StackRadar

CVE-2019-19794

Medium

Advisory

Published 14 Apr 2021In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.9
base score, highest
EPSS
0.021
80th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
43
of 17,781 indexed, latest versions
Container images
29
deployed by those charts
Fix available
1 of 1
affected package

miekg/dns insecurely generates random numbers

Carried by container images the latest versions of 43 of 17,781 indexed charts deploy, on 29 images.

Affected packageAffected versionsFixed inImages
github.com/miekg/dnsgolangv0.0.0-20161122061214-271c58e0c14f, v0.0.0-20171125082028-79bfde677fa8, v1.0.14, v1.1.3+3 more1.1.2529
OSV records
GHSA-44r7-7p62-q3fr
Also known as
GO-2020-0008

Charts affected

43 by stars
ChartLatestAffected imagesRadar Score
harborharborOfficialVerified publisher1.19.22 of 8See more

harbor harbor 1.19.2

2 of the 8 container images this version deploys carry CVE-2019-19794.

Container imageDigestPackageFixed in
goharbor/harbor-registryctl:v2.15.2223d5cb49d5d
github.com/miekg/dns@v0.0.0-20161122061214-271c58e0c14f
1.1.25
goharbor/registry-photon:v2.15.2c4ebef61ceb5
github.com/miekg/dns@v0.0.0-20161122061214-271c58e0c14f
1.1.25

Open the chart page →

1,650
wazuhwazuh-helm-morgovedVerified publisher2.0.71 of 5See more

wazuh wazuh-helm-morgoved 2.0.7

1 of the 5 container images this version deploys carry CVE-2019-19794.

Container imageDigestPackageFixed in
wazuh/wazuh-manager:4.14.3f09282d281f6
github.com/miekg/dns@v1.1.15
1.1.25

Open the chart page →

11,384
wazuhwazuh-helmVerified publisher0.0.81 of 4See more

wazuh wazuh-helm 0.0.8

1 of the 4 container images this version deploys carry CVE-2019-19794.

Container imageDigestPackageFixed in
wazuh/wazuh-manager:4.11.11da5c38c6a78
github.com/miekg/dns@v1.1.15
1.1.25

Open the chart page →

6,168
lndfold0.3.152 of 4See more

lnd fold 0.3.15

2 of the 4 container images this version deploys carry CVE-2019-19794.

Container imageDigestPackageFixed in
thesisrobot/loop:v0.11.1-beta89ae07e787ca
github.com/miekg/dns@v0.0.0-20171125082028-79bfde677fa8
1.1.25
thesisrobot/pool:v0.3.3-alpha2d1c388a4bda
github.com/miekg/dns@v0.0.0-20171125082028-79bfde677fa8
1.1.25

Open the chart page →

8,835
traefik-forward-authgeek-cookbookVerified publisher2.2.21 of 1See more

traefik-forward-auth geek-cookbook 2.2.2

1 of the 1 container images this version deploys carry CVE-2019-19794.

Container imageDigestPackageFixed in
thomseddon/traefik-forward-auth:2.2.0e875194d67e2
github.com/miekg/dns@v1.1.15
1.1.25

Open the chart page →

2,234
oesopsmxVerified publisher4.0.321 of 25See more

oes opsmx 4.0.32

1 of the 25 container images this version deploys carry CVE-2019-19794.

Container imageDigestPackageFixed in
minio/minio:RELEASE.2020-12-03T05-49-24Z053f103f4894
github.com/miekg/dns@v1.1.8
1.1.25

Open the chart page →

107,811
nfs-server-provisionerraphaelVerified publisher1.3.01 of 1See more

nfs-server-provisioner raphael 1.3.0

1 of the 1 container images this version deploys carry CVE-2019-19794.

Container imageDigestPackageFixed in
gcr.io/k8s-staging-sig-storage/nfs-provisioner:v3.0.02de1d15fc1f2
github.com/miekg/dns@v1.1.15
1.1.25

Open the chart page →

2,730
siemassist-iot-cybersecurity-monitroting-siem0.1.01 of 3See more

siem assist-iot-cybersecurity-monitroting-siem 0.1.0

1 of the 3 container images this version deploys carry CVE-2019-19794.

Container imageDigestPackageFixed in
assistiot/cybersecurity-monitoring_id-wzh:latest0aacefac9677
github.com/miekg/dns@v1.1.15
1.1.25

Open the chart page →

10,730
cubefscubefs3.2.01 of 10See more

cubefs cubefs 3.2.0

1 of the 10 container images this version deploys carry CVE-2019-19794.

Container imageDigestPackageFixed in
prom/prometheus:v2.13.10a8caa2e9f19
github.com/miekg/dns@v1.1.15
1.1.25

Open the chart page →

15,891
filebrowsergeek-cookbookVerified publisher1.4.21 of 1See more

filebrowser geek-cookbook 1.4.2

1 of the 1 container images this version deploys carry CVE-2019-19794.

Container imageDigestPackageFixed in
filebrowser/filebrowser:v2.18.04fcd47af573c
github.com/miekg/dns@v1.1.3
1.1.25

Open the chart page →

3,474
traefik-forward-authmesosphere0.3.101 of 2See more

traefik-forward-auth mesosphere 0.3.10

1 of the 2 container images this version deploys carry CVE-2019-19794.

Container imageDigestPackageFixed in
mesosphere/traefik-forward-auth:3.1.05456581d7b76
github.com/miekg/dns@v1.1.8
1.1.25

Open the chart page →

5,308
vearchvearch3.3.41 of 4See more

vearch vearch 3.3.4

1 of the 4 container images this version deploys carry CVE-2019-19794.

Container imageDigestPackageFixed in
prom/prometheus:v2.13.10a8caa2e9f19
github.com/miekg/dns@v1.1.15
1.1.25

Open the chart page →

5,008
nfs-server-provisioneranvibo1.3.01 of 1See more

nfs-server-provisioner anvibo 1.3.0

1 of the 1 container images this version deploys carry CVE-2019-19794.

Container imageDigestPackageFixed in
gcr.io/k8s-staging-sig-storage/nfs-provisioner:v3.0.02de1d15fc1f2
github.com/miekg/dns@v1.1.15
1.1.25

Open the chart page →

2,730
appmesh-prometheusaws1.0.31 of 2See more

appmesh-prometheus aws 1.0.3

1 of the 2 container images this version deploys carry CVE-2019-19794.

Container imageDigestPackageFixed in
prom/prometheus:v2.13.10a8caa2e9f19
github.com/miekg/dns@v1.1.15
1.1.25

Open the chart page →

2,939
lokichoerodon0.29.01 of 1See more

loki choerodon 0.29.0

1 of the 1 container images this version deploys carry CVE-2019-19794.

Container imageDigestPackageFixed in
grafana/loki:1.5.0922b3f412fdd
github.com/miekg/dns@v1.1.22
1.1.25

Open the chart page →

2,869
promtailchoerodon0.23.01 of 1See more

promtail choerodon 0.23.0

1 of the 1 container images this version deploys carry CVE-2019-19794.

Container imageDigestPackageFixed in
grafana/promtail:1.5.046e88d390cd6
github.com/miekg/dns@v1.1.22
1.1.25

Open the chart page →

2,821
chubaofschubaofs1.5.11 of 6See more

chubaofs chubaofs 1.5.1

1 of the 6 container images this version deploys carry CVE-2019-19794.

Container imageDigestPackageFixed in
prom/prometheus:v2.13.10a8caa2e9f19
github.com/miekg/dns@v1.1.15
1.1.25

Open the chart page →

3,595
traefik-forward-authcolearendt0.0.151 of 1See more

traefik-forward-auth colearendt 0.0.15

1 of the 1 container images this version deploys carry CVE-2019-19794.

Container imageDigestPackageFixed in
thomseddon/traefik-forward-auth:269a2c985d2c5
github.com/miekg/dns@v1.1.15
1.1.25

Open the chart page →

2,234
wazuhcsic-charts0.1.01 of 4See more

wazuh csic-charts 0.1.0

1 of the 4 container images this version deploys carry CVE-2019-19794.

Container imageDigestPackageFixed in
wazuh/wazuh-manager:4.4.121994f40e0da
github.com/miekg/dns@v1.1.15
1.1.25

Open the chart page →

13,852
nfs-provisionerdasmeta1.0.31 of 1See more

nfs-provisioner dasmeta 1.0.3

1 of the 1 container images this version deploys carry CVE-2019-19794.

Container imageDigestPackageFixed in
quay.io/kubernetes_incubator/nfs-provisioner:v2.3.0f402e6039b3c
github.com/miekg/dns@v1.1.15
1.1.25

Open the chart page →

2,806
prometheusedu11.6.01 of 6See more

prometheus edu 11.6.0

1 of the 6 container images this version deploys carry CVE-2019-19794.

Container imageDigestPackageFixed in
prom/alertmanager:v0.20.07e4e9f7a0954
github.com/miekg/dns@v1.0.14
1.1.25

Open the chart page →

8,484
harborhelm-harborVerified publisher2.3.52 of 8See more

harbor helm-harbor 2.3.5

2 of the 8 container images this version deploys carry CVE-2019-19794.

Container imageDigestPackageFixed in
goharbor/harbor-registryctl:v2.15.2223d5cb49d5d
github.com/miekg/dns@v0.0.0-20161122061214-271c58e0c14f
1.1.25
goharbor/registry-photon:v2.15.2c4ebef61ceb5
github.com/miekg/dns@v0.0.0-20161122061214-271c58e0c14f
1.1.25

Open the chart page →

1,650
consulintelVerified publisher0.8.11 of 2See more

consul intel 0.8.1

1 of the 2 container images this version deploys carry CVE-2019-19794.

Container imageDigestPackageFixed in
hashicorp/consul-k8s-control-plane:1.0.2538a3436398d
github.com/miekg/dns@v1.0.14
1.1.25

Open the chart page →

5,389
evi-consulintelVerified publisher3.0.31 of 2See more

evi-consul intel 3.0.3

1 of the 2 container images this version deploys carry CVE-2019-19794.

Container imageDigestPackageFixed in
hashicorp/consul-k8s-control-plane:1.0.2538a3436398d
github.com/miekg/dns@v1.0.14
1.1.25

Open the chart page →

5,389
lndkronkltdVerified publisher0.3.92 of 4See more

lnd kronkltd 0.3.9

2 of the 4 container images this version deploys carry CVE-2019-19794.

Container imageDigestPackageFixed in
thesisrobot/loop:v0.11.1-beta89ae07e787ca
github.com/miekg/dns@v0.0.0-20171125082028-79bfde677fa8
1.1.25
thesisrobot/pool:v0.3.3-alpha2d1c388a4bda
github.com/miekg/dns@v0.0.0-20171125082028-79bfde677fa8
1.1.25

Open the chart page →

8,451
longhornkvalitetsitVerified publisher1.1.1-01 of 2See more

longhorn kvalitetsit 1.1.1-0

1 of the 2 container images this version deploys carry CVE-2019-19794.

Container imageDigestPackageFixed in
longhornio/longhorn-manager:v1.1.1ede61fe2a472
github.com/miekg/dns@v1.1.22
1.1.25

Open the chart page →

16,520
prometheusleechistest11.6.01 of 6See more

prometheus leechistest 11.6.0

1 of the 6 container images this version deploys carry CVE-2019-19794.

Container imageDigestPackageFixed in
prom/alertmanager:v0.20.07e4e9f7a0954
github.com/miekg/dns@v1.0.14
1.1.25

Open the chart page →

8,484
apica-ascentlogiqai2.0.41 of 19See more

apica-ascent logiqai 2.0.4

1 of the 19 container images this version deploys carry CVE-2019-19794.

Container imageDigestPackageFixed in
minio/minio:RELEASE.2020-09-17T04-49-20Ze2b7b633c250
github.com/miekg/dns@v1.1.8
1.1.25

Open the chart page →

23,613
nfs-server-provisionermesosphere0.6.11 of 1See more

nfs-server-provisioner mesosphere 0.6.1

1 of the 1 container images this version deploys carry CVE-2019-19794.

Container imageDigestPackageFixed in
quay.io/kubernetes_incubator/nfs-provisioner:v2.3.0f402e6039b3c
github.com/miekg/dns@v1.1.15
1.1.25

Open the chart page →

2,806
traefik-forward-auth-openidnas-helm-chartsVerified publisher1.0.11 of 1See more

traefik-forward-auth-openid nas-helm-charts 1.0.1

1 of the 1 container images this version deploys carry CVE-2019-19794.

Container imageDigestPackageFixed in
thomseddon/traefik-forward-auth:latestb364aa6a4117
github.com/miekg/dns@v1.1.15
1.1.25

Open the chart page →

2,197
nfs-server-provisionernovum-rgi-charts1.1.21 of 1See more

nfs-server-provisioner novum-rgi-charts 1.1.2

1 of the 1 container images this version deploys carry CVE-2019-19794.

Container imageDigestPackageFixed in
quay.io/kubernetes_incubator/nfs-provisioner:v2.3.0f402e6039b3c
github.com/miekg/dns@v1.1.15
1.1.25

Open the chart page →

2,806
nem-monitoringopencord1.3.221 of 9See more

nem-monitoring opencord 1.3.22

1 of the 9 container images this version deploys carry CVE-2019-19794.

Container imageDigestPackageFixed in
prom/prometheus:v2.13.10a8caa2e9f19
github.com/miekg/dns@v1.1.15
1.1.25

Open the chart page →

4,612
seldon-core-analyticsseldon1.17.11 of 8See more

seldon-core-analytics seldon 1.17.1

1 of the 8 container images this version deploys carry CVE-2019-19794.

Container imageDigestPackageFixed in
prom/alertmanager:v0.20.07e4e9f7a0954
github.com/miekg/dns@v1.0.14
1.1.25

Open the chart page →

10,733
spinnakerspinnakerVerified publisher2.2.131 of 4See more

spinnaker spinnaker 2.2.13

1 of the 4 container images this version deploys carry CVE-2019-19794.

Container imageDigestPackageFixed in
minio/minio:RELEASE.2020-01-03T19-12-21Zf00aa6ef2b72
github.com/miekg/dns@v1.1.8
1.1.25

Open the chart page →

6,836
lokit3n1.0.01 of 1See more

loki t3n 1.0.0

1 of the 1 container images this version deploys carry CVE-2019-19794.

Container imageDigestPackageFixed in
grafana/loki:1.5.0922b3f412fdd
github.com/miekg/dns@v1.1.22
1.1.25

Open the chart page →

2,869
promtailt3n1.0.01 of 1See more

promtail t3n 1.0.0

1 of the 1 container images this version deploys carry CVE-2019-19794.

Container imageDigestPackageFixed in
grafana/promtail:1.5.046e88d390cd6
github.com/miekg/dns@v1.1.22
1.1.25

Open the chart page →

2,821
prometheustnh11.6.01 of 6See more

prometheus tnh 11.6.0

1 of the 6 container images this version deploys carry CVE-2019-19794.

Container imageDigestPackageFixed in
prom/alertmanager:v0.20.07e4e9f7a0954
github.com/miekg/dns@v1.0.14
1.1.25

Open the chart page →

8,484
wazuhwazuh-helm-eksVerified publisher1.2.101 of 6See more

wazuh wazuh-helm-eks 1.2.10

1 of the 6 container images this version deploys carry CVE-2019-19794.

Container imageDigestPackageFixed in
wazuh/wazuh-manager:4.14.45a065930682d
github.com/miekg/dns@v1.1.15
1.1.25

Open the chart page →

5,484
wazuh-manager-filebeatwazuh-manager-filebeat0.1.0-gamma1 of 1See more

wazuh-manager-filebeat wazuh-manager-filebeat 0.1.0-gamma

1 of the 1 container images this version deploys carry CVE-2019-19794.

Container imageDigestPackageFixed in
iosifache/wazuh-manager-filebeat:latest85df3f04b5da
github.com/miekg/dns@v1.1.15
1.1.25

Open the chart page →

11,119
filebrowserwenerme1.0.01 of 1See more

filebrowser wenerme 1.0.0

1 of the 1 container images this version deploys carry CVE-2019-19794.

Container imageDigestPackageFixed in
filebrowser/filebrowser:v2.13.0c5d0a75a0041
github.com/miekg/dns@v1.1.3
1.1.25

Open the chart page →

3,174
harborwenerme1.19.22 of 8See more

harbor wenerme 1.19.2

2 of the 8 container images this version deploys carry CVE-2019-19794.

Container imageDigestPackageFixed in
goharbor/harbor-registryctl:v2.15.2223d5cb49d5d
github.com/miekg/dns@v0.0.0-20161122061214-271c58e0c14f
1.1.25
goharbor/registry-photon:v2.15.2c4ebef61ceb5
github.com/miekg/dns@v0.0.0-20161122061214-271c58e0c14f
1.1.25

Open the chart page →

1,650
temporalwenerme0.15.12 of 13See more

temporal wenerme 0.15.1

2 of the 13 container images this version deploys carry CVE-2019-19794.

Container imageDigestPackageFixed in
prom/alertmanager:v0.20.07e4e9f7a0954
github.com/miekg/dns@v1.0.14
1.1.25
prom/prometheus:v2.16.0e4ca62c0d62f
github.com/miekg/dns@v1.1.15
1.1.25

Open the chart page →

22,665
zahori-consulzahoriVerified publisher1.0.11 of 2See more

zahori-consul zahori 1.0.1

1 of the 2 container images this version deploys carry CVE-2019-19794.

Container imageDigestPackageFixed in
hashicorp/consul-k8s-control-plane:1.1.262bed1bf8106
github.com/miekg/dns@v1.0.14
1.1.25

Open the chart page →

5,033

Container images carrying it

29 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
prom/alertmanager:v0.20.07e4e9f7a0954
github.com/miekg/dns@v1.0.14
1.1.25
5
prom/prometheus:v2.13.10a8caa2e9f19
github.com/miekg/dns@v1.1.15
1.1.25
5
goharbor/harbor-registryctl:v2.15.2223d5cb49d5d
github.com/miekg/dns@v0.0.0-20161122061214-271c58e0c14f
1.1.25
3
goharbor/registry-photon:v2.15.2c4ebef61ceb5
github.com/miekg/dns@v0.0.0-20161122061214-271c58e0c14f
1.1.25
3
quay.io/kubernetes_incubator/nfs-provisioner:v2.3.0f402e6039b3c
github.com/miekg/dns@v1.1.15
1.1.25
3
grafana/loki:1.5.0922b3f412fdd
github.com/miekg/dns@v1.1.22
1.1.25
2
grafana/promtail:1.5.046e88d390cd6
github.com/miekg/dns@v1.1.22
1.1.25
2
hashicorp/consul-k8s-control-plane:1.0.2538a3436398d
github.com/miekg/dns@v1.0.14
1.1.25
2
thesisrobot/loop:v0.11.1-beta89ae07e787ca
github.com/miekg/dns@v0.0.0-20171125082028-79bfde677fa8
1.1.25
2
thesisrobot/pool:v0.3.3-alpha2d1c388a4bda
github.com/miekg/dns@v0.0.0-20171125082028-79bfde677fa8
1.1.25
2
gcr.io/k8s-staging-sig-storage/nfs-provisioner:v3.0.02de1d15fc1f2
github.com/miekg/dns@v1.1.15
1.1.25
2
assistiot/cybersecurity-monitoring_id-wzh:latest0aacefac9677
github.com/miekg/dns@v1.1.15
1.1.25
1
filebrowser/filebrowser:v2.18.04fcd47af573c
github.com/miekg/dns@v1.1.3
1.1.25
1
filebrowser/filebrowser:v2.13.0c5d0a75a0041
github.com/miekg/dns@v1.1.3
1.1.25
1
hashicorp/consul-k8s-control-plane:1.1.262bed1bf8106
github.com/miekg/dns@v1.0.14
1.1.25
1
iosifache/wazuh-manager-filebeat:latest85df3f04b5da
github.com/miekg/dns@v1.1.15
1.1.25
1
longhornio/longhorn-manager:v1.1.1ede61fe2a472
github.com/miekg/dns@v1.1.22
1.1.25
1
mesosphere/traefik-forward-auth:3.1.05456581d7b76
github.com/miekg/dns@v1.1.8
1.1.25
1
minio/minio:RELEASE.2020-12-03T05-49-24Z053f103f4894
github.com/miekg/dns@v1.1.8
1.1.25
1
minio/minio:RELEASE.2020-09-17T04-49-20Ze2b7b633c250
github.com/miekg/dns@v1.1.8
1.1.25
1
minio/minio:RELEASE.2020-01-03T19-12-21Zf00aa6ef2b72
github.com/miekg/dns@v1.1.8
1.1.25
1
prom/prometheus:v2.16.0e4ca62c0d62f
github.com/miekg/dns@v1.1.15
1.1.25
1
thomseddon/traefik-forward-auth:269a2c985d2c5
github.com/miekg/dns@v1.1.15
1.1.25
1
thomseddon/traefik-forward-auth:latestb364aa6a4117
github.com/miekg/dns@v1.1.15
1.1.25
1
thomseddon/traefik-forward-auth:2.2.0e875194d67e2
github.com/miekg/dns@v1.1.15
1.1.25
1
wazuh/wazuh-manager:4.11.11da5c38c6a78
github.com/miekg/dns@v1.1.15
1.1.25
1
wazuh/wazuh-manager:4.4.121994f40e0da
github.com/miekg/dns@v1.1.15
1.1.25
1
wazuh/wazuh-manager:4.14.45a065930682d
github.com/miekg/dns@v1.1.15
1.1.25
1
wazuh/wazuh-manager:4.14.3f09282d281f6
github.com/miekg/dns@v1.1.15
1.1.25
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.