CVE-2019-18218

High

Advisory

Published 21 Oct 2019In the index since 6 Sept 2026

Severity: High; worst across findings
CVSS: 7.8; base score, highest
EPSS: 0.018; 78th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 156; of 17,781 indexed, latest versions
Container images: 131; deployed by those charts
Fix available: 3 of 3; affected packages

Red Hat Security Advisory: file security update

Carried by container images the latest versions of 156 of 17,781 indexed charts deploy, on 131 images.

Affected package	Affected versions	Fixed in	Images
filedeb	1:5.14-2ubuntu3.2, 1:5.14-2ubuntu3.3, 1:5.14-2ubuntu3.4, 1:5.22+15-2+deb8u3+10 more	1:5.14-2ubuntu3.4+esm1, 1:5.22+15-2+deb8u6, 1:5.25-2ubuntu1.3, 1:5.30-1+deb9u3+2 more	85
filerpm	5.32-lp151.7.22, 5.33-8.el8, 5.33-13.el8, 5.33-13.el8_2.1+2 more	0:5.33-20.el8, 5.32-lp151.8.3.1	43
fileapk	5.32-r0, 5.35-r0	5.32-r2, 5.36-r1	3

OSV records: ALPINE-CVE-2019-18218 RHSA-2021:4374 UBUNTU-CVE-2019-18218 DLA-1969-1 DSA-4550-1 openSUSE-SU-2020:0677-1
Also known as: USN-4172-1, USN-4172-2

Charts affected

156 by stars

Chart

Latest

Affected images

Radar Score

Wordressuvaise-wordpress

0.2.0

1 of 2 See more

Wordress uvaise-wordpress 0.2.0

1 of the 2 container images this version deploys carry CVE-2019-18218.

Container image	Digest	Package	Fixed in
library/wordpress :4.8-apache	6216f64ab88f	file@1:5.22+15-2+deb8u3	1:5.22+15-2+deb8u6

Open the chart page →

1,339

webhookie-allwebhookie

0.1.2

1 of 3 See more

webhookie-all webhookie 0.1.2

1 of the 3 container images this version deploys carry CVE-2019-18218.

Container image	Digest	Package	Fixed in
quay.io/keycloak/keycloak :14.0.0	3029dc0f1d38	file@5.33-16.el8_3.1	0:5.33-20.el8

Open the chart page →

28,605

cadencewenerme

0.23.0

1 of 5 See more

cadence wenerme 0.23.0

1 of the 5 container images this version deploys carry CVE-2019-18218.

Container image	Digest	Package	Fixed in
library/cassandra :3.11.3	ce85468c5bad	file@1:5.30-1+deb9u2	1:5.30-1+deb9u3

Open the chart page →

10,127

miniowenerme

8.0.10

1 of 1 See more

minio wenerme 8.0.10

1 of the 1 container images this version deploys carry CVE-2019-18218.

Container image	Digest	Package	Fixed in
minio/minio :RELEASE.2021-02-14T04-01-33Z	bd11edda91f3	file@5.33-16.el8	0:5.33-20.el8

Open the chart page →

6,915

temporalwenerme

0.15.1

1 of 13 See more

temporal wenerme 0.15.1

1 of the 13 container images this version deploys carry CVE-2019-18218.

Container image	Digest	Package	Fixed in
library/cassandra :3.11.3	ce85468c5bad	file@1:5.30-1+deb9u2	1:5.30-1+deb9u3

Open the chart page →

22,665

Wordresswordpress

0.2.0

1 of 2 See more

Wordress wordpress 0.2.0

1 of the 2 container images this version deploys carry CVE-2019-18218.

Container image	Digest	Package	Fixed in
library/wordpress :4.8-apache	6216f64ab88f	file@1:5.22+15-2+deb8u3	1:5.22+15-2+deb8u6

Open the chart page →

1,339

Container images carrying it

131 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container image	Digest	Package	Fixed in	Used by
oomk8s/readiness-check :2.0.2	875814cc853d	file@1:5.25-2ubuntu1.1	1:5.25-2ubuntu1.3	11
library/cassandra :3.11.3	ce85468c5bad	file@1:5.30-1+deb9u2	1:5.30-1+deb9u3	7
library/postgres :9.6.2	5284ba74a106	file@1:5.22+15-2+deb8u3	1:5.22+15-2+deb8u6	7
oomk8s/readiness-check :2.0.0	7daa08b81954	file@1:5.25-2ubuntu1	1:5.25-2ubuntu1.3	6
hyperledger/fabric-ca-tools :latest	4ce6f43ded2e	file@1:5.25-2ubuntu1.1	1:5.25-2ubuntu1.3	4
hyperledger/fabric-couchdb :0.4.15	f6c724592abf	file@1:5.25-2ubuntu1.2	1:5.25-2ubuntu1.3	4
library/wordpress :4.8-apache	6216f64ab88f	file@1:5.22+15-2+deb8u3	1:5.22+15-2+deb8u6	4
osixia/phpldapadmin :0.7.1	1ab629698ae0	file@1:5.30-1+deb9u1	1:5.30-1+deb9u3	4
mautic/mautic :2.13-apache	a954c5868d76	file@1:5.22+15-2+deb8u3	1:5.22+15-2+deb8u6	3
minio/minio :RELEASE.2021-02-14T04-01-33Z	bd11edda91f3	file@5.33-16.el8	0:5.33-20.el8	3
omecproject/cdn-video-repo :1.0.0 :remote-v3	d59ccb138ffb	file@1:5.25-2ubuntu1.1	1:5.25-2ubuntu1.3	3
quay.io/devtron/postgres :11.3	ef035ac10498	file@1:5.30-1+deb9u2	1:5.30-1+deb9u3	3
library/postgres :11.5	b3770d9c4ef1	file@1:5.30-1+deb9u2	1:5.30-1+deb9u3	2
lightstep/collector :2021-01-26_23-02-36Z	11c5569aaf3b	file@1:5.25-2ubuntu1.2	1:5.25-2ubuntu1.3	2
nachomillangarcia/prometheus_aws_cost_exporter :latest	e4ce056f2d6d	file@1:5.30-1+deb9u2	1:5.30-1+deb9u3	2
neilpeterson/azure-vote-front :v3	84062718347c	file@1:5.30-1+deb9u1	1:5.30-1+deb9u3	2
omecproject/kubernetes-synchronizer :comac-1.0.0	7c17a7b1d1ef	file@5.35-r0	5.36-r1	2
omecproject/mcord-synchronizer :comac-1.0.0	cfdb566dd949	file@1:5.25-2ubuntu1.1	1:5.25-2ubuntu1.3	2
statsd/statsd :v0.8.6	dab129e74c25	file@1:5.30-1+deb9u2	1:5.30-1+deb9u3	2
ujamii/prometheus-sentry-exporter :0.5.0	6243197349e1	file@1:5.35-4	1:5.35-4+deb10u1	2
wurstmeister/zookeeper :latest	7a7fd44a7210	file@1:5.14-2ubuntu3.2	1:5.14-2ubuntu3.4+esm1	2
quay.io/opencloudio/ibm-mongodb :4.0.24	d8c631a6dc43	file@5.33-16.el8_3.1	0:5.33-20.el8	2
quay.io/openshift/origin-cli :4.7	464a3af4dfe0	file@5.33-16.el8_3.1	0:5.33-20.el8	2
quay.io/openshift/origin-cli :4.8	bb5e052770e5	file@5.33-16.el8_3.1	0:5.33-20.el8	2
aerospike/aerospike-server :4.5.0.5	5bec98d46c8a	file@1:5.30-1+deb9u2	1:5.30-1+deb9u3	1
alphayax/phpmemcachedadmin :latest	c284977f027a	file@1:5.30-1+deb9u2	1:5.30-1+deb9u3	1
amancevice/superset :0.28.1	c8c04bfe3d66	file@1:5.30-1+deb9u2	1:5.30-1+deb9u3	1
anchore/anchore-engine :v0.10.0	bde9eedf639d	file@5.33-16.el8_3.1	0:5.33-20.el8	1
anchore/anchore-engine :v0.7.1	ed9b3badd17c	file@5.33-8.el8	0:5.33-20.el8	1
apicurio/apicurio-registry-kafkasql :2.1.0.Final	a97d67487532	file@5.33-16.el8_3.1	0:5.33-20.el8	1
billimek/comcastusage-for-influxdb :latest	801bba1228ac	file@1:5.22+15-2+deb8u3	1:5.22+15-2+deb8u6	1
bryanalves/honeywell_exporter :0.0.11	95f73dce8b21	file@1:5.30-1+deb9u1	1:5.30-1+deb9u3	1
bryanalves/smart_exporter :0.2	af47dfbb9413	file@1:5.30-1+deb9u2	1:5.30-1+deb9u3	1
bsgrigorov/helm-operator :latest	45ab095f09c8	file@5.33-16.el8_3.1	0:5.33-20.el8	1
camptocamp/pghoard :10	bff736b15623	file@1:5.30-1+deb9u2	1:5.30-1+deb9u3	1
camptocamp/r10k-dashboard :0.2.6	073be594d145	file@1:5.22+15-2+deb8u3	1:5.22+15-2+deb8u6	1
cdignam/kodiak :v0.54.0	5a6a55b39cee	file@1:5.35-4	1:5.35-4+deb10u1	1
ceticasbl/pg-ldap-sync :latest	6c0aa7567145	file@1:5.35-4	1:5.35-4+deb10u1	1
cfcontainerization/cf-operator :v2.3.0-0.g27a91cdf	82fa261c18a8	file@5.32-lp151.7.22	5.32-lp151.8.3.1	1
cfcontainerization/quarks-job :v0.0.0-0.g70ae34b	58fb1c173a46	file@5.32-lp151.7.22	5.32-lp151.8.3.1	1
chetangautamm/repo :Opensips_Build	b4b94155ff5a	file@1:5.14-2ubuntu3.4	1:5.14-2ubuntu3.4+esm1	1
cockroachdb/cockroach-operator :v2.1.0	983312754620	file@5.33-16.el8_3.1	0:5.33-20.el8	1
confluentinc/cp-enterprise-control-center :6.1.0	f2975d507a2a	file@5.33-16.el8	0:5.33-20.el8	1
confluentinc/cp-enterprise-kafka :6.1.0	8f1544df1f48	file@5.33-16.el8	0:5.33-20.el8	1
confluentinc/cp-kafka :5.0.1	c87b1c07fb53	file@1:5.22+15-2+deb8u4	1:5.22+15-2+deb8u6	1
confluentinc/cp-kafka-connect :6.1.0	4bc70a83ca6f	file@5.33-16.el8	0:5.33-20.el8	1
confluentinc/cp-kafka-rest :6.1.0	b0b7aa26254a	file@5.33-16.el8	0:5.33-20.el8	1
confluentinc/cp-ksqldb-server :6.1.0	ee403d5b9090	file@5.33-16.el8	0:5.33-20.el8	1
confluentinc/cp-schema-registry :6.1.0	b651d4b6185a	file@5.33-16.el8	0:5.33-20.el8	1
confluentinc/cp-zookeeper :6.1.0	78c190f4472c	file@5.33-16.el8	0:5.33-20.el8	1