CVE-2018-8956

Medium

Advisory

Published 6 May 2020In the index since 8 Sept 2026

Severity: Medium; worst across findings
CVSS: 5.3; base score, highest
EPSS: 0.031; 87th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 9; of 17,781 indexed, latest versions
Container images: 9; deployed by those charts
Fix available: None; affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 9 of 17,781 indexed charts deploy, on 9 images.

Affected package	Affected versions	Fixed in	Images
ntpdeb	1:4.2.6.p5+dfsg-3ubuntu2, 1:4.2.6.p5+dfsg-3ubuntu2.14.04.2, 1:4.2.6.p5+dfsg-3ubuntu2.14.04.11, 1:4.2.6.p5+dfsg-3ubuntu2.14.04.12+2 more	no fix listed	9

OSV records: UBUNTU-CVE-2018-8956

Charts affected

9 by stars

Chart

Latest

Affected images

Radar Score

kafka-devwikimedia

0.2.0

1 of 1 See more

kafka-dev wikimedia 0.2.0

1 of the 1 container images this version deploys carry CVE-2018-8956.

Container image	Digest	Package	Fixed in
wurstmeister/zookeeper :latest	7a7fd44a7210	ntp@1:4.2.6.p5+dfsg-3ubuntu2	no fix listed

Open the chart page →

41,427

opensipschetan-opensips

0.1.0

1 of 1 See more

opensips chetan-opensips 0.1.0

1 of the 1 container images this version deploys carry CVE-2018-8956.

Container image	Digest	Package	Fixed in
chetangautamm/repo :Opensips_Build	b4b94155ff5a	ntp@1:4.2.6.p5+dfsg-3ubuntu2.14.04.13	no fix listed

Open the chart page →

30,140

guestbookcloudnativeapp

0.2.0

1 of 3 See more

guestbook cloudnativeapp 0.2.0

1 of the 3 container images this version deploys carry CVE-2018-8956.

Container image	Digest	Package	Fixed in
resouer/redis-slave :v2	e2f198b49ba7	ntp@1:4.2.6.p5+dfsg-3ubuntu2.14.04.2	no fix listed

Open the chart page →

36,839

galaxy-stablecloudve

2.0.0

2 of 5 See more

galaxy-stable cloudve 2.0.0

2 of the 5 container images this version deploys carry CVE-2018-8956.

Container image	Digest	Package	Fixed in
galaxy/galaxy-init :v18.01	0267bad550e6	ntp@1:4.2.6.p5+dfsg-3ubuntu2.14.04.12	no fix listed
galaxy/galaxy-stable :v18.01	8e577a626dfd	ntp@1:4.2.6.p5+dfsg-3ubuntu2.14.04.12	no fix listed

Open the chart page →

70,895

zookeeper-helm-chartnotesprojectchart

0.1.0

1 of 1 See more

zookeeper-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2018-8956.

Container image	Digest	Package	Fixed in
wurstmeister/zookeeper :latest	7a7fd44a7210	ntp@1:4.2.6.p5+dfsg-3ubuntu2	no fix listed

Open the chart page →

41,427

comacopencord

1.0.0

1 of 9 See more

comac opencord 1.0.0

1 of the 9 container images this version deploys carry CVE-2018-8956.

Container image	Digest	Package	Fixed in
omecproject/onos-progran :1.0.0	5715e5648aa0	ntp@1:4.2.8p4+dfsg-3ubuntu5.7	no fix listed

Open the chart page →

88,546

onos-progranopencord

1.2.7

1 of 2 See more

onos-progran opencord 1.2.7

1 of the 2 container images this version deploys carry CVE-2018-8956.

Container image	Digest	Package	Fixed in
muluder/prograncontrollermcord :0.1.8	43b597a93da7	ntp@1:4.2.8p4+dfsg-3ubuntu5.7	no fix listed

Open the chart page →

38,865

sebaopencord

1.0.0

1 of 17 See more

seba opencord 1.0.0

1 of the 17 container images this version deploys carry CVE-2018-8956.

Container image	Digest	Package	Fixed in
voltha/voltha-envoy :1.6.0	59ab2a00f712	ntp@1:4.2.6.p5+dfsg-3ubuntu2.14.04.11	no fix listed

Open the chart page →

93,855

issuegenopsmx

1.0.2

1 of 1 See more

issuegen opsmx 1.0.2

1 of the 1 container images this version deploys carry CVE-2018-8956.

Container image	Digest	Package	Fixed in
opsmx11/issuegen :v2.1.0	5c50ca123d88	ntp@1:4.2.6.p5+dfsg-3ubuntu2.14.04.12	no fix listed

Open the chart page →

26,339

Container images carrying it

9 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
wurstmeister/zookeeper :latest	7a7fd44a7210	ntp@1:4.2.6.p5+dfsg-3ubuntu2	no fix listed	2
chetangautamm/repo :Opensips_Build	b4b94155ff5a	ntp@1:4.2.6.p5+dfsg-3ubuntu2.14.04.13	no fix listed	1
galaxy/galaxy-init :v18.01	0267bad550e6	ntp@1:4.2.6.p5+dfsg-3ubuntu2.14.04.12	no fix listed	1
galaxy/galaxy-stable :v18.01	8e577a626dfd	ntp@1:4.2.6.p5+dfsg-3ubuntu2.14.04.12	no fix listed	1
muluder/prograncontrollermcord :0.1.8	43b597a93da7	ntp@1:4.2.8p4+dfsg-3ubuntu5.7	no fix listed	1
omecproject/onos-progran :1.0.0	5715e5648aa0	ntp@1:4.2.8p4+dfsg-3ubuntu5.7	no fix listed	1
opsmx11/issuegen :v2.1.0	5c50ca123d88	ntp@1:4.2.6.p5+dfsg-3ubuntu2.14.04.12	no fix listed	1
resouer/redis-slave :v2	e2f198b49ba7	ntp@1:4.2.6.p5+dfsg-3ubuntu2.14.04.2	no fix listed	1
voltha/voltha-envoy :1.6.0	59ab2a00f712	ntp@1:4.2.6.p5+dfsg-3ubuntu2.14.04.11	no fix listed	1