CVE-2019-13173
HighAdvisory
Published 30 May 2019In the index since 6 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 7.5
- base score, highest
- EPSS
- 0.024
- 83rd percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 51
- of 17,781 indexed, latest versions
- Container images
- 47
- deployed by those charts
- Fix available
- 2 of 2
- affected packages
Arbitrary File Overwrite in fstream
Carried by container images the latest versions of 51 of 17,781 indexed charts deploy, on 47 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| fstreamnpm | 1.0.8, 1.0.10, 1.0.11 | 1.0.12 | 47 |
| node-fstreamdeb | 0.1.24-1 | 0.1.24-1ubuntu0.16.04.1~esm1 | 1 |
- OSV records
- GHSA-xf7w-r453-m56cUBUNTU-CVE-2019-13173
- Also known as
- USN-4863-1
Charts affected
51 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| helloworldyotron-helm-charts | 0.1.0 | 1 of 1See more | 1,309 |
Container images carrying it
47 by charts deploying them
A fixed version is listed for 2 of the 2 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| hyperledger/ | 4ce6f43ded2e | fstream | 1.0.12 | 4 |
| hyperledger/ | f6c724592abf | fstream | 1.0.12 | 4 |
| pantsel/ | c8172b75607d | fstream | 1.0.12 | 3 |
| istio/ | 09b9d6958a13 | fstream | 1.0.12 | 2 |
| istio/ | eb0f1a725ca8 | fstream | 1.0.12 | 2 |
| migmartri/ | 486aacfd5aa9 | fstream | 1.0.12 | 2 |
| statsd/ | dab129e74c25 | fstream | 1.0.12 | 2 |
| a5hut0sh/ | 2ae77620e616 | fstream | 1.0.12 | 1 |
| billimek/ | 5814f0bcf5ba | fstream | 1.0.12 | 1 |
| daskdev/ | 052630f5ca04 | fstream | 1.0.12 | 1 |
| decayofmind/ | 1e18e92fe694 | fstream | 1.0.12 | 1 |
| dessalines/ | ee4c620d8e93 | fstream | 1.0.12 | 1 |
| devspacecloud/ | deef55ff29a7 | fstream | 1.0.12 | 1 |
| ethereumex/ | a7603aa8df4c | fstream node-fstream | 1.0.12 0.1.24-1ubuntu0.16.04.1~esm1 | 1 |
| galaxy/ | 0267bad550e6 | fstream | 1.0.12 | 1 |
| halkeye/ | 7638bfba70b0 | fstream | 1.0.12 | 1 |
| hyperledger/ | c65891b6c237 | fstream | 1.0.12 | 1 |
| ibarreche/ | b7a08274e69f | fstream | 1.0.12 | 1 |
| ibmcom/ | 240ff499eb5b | fstream | 1.0.12 | 1 |
| ibmcom/ | e2a86997b36b | fstream | 1.0.12 | 1 |
| ibmcom/ | 02d882f2836e | fstream | 1.0.12 | 1 |
| ibmcom/ | b8e8df11072d | fstream | 1.0.12 | 1 |
| ibmcom/ | b558f2b444ae | fstream | 1.0.12 | 1 |
| ibmcom/ | ab3fd1fdfa18 | fstream | 1.0.12 | 1 |
| ibmcom/ | ed5505e5c7ec | fstream | 1.0.12 | 1 |
| ibmcom/ | e17bdccc5030 | fstream | 1.0.12 | 1 |
| ibmcom/ | 0762ab1df6c1 | fstream | 1.0.12 | 1 |
| jupyterhub/ | c36cf3cc1c99 | fstream | 1.0.12 | 1 |
| konradkleine/ | 181aad54ee64 | fstream | 1.0.12 | 1 |
| koumoul/ | 8eeca2e8285b | fstream | 1.0.12 | 1 |
| kubesphere/ | f1b5bf878196 | fstream | 1.0.12 | 1 |
| lavandadelpatio/ | 501c3f31e0bc | fstream | 1.0.12 | 1 |
| linuxserver/ | 45c5fe102ff3 | fstream | 1.0.12 | 1 |
| logentries/ | f1f90a236998 | fstream | 1.0.12 | 1 |
| lsstsqre/ | 5e0ade6bed1c | fstream | 1.0.12 | 1 |
| microcks/ | cb72e46a1b3c | fstream | 1.0.12 | 1 |
| minddocdev/ | 6c60b11a4fa7 | fstream | 1.0.12 | 1 |
| muluder/ | 43b597a93da7 | fstream | 1.0.12 | 1 |
| nodered/ | 070643219ea2 | fstream | 1.0.12 | 1 |
| omecproject/ | 5715e5648aa0 | fstream | 1.0.12 | 1 |
| openthread/ | f307f59f6432 | fstream | 1.0.12 | 1 |
| openwhisk/ | c80dba0de3aa | fstream | 1.0.12 | 1 |
| pachyderm/ | 2b27f41d4d02 | fstream | 1.0.12 | 1 |
| parithoshj/ | cdca426fea6d | fstream | 1.0.12 | 1 |
| socialmediamacroscope/ | c5095e94bc65 | fstream | 1.0.12 | 1 |
| timothyclarke/ | 22c41e5ca7e2 | fstream | 1.0.12 | 1 |
| willwill/ | d443017aae98 | fstream | 1.0.12 | 1 |