CVE-2019-13627
MediumAdvisory
Published 24 Sept 2019In the index since 6 Sept 2026
- Severity
- Medium
- worst across findings
- CVSS
- 6.3
- base score, highest
- EPSS
- 0.005
- 42nd percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 181
- of 17,781 indexed, latest versions
- Container images
- 166
- deployed by those charts
- Fix available
- 4 of 4
- affected packages
Red Hat Security Advisory: libgcrypt security, bug fix, and enhancement update
Carried by container images the latest versions of 181 of 17,781 indexed charts deploy, on 166 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| libgcrypt20deb | 1.6.3-2+deb8u1, 1.6.3-2+deb8u2, 1.6.3-2+deb8u3, 1.6.3-2+deb8u4+8 more | 1.6.3-2+deb8u6, 1.6.3-2+deb8u8, 1.6.5-2ubuntu0.6, 1.8.1-4ubuntu1.2 | 130 |
| libgcryptapk | 1.8.4-r0, 1.8.4-r1, 1.8.4-r2 | 1.8.5-r0 | 16 |
| libgcryptrpm | 1.8.2-lp151.9.4.1, 1.8.3-2.el8, 1.8.3-4.el8 | 0:1.8.5-4.el8, 1.8.2-lp151.9.7.1 | 13 |
| libgcrypt11deb | 1.5.3-2ubuntu4.1, 1.5.3-2ubuntu4.5, 1.5.3-2ubuntu4.6 | 1.5.3-2ubuntu4.6+esm1 | 7 |
- OSV records
- ALPINE-CVE-2019-13627RHSA-2020:4482UBUNTU-CVE-2019-13627DLA-1931-1DLA-1931-2openSUSE-SU-2020:0022-1
- Also known as
- USN-4236-1, USN-4236-2, USN-4236-3
Charts affected
181 by stars
Container images carrying it
166 by charts deploying them
A fixed version is listed for 4 of the 4 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| oomk8s/ | 875814cc853d | libgcrypt20 | 1.6.5-2ubuntu0.6 | 11 |
| library/ | 5284ba74a106 | libgcrypt20 | 1.6.3-2+deb8u6 | 7 |
| oomk8s/ | 7daa08b81954 | libgcrypt20 | 1.6.5-2ubuntu0.6 | 6 |
| bde2020/ | 620267768985 | libgcrypt20 | 1.6.3-2+deb8u6 | 4 |
| hyperledger/ | 4ce6f43ded2e | libgcrypt20 | 1.6.5-2ubuntu0.6 | 4 |
| hyperledger/ | f6c724592abf | libgcrypt20 | 1.6.5-2ubuntu0.6 | 4 |
| library/ | 6216f64ab88f | libgcrypt20 | 1.6.3-2+deb8u6 | 4 |
| library/ | 83bc87df343f | libgcrypt | 1.8.5-r0 | 3 |
| mautic/ | a954c5868d76 | libgcrypt20 | 1.6.3-2+deb8u6 | 3 |
| omecproject/ | d59ccb138ffb | libgcrypt20 | 1.6.5-2ubuntu0.6 | 3 |
| danisla/ | 255ba2dd739b | libgcrypt20 | 1.6.3-2+deb8u6 | 2 |
| gradiant/ | aae4f8a21f8b | libgcrypt20 | 1.6.3-2+deb8u6 | 2 |
| istio/ | 40e8aba77c1b | libgcrypt20 | 1.6.5-2ubuntu0.6 | 2 |
| istio/ | ee156b8aefd6 | libgcrypt20 | 1.6.5-2ubuntu0.6 | 2 |
| istio/ | e86d247b7ac2 | libgcrypt20 | 1.6.5-2ubuntu0.6 | 2 |
| istio/ | eab80bcd2132 | libgcrypt20 | 1.6.5-2ubuntu0.6 | 2 |
| istio/ | 1e37fca43550 | libgcrypt20 | 1.6.5-2ubuntu0.6 | 2 |
| istio/ | e454cab754cf | libgcrypt20 | 1.6.5-2ubuntu0.6 | 2 |
| jfindley/ | 8dbae22f4fe7 | libgcrypt20 | 1.6.3-2+deb8u6 | 2 |
| library/ | d969194a7c4d | libgcrypt20 | 1.6.3-2+deb8u6 | 2 |
| lightstep/ | 11c5569aaf3b | libgcrypt20 | 1.6.5-2ubuntu0.6 | 2 |
| migmartri/ | 486aacfd5aa9 | libgcrypt20 | 1.6.3-2+deb8u6 | 2 |
| mojaloop/ | 5f025fe3554b | libgcrypt | 1.8.5-r0 | 2 |
| mojaloop/ | c338940807c9 | libgcrypt | 1.8.5-r0 | 2 |
| mojaloop/ | 89cb2e16a2a3 | libgcrypt | 1.8.5-r0 | 2 |
| ngick8stesting/ | 1e764eab77b4 | libgcrypt20 | 1.8.1-4ubuntu1.2 | 2 |
| omecproject/ | cfdb566dd949 | libgcrypt20 | 1.6.5-2ubuntu0.6 | 2 |
| spoonest/ | fd2b754a5d37 | libgcrypt20 | 1.6.3-2+deb8u6 | 2 |
| wurstmeister/ | 7a7fd44a7210 | libgcrypt11 | 1.5.3-2ubuntu4.6+esm1 | 2 |
| gcr.io/ | fbe12aa24de6 | libgcrypt20 | 1.6.5-2ubuntu0.6 | 2 |
| a10networks/ | 8dc58d434d71 | libgcrypt20 | 1.8.1-4ubuntu1.2 | 1 |
| a5huynh/ | 0c7307d31ca8 | libgcrypt20 | 1.6.3-2+deb8u6 | 1 |
| anchore/ | ed9b3badd17c | libgcrypt | 0:1.8.5-4.el8 | 1 |
| apacherocketmq/ | 24799aff6cf8 | libgcrypt20 | 1.6.3-2+deb8u6 | 1 |
| arilot/ | 27a4f7e0f9f1 | libgcrypt20 | 1.6.5-2ubuntu0.6 | 1 |
| billimek/ | 801bba1228ac | libgcrypt20 | 1.6.3-2+deb8u6 | 1 |
| billimek/ | bf8158556035 | libgcrypt20 | 1.6.3-2+deb8u6 | 1 |
| buoyantio/ | f4048edaca6f | libgcrypt20 | 1.6.3-2+deb8u6 | 1 |
| camptocamp/ | 9dec019e4c62 | libgcrypt20 | 1.6.3-2+deb8u6 | 1 |
| camptocamp/ | 5e55370dd292 | libgcrypt20 | 1.6.3-2+deb8u6 | 1 |
| camptocamp/ | 073be594d145 | libgcrypt20 | 1.6.3-2+deb8u6 | 1 |
| cfcontainerization/ | 82fa261c18a8 | libgcrypt | 1.8.2-lp151.9.7.1 | 1 |
| cfcontainerization/ | 58fb1c173a46 | libgcrypt | 1.8.2-lp151.9.7.1 | 1 |
| chetangautamm/ | b4b94155ff5a | libgcrypt11 | 1.5.3-2ubuntu4.6+esm1 | 1 |
| cheyang/ | 46cc34755493 | libgcrypt20 | 1.6.5-2ubuntu0.6 | 1 |
| citizenstig/ | b81c818ccb86 | libgcrypt20 | 1.6.5-2ubuntu0.6 | 1 |
| codylundquist/ | 630ab586b8c1 | libgcrypt20 | 1.6.3-2+deb8u6 | 1 |
| confluentinc/ | 1bbda887bc53 | libgcrypt20 | 1.6.3-2+deb8u6 | 1 |
| confluentinc/ | c87b1c07fb53 | libgcrypt20 | 1.6.3-2+deb8u6 | 1 |
| cradlepoint/ | 8f5720b0cd03 | libgcrypt20 | 1.8.1-4ubuntu1.2 | 1 |