CVE-2018-7167

High

Advisory

Published 13 Jun 2018In the index since 8 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.071; 94th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 7; of 17,781 indexed, latest versions
Container images: 7; deployed by those charts
Fix available: 1 of 1; affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 7 of 17,781 indexed charts deploy, on 7 images.

Affected package	Affected versions	Fixed in	Images
nodejsdeb	4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4	4.2.6~dfsg-1ubuntu4.2+esm1, 8.10.0~dfsg-2ubuntu0.4+esm1	7

OSV records: UBUNTU-CVE-2018-7167
Also known as: USN-4796-1

Charts affected

7 by stars

Chart

Latest

Affected images

Radar Score

otbrcharts-derwitt-dev

0.2.0

1 of 1 See more

otbr charts-derwitt-dev 0.2.0

1 of the 1 container images this version deploys carry CVE-2018-7167.

Container image	Digest	Package	Fixed in
openthread/otbr :latest	f307f59f6432	nodejs@8.10.0~dfsg-2ubuntu0.4	8.10.0~dfsg-2ubuntu0.4+esm1

Open the chart page →

12,779

ethereumcloudnativeapp

1.0.0

1 of 3 See more

ethereum cloudnativeapp 1.0.0

1 of the 3 container images this version deploys carry CVE-2018-7167.

Container image	Digest	Package	Fixed in
ethereumex/eth-stats-dashboard :v0.0.1	a7603aa8df4c	nodejs@4.2.6~dfsg-1ubuntu4.1	4.2.6~dfsg-1ubuntu4.2+esm1

Open the chart page →

27,417

webpagetest-agentcloudnativeapp

0.2.0

1 of 1 See more

webpagetest-agent cloudnativeapp 0.2.0

1 of the 1 container images this version deploys carry CVE-2018-7167.

Container image	Digest	Package	Fixed in
timothyclarke/wptagent :2018-01-23	22c41e5ca7e2	nodejs@7.10.1-2nodesource1~xenial1	no fix listed

Open the chart page →

77,758

ibm-microclimateibm-charts

0.1.0

1 of 8 See more

ibm-microclimate ibm-charts 0.1.0

1 of the 8 container images this version deploys carry CVE-2018-7167.

Container image	Digest	Package	Fixed in
ibmcom/microclimate-theia :latest	e17bdccc5030	nodejs@4.2.6~dfsg-1ubuntu4.1	4.2.6~dfsg-1ubuntu4.2+esm1

Open the chart page →

57,669

comacopencord

1.0.0

1 of 9 See more

comac opencord 1.0.0

1 of the 9 container images this version deploys carry CVE-2018-7167.

Container image	Digest	Package	Fixed in
omecproject/onos-progran :1.0.0	5715e5648aa0	nodejs@8.9.4-1nodesource1	no fix listed

Open the chart page →

88,546

onos-progranopencord

1.2.7

1 of 2 See more

onos-progran opencord 1.2.7

1 of the 2 container images this version deploys carry CVE-2018-7167.

Container image	Digest	Package	Fixed in
muluder/prograncontrollermcord :0.1.8	43b597a93da7	nodejs@8.9.4-1nodesource1	no fix listed

Open the chart page →

38,865

openwhiskopenwhisk

1.0.0

1 of 10 See more

openwhisk openwhisk 1.0.0

1 of the 10 container images this version deploys carry CVE-2018-7167.

Container image	Digest	Package	Fixed in
openwhisk/ow-utils :1.0.0	c80dba0de3aa	nodejs@8.10.0~dfsg-2ubuntu0.4	8.10.0~dfsg-2ubuntu0.4+esm1

Open the chart page →

36,215

Container images carrying it

7 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
ethereumex/eth-stats-dashboard :v0.0.1	a7603aa8df4c	nodejs@4.2.6~dfsg-1ubuntu4.1	4.2.6~dfsg-1ubuntu4.2+esm1	1
ibmcom/microclimate-theia :latest	e17bdccc5030	nodejs@4.2.6~dfsg-1ubuntu4.1	4.2.6~dfsg-1ubuntu4.2+esm1	1
muluder/prograncontrollermcord :0.1.8	43b597a93da7	nodejs@8.9.4-1nodesource1	no fix listed	1
omecproject/onos-progran :1.0.0	5715e5648aa0	nodejs@8.9.4-1nodesource1	no fix listed	1
openthread/otbr :latest	f307f59f6432	nodejs@8.10.0~dfsg-2ubuntu0.4	8.10.0~dfsg-2ubuntu0.4+esm1	1
openwhisk/ow-utils :1.0.0	c80dba0de3aa	nodejs@8.10.0~dfsg-2ubuntu0.4	8.10.0~dfsg-2ubuntu0.4+esm1	1
timothyclarke/wptagent :2018-01-23	22c41e5ca7e2	nodejs@7.10.1-2nodesource1~xenial1	no fix listed	1