CVE-2019-13050

High

Advisory

Published 29 Jun 2019In the index since 6 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.027; 85th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 251; of 17,781 indexed, latest versions
Container images: 167; deployed by those charts
Fix available: 1 of 2; affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 251 of 17,781 indexed charts deploy, on 167 images.

Affected package	Affected versions	Fixed in	Images
gnupg2deb	2.1.11-6ubuntu2.1, 2.2.4-1ubuntu1, 2.2.4-1ubuntu1.1, 2.2.4-1ubuntu1.2+2 more	2.2.4-1ubuntu1.5	92
gnupgdeb	1.4.16-1ubuntu2.1, 1.4.16-1ubuntu2.4, 1.4.16-1ubuntu2.6, 1.4.20-1ubuntu3.1+2 more	no fix listed	76

OSV records: UBUNTU-CVE-2019-13050
Also known as: USN-5431-1

Charts affected

251 by stars

Chart

Latest

Affected images

Radar Score

clickhousezloi-space

1.2.0

1 of 3 See more

clickhouse zloi-space 1.2.0

1 of the 3 container images this version deploys carry CVE-2019-13050.

Container image	Digest	Package	Fixed in
yandex/clickhouse-client :21.3	863f94a0f607	gnupg2@2.2.4-1ubuntu1.4	2.2.4-1ubuntu1.5

Open the chart page →

9,207

Container images carrying it

167 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
yandex/clickhouse-client :21.3	863f94a0f607	gnupg2@2.2.4-1ubuntu1.4	2.2.4-1ubuntu1.5	1
yandex/clickhouse-server :19.17	ab1738a64b70	gnupg2@2.2.4-1ubuntu1.2	2.2.4-1ubuntu1.5	1
yandex/clickhouse-server :19.14	ccf9c2b5e3f2	gnupg2@2.2.4-1ubuntu1.2	2.2.4-1ubuntu1.5	1
yandex/clickhouse-server :19.16	d210dc69321e	gnupg2@2.2.4-1ubuntu1.2	2.2.4-1ubuntu1.5	1
gcr.io/flink-operator/deployer :webhook-cert	809338a69bd5	gnupg2@2.2.4-1ubuntu1.2	2.2.4-1ubuntu1.5	1
gcr.io/google-containers/echoserver :1.9	10f4dbc8eeeb	gnupg@1.4.20-1ubuntu3.1	no fix listed	1
gcr.io/google_containers/echoserver :1.10	cb5c1bddd1b5	gnupg@1.4.20-1ubuntu3.1	no fix listed	1
gcr.io/istio-release/pilot :release-1.0-latest-daily	5ea7b7f3632a	gnupg@1.4.20-1ubuntu3.3	no fix listed	1
gcr.io/istio-release/proxyv2 :release-1.0-latest-daily	8f9ff98fdbef	gnupg@1.4.20-1ubuntu3.3	no fix listed	1
gcr.io/ml-pipeline/metadata-envoy :2.0.0-alpha.5	e8bc6cf08613	gnupg@1.4.20-1ubuntu3.3	no fix listed	1
gcr.io/tfx-oss-public/ml_metadata_store_server :1.5.0	db8691752b4c	gnupg2@2.2.4-1ubuntu1.4	2.2.4-1ubuntu1.5	1
ghcr.io/edgelesssys/coordinator :v0.5.0	bcd5b8d4c45c	gnupg2@2.2.4-1ubuntu1.4	2.2.4-1ubuntu1.5	1
ghcr.io/linuxserver/booksonic-air :version-v2009.1.0	baa4fa9549dc	gnupg2@2.2.4-1ubuntu1.4	2.2.4-1ubuntu1.5	1
ghcr.io/linuxserver/resilio-sync :version-2.7.2.1375	605b6d544028	gnupg2@2.2.4-1ubuntu1.4	2.2.4-1ubuntu1.5	1
ghcr.io/wmde/wbaas-backup :v0.1.7	8e6a9516eac0	gnupg2@2.2.4-1ubuntu1.4	2.2.4-1ubuntu1.5	1
quay.io/mongodb/mongodb-enterprise-operator :1.8.2	a1c3843b03bc	gnupg@1.4.20-1ubuntu3.3	no fix listed	1
quay.io/opsmxpublic/spin-sample-pipeline :v1.0.1	c6a934439421	gnupg@1.4.20-1ubuntu3.3	no fix listed	1