 of 1See more

httpbin rgnu 1.0.0

1 of the 1 container images this version deploys carry CVE-2018-5407.

Container imageDigestPackageFixed in
citizenstig/httpbin:latestb81c818ccb86
openssl@1.0.2g-1ubuntu4.5
1.0.2g-1ubuntu4.14

Open the chart page →

11,422
dt-kubewatchromholdings0.13.51 of 1See more

dt-kubewatch romholdings 0.13.5

1 of the 1 container images this version deploys carry CVE-2018-5407.

Container imageDigestPackageFixed in
quay.io/devtron/kubewatch:v0.1.010d8fbba813d
openssl@1.0.2n-r0
1.0.2q-r0

Open the chart page →

170
openvpnromholdings4.2.51 of 1See more

openvpn romholdings 4.2.5

1 of the 1 container images this version deploys carry CVE-2018-5407.

Container imageDigestPackageFixed in
jfelten/openvpn-docker:1.1.08630a72c3768
openssl@1.0.2k-r0
1.0.2q-r0

Open the chart page →

866
seldon-core-usagestatsseldon0.1.51 of 1See more

seldon-core-usagestats seldon 0.1.5

1 of the 1 container images this version deploys carry CVE-2018-5407.

Container imageDigestPackageFixed in
gcr.io/google_containers/spartakus-amd64:v1.1.055877a3866a2
openssl@1.0.2j-r0
1.0.2q-r0

Open the chart page →

718
cachetsergiotocaliniVerified publisher1.0.01 of 1See more

cachet sergiotocalini 1.0.0

1 of the 1 container images this version deploys carry CVE-2018-5407.

Container imageDigestPackageFixed in
cachethq/docker:2.3.15a61ff0f67ea7
openssl@1.0.2n-r0
1.0.2q-r0

Open the chart page →

1,896
simple-db-app-chartsimple-db-app0.1.01 of 2See more

simple-db-app-chart simple-db-app 0.1.0

1 of the 2 container images this version deploys carry CVE-2018-5407.

Container imageDigestPackageFixed in
htmlprogrammer2001/simple-db-app-migration:1.074c6d2c679ed
openssl@1.0.2n-r0
1.0.2q-r0

Open the chart page →

1,925
simple-db-app-chart-with-dependencysimple-db-app0.1.01 of 3See more

simple-db-app-chart-with-dependency simple-db-app 0.1.0

1 of the 3 container images this version deploys carry CVE-2018-5407.

Container imageDigestPackageFixed in
htmlprogrammer2001/simple-db-app-migration:1.074c6d2c679ed
openssl@1.0.2n-r0
1.0.2q-r0

Open the chart page →

1,925
dgbuildersmo-helm-chart6.0.01 of 3See more

dgbuilder smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2018-5407.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.07daa08b81954
openssl@1.0.2g-1ubuntu4.10
1.0.2g-1ubuntu4.14

Open the chart page →

28,470
logsmo-helm-chart6.0.01 of 6See more

log smo-helm-chart 6.0.0

1 of the 6 container images this version deploys carry CVE-2018-5407.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.07daa08b81954
openssl@1.0.2g-1ubuntu4.10
1.0.2g-1ubuntu4.14

Open the chart page →

29,220
msbsmo-helm-chart6.0.01 of 6See more

msb smo-helm-chart 6.0.0

1 of the 6 container images this version deploys carry CVE-2018-5407.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.07daa08b81954
openssl@1.0.2g-1ubuntu4.10
1.0.2g-1ubuntu4.14

Open the chart page →

27,477
multicloudsmo-helm-chart6.0.01 of 14See more

multicloud smo-helm-chart 6.0.0

1 of the 14 container images this version deploys carry CVE-2018-5407.

Container imageDigestPackageFixed in
oomk8s/ubuntu-init:1.0.03adf3d21ad3b
openssl@1.0.2g-1ubuntu4.6
1.0.2g-1ubuntu4.14

Open the chart page →

9,436
pndasmo-helm-chart6.0.01 of 3See more

pnda smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2018-5407.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.07daa08b81954
openssl@1.0.2g-1ubuntu4.10
1.0.2g-1ubuntu4.14

Open the chart page →

27,477
pombasmo-helm-chart6.0.01 of 17See more

pomba smo-helm-chart 6.0.0

1 of the 17 container images this version deploys carry CVE-2018-5407.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.07daa08b81954
openssl@1.0.2g-1ubuntu4.10
1.0.2g-1ubuntu4.14

Open the chart page →

29,220
portalsmo-helm-chart6.0.01 of 8See more

portal smo-helm-chart 6.0.0

1 of the 8 container images this version deploys carry CVE-2018-5407.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.07daa08b81954
openssl@1.0.2g-1ubuntu4.10
1.0.2g-1ubuntu4.14

Open the chart page →

27,477
umsappstacksimplifyVerified publisher1.0.01 of 3See more

umsapp stacksimplify 1.0.0

1 of the 3 container images this version deploys carry CVE-2018-5407.

Container imageDigestPackageFixed in
ghcr.io/stacksimplify/kube-usermgmt-webapp:1.0.0-mysqldb41b45003c6b6
openssl@1.0.2o-r0
1.0.2q-r0

Open the chart page →

6,101
standard-applicationthebitgram1.0.121 of 1See more

standard-application thebitgram 1.0.12

1 of the 1 container images this version deploys carry CVE-2018-5407.

Container imageDigestPackageFixed in
gcr.io/google_containers/echoserver:1.10cb5c1bddd1b5
openssl@1.0.2g-1ubuntu4.8
1.0.2g-1ubuntu4.14

Open the chart page →

11,007

Container images carrying it

66 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
stakater/reloader:v0.0.2560a9430bd98e
openssl@1.0.2n-r0
1.0.2q-r0
1
tensorflow/tensorflow:1.6.0-devel1e3172090703
openssl@1.0.2g-1ubuntu4.10
1.0.2g-1ubuntu4.14
1
timothyclarke/wptagent:2018-01-2322c41e5ca7e2
openssl@1.0.2g-1ubuntu4.10
1.0.2g-1ubuntu4.14
1
tpdock/freeradius:2.2.93da600c95a49
openssl@1.0.2g-1ubuntu4.9
1.0.2g-1ubuntu4.14
1
upmcenterprises/registry-creds:1.1093a633d4f2b7
openssl@1.0.2n-r0
1.0.2q-r0
1
voltha/voltha-cli:1.6.0c4e41e92f046
openssl@1.0.2g-1ubuntu4.13
1.0.2g-1ubuntu4.14
1
voltha/voltha-envoy:1.6.059ab2a00f712
openssl@1.0.1f-1ubuntu2.22
1.0.1f-1ubuntu2.27
1
voltha/voltha-netconf:1.6.037f80524c207
openssl@1.0.2g-1ubuntu4.13
1.0.2g-1ubuntu4.14
1
voltha/voltha-ofagent:1.6.09ee8c1f4428c
openssl@1.0.2g-1ubuntu4.13
1.0.2g-1ubuntu4.14
1
voltha/voltha-voltha:1.6.0ff596b62de59
openssl@1.0.2g-1ubuntu4.13
1.0.2g-1ubuntu4.14
1
weaveworks/watch:master-5b2a6e5bb113953e19f
openssl@1.0.2j-r0
1.0.2q-r0
1
woojoong/wowza:latestec230db19652
openssl@1.1.0g-2ubuntu4.1
1.1.0g-2ubuntu4.3
1
gcr.io/google-containers/echoserver:1.910f4dbc8eeeb
openssl@1.0.2g-1ubuntu4.8
1.0.2g-1ubuntu4.14
1
gcr.io/google_containers/echoserver:1.10cb5c1bddd1b5
openssl@1.0.2g-1ubuntu4.8
1.0.2g-1ubuntu4.14
1
gcr.io/google_containers/spartakus-amd64:v1.1.055877a3866a2
openssl@1.0.2j-r0
1.0.2q-r0
1
ghcr.io/stacksimplify/kube-usermgmt-webapp:1.0.0-mysqldb41b45003c6b6
openssl@1.0.2o-r0
1.0.2q-r0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.