StackRadar

CVE-2019-18276

High

Advisory

Published 28 Nov 2019In the index since 6 Sept 2026
Severity
High
worst across findings
CVSS
7.8
base score, highest
EPSS
0.026
85th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
384
of 17,781 indexed, latest versions
Container images
322
deployed by those charts
Fix available
2 of 2
affected packages

Red Hat Security Advisory: bash security and bug fix update

Carried by container images the latest versions of 384 of 17,781 indexed charts deploy, on 322 images.

Affected packageAffected versionsFixed inImages
bashdeb4.3-7ubuntu1.5, 4.3-7ubuntu1.7, 4.3-14ubuntu1.1, 4.3-14ubuntu1.2+7 more4.3-7ubuntu1.8+esm2, 4.3-14ubuntu1.4+esm1, 4.4.18-2ubuntu1.3, 5.0-6ubuntu1.2299
bashrpm4.4.19-7.el8, 4.4.19-10.el8, 4.4.19-12.el8, 4.4.19-12.el8_20:4.4.19-14.el823
OSV records
RHSA-2021:1679UBUNTU-CVE-2019-18276
Also known as
USN-5380-1

Charts affected

384 by stars
ChartLatestAffected imagesRadar Score
pndasmo-helm-chart6.0.01 of 3See more

pnda smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2019-18276.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.07daa08b81954
bash@4.3-14ubuntu1.2
4.3-14ubuntu1.4+esm1

Open the chart page →

27,477
pombasmo-helm-chart6.0.01 of 17See more

pomba smo-helm-chart 6.0.0

1 of the 17 container images this version deploys carry CVE-2019-18276.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.07daa08b81954
bash@4.3-14ubuntu1.2
4.3-14ubuntu1.4+esm1

Open the chart page →

29,220
portalsmo-helm-chart6.0.01 of 8See more

portal smo-helm-chart 6.0.0

1 of the 8 container images this version deploys carry CVE-2019-18276.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.07daa08b81954
bash@4.3-14ubuntu1.2
4.3-14ubuntu1.4+esm1

Open the chart page →

27,477
sdcsmo-helm-chart6.0.01 of 14See more

sdc smo-helm-chart 6.0.0

1 of the 14 container images this version deploys carry CVE-2019-18276.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
bash@4.3-14ubuntu1.2
4.3-14ubuntu1.4+esm1

Open the chart page →

25,769
sdnc-ansible-serversmo-helm-chart6.0.01 of 3See more

sdnc-ansible-server smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2019-18276.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
bash@4.3-14ubuntu1.2
4.3-14ubuntu1.4+esm1

Open the chart page →

25,769
sdnc-portalsmo-helm-chart6.0.01 of 3See more

sdnc-portal smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2019-18276.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
bash@4.3-14ubuntu1.2
4.3-14ubuntu1.4+esm1

Open the chart page →

25,769
sdnc-promsmo-helm-chart6.0.01 of 2See more

sdnc-prom smo-helm-chart 6.0.0

1 of the 2 container images this version deploys carry CVE-2019-18276.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
bash@4.3-14ubuntu1.2
4.3-14ubuntu1.4+esm1

Open the chart page →

24,776
sdnc-websmo-helm-chart6.0.01 of 3See more

sdnc-web smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2019-18276.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
bash@4.3-14ubuntu1.2
4.3-14ubuntu1.4+esm1

Open the chart page →

24,776
ueb-listenersmo-helm-chart6.0.01 of 3See more

ueb-listener smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2019-18276.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
bash@4.3-14ubuntu1.2
4.3-14ubuntu1.4+esm1

Open the chart page →

25,769
space-engineerssoblivionscall1.0.21 of 2See more

space-engineers soblivionscall 1.0.2

1 of the 2 container images this version deploys carry CVE-2019-18276.

Container imageDigestPackageFixed in
library/ubuntu:xenial1f1a2d56de1d
bash@4.3-14ubuntu1.4
4.3-14ubuntu1.4+esm1

Open the chart page →

2,766
pagessrinipages1.0.02 of 3See more

pages srinipages 1.0.0

2 of the 3 container images this version deploys carry CVE-2019-18276.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2
flyway/flyway:6.4.422d97ceb0c47
bash@4.4.18-2ubuntu1.2
4.4.18-2ubuntu1.3

Open the chart page →

20,190
operatorstakewise2.1.11 of 5See more

operator stakewise 2.1.1

1 of the 5 container images this version deploys carry CVE-2019-18276.

Container imageDigestPackageFixed in
sigp/lighthouse:v2.1.2ad501f02cfef
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2

Open the chart page →

6,545
pagesstephendillondell1.0.02 of 3See more

pages stephendillondell 1.0.0

2 of the 3 container images this version deploys carry CVE-2019-18276.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2
flyway/flyway:6.4.422d97ceb0c47
bash@4.4.18-2ubuntu1.2
4.4.18-2ubuntu1.3

Open the chart page →

20,190
pagessunilb2590-pages1.0.02 of 3See more

pages sunilb2590-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2019-18276.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2
flyway/flyway:6.4.422d97ceb0c47
bash@4.4.18-2ubuntu1.2
4.4.18-2ubuntu1.3

Open the chart page →

20,190
freeradiussvtech-public-helm-charts0.1.51 of 4See more

freeradius svtech-public-helm-charts 0.1.5

1 of the 4 container images this version deploys carry CVE-2019-18276.

Container imageDigestPackageFixed in
ptthanh1511/freeradius-server:3.0.26-netdebug5741cbde85ab
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2

Open the chart page →

12,655
explorersynapse0.2.161 of 6See more

explorer synapse 0.2.16

1 of the 6 container images this version deploys carry CVE-2019-18276.

Container imageDigestPackageFixed in
yandex/clickhouse-server:latest1cbf75aabe1e
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2

Open the chart page →

8,518
istio-discoverytemp-charts0.3.31 of 1See more

istio-discovery temp-charts 0.3.3

1 of the 1 container images this version deploys carry CVE-2019-18276.

Container imageDigestPackageFixed in
istio/pilot:1.10.0294ca55bd1cc
bash@4.4.18-2ubuntu1.2
4.4.18-2ubuntu1.3

Open the chart page →

10,568
istio-ingresstemp-charts0.3.31 of 1See more

istio-ingress temp-charts 0.3.3

1 of the 1 container images this version deploys carry CVE-2019-18276.

Container imageDigestPackageFixed in
istio/proxyv2:1.10.088c6c693e67a
bash@4.4.18-2ubuntu1.2
4.4.18-2ubuntu1.3

Open the chart page →

10,514
pagestest43221.0.02 of 3See more

pages test4322 1.0.0

2 of the 3 container images this version deploys carry CVE-2019-18276.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2
flyway/flyway:6.4.422d97ceb0c47
bash@4.4.18-2ubuntu1.2
4.4.18-2ubuntu1.3

Open the chart page →

20,190
standard-applicationthebitgram1.0.121 of 1See more

standard-application thebitgram 1.0.12

1 of the 1 container images this version deploys carry CVE-2019-18276.

Container imageDigestPackageFixed in
gcr.io/google_containers/echoserver:1.10cb5c1bddd1b5
bash@4.3-14ubuntu1.2
4.3-14ubuntu1.4+esm1

Open the chart page →

11,007
trafficlight-apithecampagnards0.1.11 of 1See more

trafficlight-api thecampagnards 0.1.1

1 of the 1 container images this version deploys carry CVE-2019-18276.

Container imageDigestPackageFixed in
thecampagnards/trafficlight-api:main7dca9d973837
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2

Open the chart page →

4,357
pagesthiru-pages1.0.02 of 3See more

pages thiru-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2019-18276.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2
flyway/flyway:6.4.422d97ceb0c47
bash@4.4.18-2ubuntu1.2
4.4.18-2ubuntu1.3

Open the chart page →

20,190
pagesthuy-pages1.0.02 of 3See more

pages thuy-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2019-18276.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2
flyway/flyway:6.4.422d97ceb0c47
bash@4.4.18-2ubuntu1.2
4.4.18-2ubuntu1.3

Open the chart page →

20,190
lightstepupdater-lightstep-satellite1.2.21 of 1See more

lightstep updater-lightstep-satellite 1.2.2

1 of the 1 container images this version deploys carry CVE-2019-18276.

Container imageDigestPackageFixed in
lightstep/collector:2021-01-26_23-02-36Z11c5569aaf3b
bash@4.3-14ubuntu1.2
4.3-14ubuntu1.4+esm1

Open the chart page →

15,330
pagesvictor-pages1.0.02 of 3See more

pages victor-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2019-18276.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2
flyway/flyway:6.4.422d97ceb0c47
bash@4.4.18-2ubuntu1.2
4.4.18-2ubuntu1.3

Open the chart page →

20,190
kube-monitoring-telegram-botviento-repository1.0.01 of 1See more

kube-monitoring-telegram-bot viento-repository 1.0.0

1 of the 1 container images this version deploys carry CVE-2019-18276.

Container imageDigestPackageFixed in
vientoprojects/kubernetes-monitoring-telegram-bot:latesteb2a71531741
bash@4.4.18-2ubuntu1.2
4.4.18-2ubuntu1.3

Open the chart page →

7,885
pageswalter1.0.02 of 3See more

pages walter 1.0.0

2 of the 3 container images this version deploys carry CVE-2019-18276.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2
flyway/flyway:6.4.422d97ceb0c47
bash@4.4.18-2ubuntu1.2
4.4.18-2ubuntu1.3

Open the chart page →

20,190
wazuh-manager-filebeatwazuh-manager-filebeat0.1.0-gamma1 of 1See more

wazuh-manager-filebeat wazuh-manager-filebeat 0.1.0-gamma

1 of the 1 container images this version deploys carry CVE-2019-18276.

Container imageDigestPackageFixed in
iosifache/wazuh-manager-filebeat:latest85df3f04b5da
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2

Open the chart page →

11,119
webhookiewebhookie0.1.21 of 1See more

webhookie webhookie 0.1.2

1 of the 1 container images this version deploys carry CVE-2019-18276.

Container imageDigestPackageFixed in
hookiesolutions/webhookie:latest0629694246ba
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2

Open the chart page →

14,364
webhookie-allwebhookie0.1.21 of 3See more

webhookie-all webhookie 0.1.2

1 of the 3 container images this version deploys carry CVE-2019-18276.

Container imageDigestPackageFixed in
hookiesolutions/webhookie:latest0629694246ba
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2

Open the chart page →

28,605
emissary-ingresswenerme8.12.21 of 2See more

emissary-ingress wenerme 8.12.2

1 of the 2 container images this version deploys carry CVE-2019-18276.

Container imageDigestPackageFixed in
istio/kubectl:1.5.10dbb7726d1bf0
bash@4.4.18-2ubuntu1.2
4.4.18-2ubuntu1.3

Open the chart page →

10,843
longhornwenerme1.2.31 of 2See more

longhorn wenerme 1.2.3

1 of the 2 container images this version deploys carry CVE-2019-18276.

Container imageDigestPackageFixed in
longhornio/longhorn-manager:v1.2.3dca34321452c
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2

Open the chart page →

15,230
miniowenerme8.0.101 of 1See more

minio wenerme 8.0.10

1 of the 1 container images this version deploys carry CVE-2019-18276.

Container imageDigestPackageFixed in
minio/minio:RELEASE.2021-02-14T04-01-33Zbd11edda91f3
bash@4.4.19-12.el8
0:4.4.19-14.el8

Open the chart page →

6,915
clickhousezloi-space1.2.02 of 3See more

clickhouse zloi-space 1.2.0

2 of the 3 container images this version deploys carry CVE-2019-18276.

Container imageDigestPackageFixed in
yandex/clickhouse-client:21.3863f94a0f607
bash@4.4.18-2ubuntu1.2
4.4.18-2ubuntu1.3
yandex/clickhouse-server:21.3.204eccfffb01d7
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2

Open the chart page →

9,207

Container images carrying it

322 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
dellcloud/pages:monitor6ba7b22caacd
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2
79
flyway/flyway:6.4.422d97ceb0c47
bash@4.4.18-2ubuntu1.2
4.4.18-2ubuntu1.3
79
oomk8s/readiness-check:2.0.2875814cc853d
bash@4.3-14ubuntu1.2
4.3-14ubuntu1.4+esm1
11
library/mongo:5.0.6-focal8e70544b6c76
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2
10
oomk8s/readiness-check:2.0.07daa08b81954
bash@4.3-14ubuntu1.2
4.3-14ubuntu1.4+esm1
6
hyperledger/fabric-ca-tools:latest4ce6f43ded2e
bash@4.3-14ubuntu1.2
4.3-14ubuntu1.4+esm1
4
hyperledger/fabric-couchdb:0.4.15f6c724592abf
bash@4.3-14ubuntu1.2
4.3-14ubuntu1.4+esm1
4
library/mongo:4.2.12-bionic628741415fc9
bash@4.4.18-2ubuntu1.2
4.4.18-2ubuntu1.3
4
library/mongo:4.4.66efa05203990
bash@4.4.18-2ubuntu1.2
4.4.18-2ubuntu1.3
4
oscarsotosanchez/weatherservice:v1.0911ec961d10b
bash@4.4.18-2ubuntu1.2
4.4.18-2ubuntu1.3
4
cloudve/cloudlaunch-server:latest4a3d7fae90bb
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2
3
dgraph/dgraph:v21.12.03b55ea83fffe
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2
3
minio/minio:RELEASE.2021-02-14T04-01-33Zbd11edda91f3
bash@4.4.19-12.el8
0:4.4.19-14.el8
3
omecproject/cdn-video-repo:1.0.0:remote-v3d59ccb138ffb
bash@4.3-14ubuntu1.2
4.3-14ubuntu1.4+esm1
3
selenium/hub:3.141.5902f251d48d5f
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2
3
xenondb/percona:5.7.330e26872a2b67
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2
3
quay.io/devtron/google-chat-alert-manager:v2.0.239f2c6e0af38
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2
3
quay.io/devtron/inception:7beef376-948-313784c3b91bebd3d
bash@4.3-14ubuntu1.4
4.3-14ubuntu1.4+esm1
3
freeradius/freeradius-server:3.0.2121c8bfa904d8
bash@4.4.18-2ubuntu1.2
4.4.18-2ubuntu1.3
2
geoservercloud/geoserver-cloud-gateway:1.0-RC3756559ee788a
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2
2
geoservercloud/geoserver-cloud-rest:1.0-RC399540eef78ad
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2
2
geoservercloud/geoserver-cloud-wcs:1.0-RC35c254c53a357
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2
2
geoservercloud/geoserver-cloud-webui:1.0-RC3c687b1cbc891
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2
2
geoservercloud/geoserver-cloud-wfs:1.0-RC35288f320cf36
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2
2
geoservercloud/geoserver-cloud-wms:1.0-RC3a30a60ac6cd0
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2
2
honestica/kube-iptables-tailer:master-91a393242fb939
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2
2
hookiesolutions/webhookie:latest0629694246ba
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2
2
interlayhq/interbtc-clients:vault-masterc3e311de67da
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2
2
iomesh/node-disk-exporter:1.8.0f03148764f38
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2
2
istio/examples-bookinfo-reviews-v1:1.15.040e8aba77c1b
bash@4.3-14ubuntu1.2
4.3-14ubuntu1.4+esm1
2
istio/examples-bookinfo-reviews-v1:1.14.0ee156b8aefd6
bash@4.3-14ubuntu1.2
4.3-14ubuntu1.4+esm1
2
istio/examples-bookinfo-reviews-v2:1.15.0e86d247b7ac2
bash@4.3-14ubuntu1.2
4.3-14ubuntu1.4+esm1
2
istio/examples-bookinfo-reviews-v2:1.14.0eab80bcd2132
bash@4.3-14ubuntu1.2
4.3-14ubuntu1.4+esm1
2
istio/examples-bookinfo-reviews-v3:1.14.01e37fca43550
bash@4.3-14ubuntu1.2
4.3-14ubuntu1.4+esm1
2
istio/examples-bookinfo-reviews-v3:1.15.0e454cab754cf
bash@4.3-14ubuntu1.2
4.3-14ubuntu1.4+esm1
2
istio/kubectl:1.5.10dbb7726d1bf0
bash@4.4.18-2ubuntu1.2
4.4.18-2ubuntu1.3
2
istio/proxyv2:1.10.3a78b7a165744
bash@4.4.18-2ubuntu1.2
4.4.18-2ubuntu1.3
2
library/cassandra:3.11.65aa8400b4b3b
bash@4.4.18-2ubuntu1.2
4.4.18-2ubuntu1.3
2
library/elasticsearch:7.17.35e6ac15bf6a5
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2
2
library/mongo:4.2.358b25d51baa1
bash@4.4.18-2ubuntu1.2
4.4.18-2ubuntu1.3
2
library/ubuntu:16.04:xenial1f1a2d56de1d
bash@4.3-14ubuntu1.4
4.3-14ubuntu1.4+esm1
2
lightstep/collector:2021-01-26_23-02-36Z11c5569aaf3b
bash@4.3-14ubuntu1.2
4.3-14ubuntu1.4+esm1
2
mesosphere/kubeaddons-catalog:v0.11.4073db43d0b8b
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2
2
ngick8stesting/c3po-mmeinit:latest1e764eab77b4
bash@4.4.18-2ubuntu1
4.4.18-2ubuntu1.3
2
obsidiandynamics/kafdrop:3.30.05337c9e0e2de
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2
2
omecproject/mcord-synchronizer:comac-1.0.0cfdb566dd949
bash@4.3-14ubuntu1.2
4.3-14ubuntu1.4+esm1
2
wurstmeister/zookeeper:latest7a7fd44a7210
bash@4.3-7ubuntu1.5
4.3-7ubuntu1.8+esm2
2
gcr.io/google_containers/kubernetes-dashboard-init-amd64:v1.0.0fbe12aa24de6
bash@4.3-14ubuntu1.2
4.3-14ubuntu1.4+esm1
2
ghcr.io/games-on-whales/pulseaudio:1.0.0f34f98405c10
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2
2
ghcr.io/games-on-whales/retroarch:1.0.0103fbcec2314
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2
2

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.