StackRadar

CVE-2019-19906

High

Advisory

Published 19 Dec 2019In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.080
94th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
232
of 17,781 indexed, latest versions
Container images
188
deployed by those charts
Fix available
3 of 3
affected packages

Red Hat Security Advisory: cyrus-sasl security, bug fix, and enhancement update

Carried by container images the latest versions of 232 of 17,781 indexed charts deploy, on 188 images.

Affected packageAffected versionsFixed inImages
cyrus-sasl2deb2.1.25.dfsg1-17build1, 2.1.26.dfsg1-13+deb8u1, 2.1.26.dfsg1-14build1, 2.1.26.dfsg1-14ubuntu0.1+3 more2.1.25.dfsg1-17ubuntu0.1~esm1, 2.1.26.dfsg1-13+deb8u2, 2.1.26.dfsg1-14ubuntu0.2, 2.1.27+dfsg-1+deb10u1+2 more162
cyrus-saslrpm2.1.26-5.7.1, 2.1.27-0.3rc7.el8, 2.1.27-1.el8, 2.1.27-2.el8_20:2.1.27-5.el8, 2.1.26-150000.5.13.119
cyrus-saslapk2.1.27-r1, 2.1.27-r32.1.27-r2, 2.1.27-r47
OSV records
ALPINE-CVE-2019-19906RHSA-2020:4497UBUNTU-CVE-2019-19906DLA-2044-1DSA-4591-1SUSE-SU-2022:3549-1
Also known as
USN-4256-1

Charts affected

232 by stars
ChartLatestAffected imagesRadar Score
mariadb-initsmo-helm-chart6.0.01 of 2See more

mariadb-init smo-helm-chart 6.0.0

1 of the 2 container images this version deploys carry CVE-2019-19906.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
cyrus-sasl2@2.1.26.dfsg1-14ubuntu0.1
2.1.26.dfsg1-14ubuntu0.2

Open the chart page →

24,776
msbsmo-helm-chart6.0.01 of 6See more

msb smo-helm-chart 6.0.0

1 of the 6 container images this version deploys carry CVE-2019-19906.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.07daa08b81954
cyrus-sasl2@2.1.26.dfsg1-14build1
2.1.26.dfsg1-14ubuntu0.2

Open the chart page →

27,477
pndasmo-helm-chart6.0.01 of 3See more

pnda smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2019-19906.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.07daa08b81954
cyrus-sasl2@2.1.26.dfsg1-14build1
2.1.26.dfsg1-14ubuntu0.2

Open the chart page →

27,477
pombasmo-helm-chart6.0.01 of 17See more

pomba smo-helm-chart 6.0.0

1 of the 17 container images this version deploys carry CVE-2019-19906.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.07daa08b81954
cyrus-sasl2@2.1.26.dfsg1-14build1
2.1.26.dfsg1-14ubuntu0.2

Open the chart page →

29,220
portalsmo-helm-chart6.0.01 of 8See more

portal smo-helm-chart 6.0.0

1 of the 8 container images this version deploys carry CVE-2019-19906.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.07daa08b81954
cyrus-sasl2@2.1.26.dfsg1-14build1
2.1.26.dfsg1-14ubuntu0.2

Open the chart page →

27,477
sdcsmo-helm-chart6.0.01 of 14See more

sdc smo-helm-chart 6.0.0

1 of the 14 container images this version deploys carry CVE-2019-19906.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
cyrus-sasl2@2.1.26.dfsg1-14ubuntu0.1
2.1.26.dfsg1-14ubuntu0.2

Open the chart page →

25,769
sdnc-ansible-serversmo-helm-chart6.0.01 of 3See more

sdnc-ansible-server smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2019-19906.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
cyrus-sasl2@2.1.26.dfsg1-14ubuntu0.1
2.1.26.dfsg1-14ubuntu0.2

Open the chart page →

25,769
sdnc-portalsmo-helm-chart6.0.01 of 3See more

sdnc-portal smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2019-19906.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
cyrus-sasl2@2.1.26.dfsg1-14ubuntu0.1
2.1.26.dfsg1-14ubuntu0.2

Open the chart page →

25,769
sdnc-promsmo-helm-chart6.0.01 of 2See more

sdnc-prom smo-helm-chart 6.0.0

1 of the 2 container images this version deploys carry CVE-2019-19906.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
cyrus-sasl2@2.1.26.dfsg1-14ubuntu0.1
2.1.26.dfsg1-14ubuntu0.2

Open the chart page →

24,776
sdnc-websmo-helm-chart6.0.01 of 3See more

sdnc-web smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2019-19906.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
cyrus-sasl2@2.1.26.dfsg1-14ubuntu0.1
2.1.26.dfsg1-14ubuntu0.2

Open the chart page →

24,776
ueb-listenersmo-helm-chart6.0.01 of 3See more

ueb-listener smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2019-19906.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
cyrus-sasl2@2.1.26.dfsg1-14ubuntu0.1
2.1.26.dfsg1-14ubuntu0.2

Open the chart page →

25,769
grafanastakaterVerified publisher1.0.391 of 3See more

grafana stakater 1.0.39

1 of the 3 container images this version deploys carry CVE-2019-19906.

Container imageDigestPackageFixed in
grafana/grafana:5.2.1104f434d47c8
cyrus-sasl2@2.1.27~101-g0780600+dfsg-3
2.1.27~101-g0780600+dfsg-3+deb9u1

Open the chart page →

1,355
pgadminstakaterVerified publisher0.1.141 of 1See more

pgadmin stakater 0.1.14

1 of the 1 container images this version deploys carry CVE-2019-19906.

Container imageDigestPackageFixed in
dpage/pgadmin4:4.5a5a656e1d5fd
cyrus-sasl@2.1.27-r1
2.1.27-r2

Open the chart page →

2,060
restful-distributed-lock-managerstakaterVerified publisher1.0.41 of 1See more

restful-distributed-lock-manager stakater 1.0.4

1 of the 1 container images this version deploys carry CVE-2019-19906.

Container imageDigestPackageFixed in
stakater/restful-distributed-lock-manager:0.5.34f8e409f30c2
cyrus-sasl2@2.1.26.dfsg1-13+deb8u1
2.1.26.dfsg1-13+deb8u2

Open the chart page →

3,116
sonarqubestakaterVerified publisher0.10.32 of 2See more

sonarqube stakater 0.10.3

2 of the 2 container images this version deploys carry CVE-2019-19906.

Container imageDigestPackageFixed in
library/postgres:9.6.25284ba74a106
cyrus-sasl2@2.1.26.dfsg1-13+deb8u1
2.1.26.dfsg1-13+deb8u2
library/sonarqube:6.7.6-community0ae5169e3d0f
cyrus-sasl2@2.1.27~101-g0780600+dfsg-3
2.1.27~101-g0780600+dfsg-3+deb9u1

Open the chart page →

11,841
pachydermstatcan0.5.11 of 4See more

pachyderm statcan 0.5.1

1 of the 4 container images this version deploys carry CVE-2019-19906.

Container imageDigestPackageFixed in
pachyderm/grpc-proxy:0.4.92b27f41d4d02
cyrus-sasl2@2.1.27~101-g0780600+dfsg-3
2.1.27~101-g0780600+dfsg-3+deb9u1

Open the chart page →

4,967
solrstatcan1.5.101 of 3See more

solr statcan 1.5.10

1 of the 3 container images this version deploys carry CVE-2019-19906.

Container imageDigestPackageFixed in
library/zookeeper:3.5.5b7a76ec06f68
cyrus-sasl2@2.1.27+dfsg-1
2.1.27+dfsg-1+deb10u1

Open the chart page →

8,806
thruksvtech-public-helm-charts1.0.01 of 1See more

thruk svtech-public-helm-charts 1.0.0

1 of the 1 container images this version deploys carry CVE-2019-19906.

Container imageDigestPackageFixed in
svtechnmaa/svtech_http_thruk:v1.0.2e19aba397c1f
cyrus-sasl2@2.1.27+dfsg-1
2.1.27+dfsg-1+deb10u1

Open the chart page →

1,781
democharttech-challenge0.1.01 of 4See more

demochart tech-challenge 0.1.0

1 of the 4 container images this version deploys carry CVE-2019-19906.

Container imageDigestPackageFixed in
grafana/grafana:5.1.0a6b37f9afdd9
cyrus-sasl2@2.1.27~101-g0780600+dfsg-3
2.1.27~101-g0780600+dfsg-3+deb9u1

Open the chart page →

3,632
temporaltemporal0.28.91 of 13See more

temporal temporal 0.28.9

1 of the 13 container images this version deploys carry CVE-2019-19906.

Container imageDigestPackageFixed in
library/cassandra:3.11.3ce85468c5bad
cyrus-sasl2@2.1.27~101-g0780600+dfsg-3
2.1.27~101-g0780600+dfsg-3+deb9u1

Open the chart page →

21,005
standard-applicationthebitgram1.0.121 of 1See more

standard-application thebitgram 1.0.12

1 of the 1 container images this version deploys carry CVE-2019-19906.

Container imageDigestPackageFixed in
gcr.io/google_containers/echoserver:1.10cb5c1bddd1b5
cyrus-sasl2@2.1.26.dfsg1-14build1
2.1.26.dfsg1-14ubuntu0.2

Open the chart page →

11,007
lightstepupdater-lightstep-satellite1.2.21 of 1See more

lightstep updater-lightstep-satellite 1.2.2

1 of the 1 container images this version deploys carry CVE-2019-19906.

Container imageDigestPackageFixed in
lightstep/collector:2021-01-26_23-02-36Z11c5569aaf3b
cyrus-sasl2@2.1.26.dfsg1-14ubuntu0.1
2.1.26.dfsg1-14ubuntu0.2

Open the chart page →

15,330
Wordressuvaise-wordpress0.2.01 of 2See more

Wordress uvaise-wordpress 0.2.0

1 of the 2 container images this version deploys carry CVE-2019-19906.

Container imageDigestPackageFixed in
library/wordpress:4.8-apache6216f64ab88f
cyrus-sasl2@2.1.26.dfsg1-13+deb8u1
2.1.26.dfsg1-13+deb8u2

Open the chart page →

1,339
openldap-havcnngrVerified publisher1.0.01 of 3See more

openldap-ha vcnngr 1.0.0

1 of the 3 container images this version deploys carry CVE-2019-19906.

Container imageDigestPackageFixed in
osixia/phpldapadmin:0.9.0d112b82be133
cyrus-sasl2@2.1.27+dfsg-1
2.1.27+dfsg-1+deb10u1

Open the chart page →

5,514
voteappvoting-app-helm-charts-repoVerified publisher1.0.01 of 5See more

voteapp voting-app-helm-charts-repo 1.0.0

1 of the 5 container images this version deploys carry CVE-2019-19906.

Container imageDigestPackageFixed in
kodekloud/examplevotingapp_worker:v1741e3aaaa812
cyrus-sasl2@2.1.27~101-g0780600+dfsg-3
2.1.27~101-g0780600+dfsg-3+deb9u1

Open the chart page →

8,262
workerappvoting-app-helm-charts-repoVerified publisher1.0.01 of 1See more

workerapp voting-app-helm-charts-repo 1.0.0

1 of the 1 container images this version deploys carry CVE-2019-19906.

Container imageDigestPackageFixed in
kodekloud/examplevotingapp_worker:v1741e3aaaa812
cyrus-sasl2@2.1.27~101-g0780600+dfsg-3
2.1.27~101-g0780600+dfsg-3+deb9u1

Open the chart page →

3,329
voteappvoting-app-helm-charts-repo-cloudVerified publisher1.0.01 of 5See more

voteapp voting-app-helm-charts-repo-cloud 1.0.0

1 of the 5 container images this version deploys carry CVE-2019-19906.

Container imageDigestPackageFixed in
kodekloud/examplevotingapp_worker:v1741e3aaaa812
cyrus-sasl2@2.1.27~101-g0780600+dfsg-3
2.1.27~101-g0780600+dfsg-3+deb9u1

Open the chart page →

8,262
workerappvoting-app-helm-charts-repo-cloudVerified publisher1.0.01 of 1See more

workerapp voting-app-helm-charts-repo-cloud 1.0.0

1 of the 1 container images this version deploys carry CVE-2019-19906.

Container imageDigestPackageFixed in
kodekloud/examplevotingapp_worker:v1741e3aaaa812
cyrus-sasl2@2.1.27~101-g0780600+dfsg-3
2.1.27~101-g0780600+dfsg-3+deb9u1

Open the chart page →

3,329
webencryptorwebencryptor1.1.01 of 1See more

webencryptor webencryptor 1.1.0

1 of the 1 container images this version deploys carry CVE-2019-19906.

Container imageDigestPackageFixed in
beubi/webencryptor:latesta02c2e200920
cyrus-sasl2@2.1.27~101-g0780600+dfsg-3
2.1.27~101-g0780600+dfsg-3+deb9u1

Open the chart page →

1,968
cadencewenerme0.23.01 of 5See more

cadence wenerme 0.23.0

1 of the 5 container images this version deploys carry CVE-2019-19906.

Container imageDigestPackageFixed in
library/cassandra:3.11.3ce85468c5bad
cyrus-sasl2@2.1.27~101-g0780600+dfsg-3
2.1.27~101-g0780600+dfsg-3+deb9u1

Open the chart page →

10,127
temporalwenerme0.15.11 of 13See more

temporal wenerme 0.15.1

1 of the 13 container images this version deploys carry CVE-2019-19906.

Container imageDigestPackageFixed in
library/cassandra:3.11.3ce85468c5bad
cyrus-sasl2@2.1.27~101-g0780600+dfsg-3
2.1.27~101-g0780600+dfsg-3+deb9u1

Open the chart page →

22,665
Wordresswordpress0.2.01 of 2See more

Wordress wordpress 0.2.0

1 of the 2 container images this version deploys carry CVE-2019-19906.

Container imageDigestPackageFixed in
library/wordpress:4.8-apache6216f64ab88f
cyrus-sasl2@2.1.26.dfsg1-13+deb8u1
2.1.26.dfsg1-13+deb8u2

Open the chart page →

1,339

Container images carrying it

188 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
percona/percona-xtradb-cluster:5.7.19eaa3fcb7a5a2
cyrus-sasl2@2.1.26.dfsg1-13+deb8u1
2.1.26.dfsg1-13+deb8u2
1
pnnlmiscscripts/gitlab-runner-operator:0.1.3-1155131891741
cyrus-sasl@2.1.27-1.el8
0:2.1.27-5.el8
1
polyakov/hapi-fhir-jpaserver-example:latestdbcef69146b8
cyrus-sasl2@2.1.26.dfsg1-13+deb8u1
2.1.26.dfsg1-13+deb8u2
1
rancher/local-path-provisioner:v0.0.5e66f32d19eb9
cyrus-sasl2@2.1.26.dfsg1-14build1
2.1.26.dfsg1-14ubuntu0.2
1
raykrueger/riemann:0.2.14c8baf3de57bb
cyrus-sasl2@2.1.27~101-g0780600+dfsg-3
2.1.27~101-g0780600+dfsg-3+deb9u1
1
resouer/redis-slave:v2e2f198b49ba7
cyrus-sasl2@2.1.25.dfsg1-17build1
2.1.25.dfsg1-17ubuntu0.1~esm1
1
richardchesterwood/k8s-fleetman-position-simulator:release20b540a28f5a6
cyrus-sasl2@2.1.27~101-g0780600+dfsg-3
2.1.27~101-g0780600+dfsg-3+deb9u1
1
richardchesterwood/k8s-fleetman-position-tracker:release336c43961214c
cyrus-sasl2@2.1.27~101-g0780600+dfsg-3
2.1.27~101-g0780600+dfsg-3+deb9u1
1
royalwang/sentinel-dashboard:1.8.4df99e2499f91
cyrus-sasl2@2.1.27~101-g0780600+dfsg-3
2.1.27~101-g0780600+dfsg-3+deb9u1
1
rundeck/rundeck:3.0.16b13e8059ad72
cyrus-sasl2@2.1.26.dfsg1-14ubuntu0.1
2.1.26.dfsg1-14ubuntu0.2
1
scrapinghub/splash:3.4.1a5f89bc84606
cyrus-sasl2@2.1.27~101-g0780600+dfsg-3ubuntu2
2.1.27~101-g0780600+dfsg-3ubuntu2.1
1
seldonio/locust-core:0.81d0da98a2d76
cyrus-sasl2@2.1.26.dfsg1-14ubuntu0.1
2.1.26.dfsg1-14ubuntu0.2
1
sismics/docs:v1.10f4b0ef019cf1
cyrus-sasl2@2.1.27~101-g0780600+dfsg-3ubuntu2
2.1.27~101-g0780600+dfsg-3ubuntu2.1
1
stakater/restful-distributed-lock-manager:0.5.34f8e409f30c2
cyrus-sasl2@2.1.26.dfsg1-13+deb8u1
2.1.26.dfsg1-13+deb8u2
1
svtechnmaa/svtech_http_thruk:v1.0.2e19aba397c1f
cyrus-sasl2@2.1.27+dfsg-1
2.1.27+dfsg-1+deb10u1
1
tensorflow/tensorflow:1.6.0-devel1e3172090703
cyrus-sasl2@2.1.26.dfsg1-14build1
2.1.26.dfsg1-14ubuntu0.2
1
timothyclarke/wptagent:2018-01-2322c41e5ca7e2
cyrus-sasl2@2.1.26.dfsg1-14build1
2.1.26.dfsg1-14ubuntu0.2
1
timothyclarke/wptserver:2018-03-0840a80ced8031
cyrus-sasl2@2.1.26.dfsg1-13+deb8u1
2.1.26.dfsg1-13+deb8u2
1
tpdock/freeradius:2.2.93da600c95a49
cyrus-sasl2@2.1.26.dfsg1-14build1
2.1.26.dfsg1-14ubuntu0.2
1
voltha/voltha-envoy:1.6.059ab2a00f712
cyrus-sasl2@2.1.25.dfsg1-17build1
2.1.25.dfsg1-17ubuntu0.1~esm1
1
wiremind/pghoard:12-2019-11-264dea42c8166c
cyrus-sasl2@2.1.27+dfsg-1
2.1.27+dfsg-1+deb10u1
1
zenko/zenko-cosbench:0.0.6386a1f48ec0e
cyrus-sasl2@2.1.26.dfsg1-13+deb8u1
2.1.26.dfsg1-13+deb8u2
1
gcr.io/google-containers/echoserver:1.910f4dbc8eeeb
cyrus-sasl2@2.1.26.dfsg1-14build1
2.1.26.dfsg1-14ubuntu0.2
1
gcr.io/google_containers/echoserver:1.10cb5c1bddd1b5
cyrus-sasl2@2.1.26.dfsg1-14build1
2.1.26.dfsg1-14ubuntu0.2
1
gcr.io/istio-release/pilot:release-1.0-latest-daily5ea7b7f3632a
cyrus-sasl2@2.1.26.dfsg1-14ubuntu0.1
2.1.26.dfsg1-14ubuntu0.2
1
gcr.io/istio-release/proxyv2:release-1.0-latest-daily8f9ff98fdbef
cyrus-sasl2@2.1.26.dfsg1-14ubuntu0.1
2.1.26.dfsg1-14ubuntu0.2
1
ghcr.io/cfcontainerizationbot/kubecf-kubectl:v1.19.261daa1bba5cb
cyrus-sasl@2.1.26-5.7.1
2.1.26-150000.5.13.1
1
ghcr.io/cloudfoundry-incubator/quarks-job:v1.0.213760eee87f839
cyrus-sasl@2.1.26-5.7.1
2.1.26-150000.5.13.1
1
ghcr.io/cloudfoundry-incubator/quarks-operator:v7.0.1-0.g5396b116a1432b0d503
cyrus-sasl@2.1.26-5.7.1
2.1.26-150000.5.13.1
1
ghcr.io/cloudfoundry-incubator/quarks-secret:v1.0.754f059af4de8ed
cyrus-sasl@2.1.26-5.7.1
2.1.26-150000.5.13.1
1
ghcr.io/cloudfoundry-incubator/quarks-statefulset:v0.0.1304-g4b4f2ac5c7c70b527255
cyrus-sasl@2.1.26-5.7.1
2.1.26-150000.5.13.1
1
ghcr.io/cloudfoundry-incubator/quarks-statefulset:v0.0.1308-g6a8b2220e24a9e0a21b6
cyrus-sasl@2.1.26-5.7.1
2.1.26-150000.5.13.1
1
ghcr.io/jenkins-x/nexus:0.1.378caf5289fe73
cyrus-sasl@2.1.27-1.el8
0:2.1.27-5.el8
1
quay.io/helmpack/monocular-ui:v1.10.086b71e90319f
cyrus-sasl2@2.1.26.dfsg1-13+deb8u1
2.1.26.dfsg1-13+deb8u2
1
quay.io/ibmgaragecloud/developer-dashboard:v1.4.47a4b9fedc724
cyrus-sasl@2.1.27-1.el8
0:2.1.27-5.el8
1
quay.io/mcouliba/quarkus-serverless:1.0c2851757eca4
cyrus-sasl@2.1.27-1.el8
0:2.1.27-5.el8
1
quay.io/openshift/origin-cli:4.66722d5041b47
cyrus-sasl@2.1.27-2.el8_2
0:2.1.27-5.el8
1
quay.io/openshift/origin-console:4.10.00bbe8b451fa3
cyrus-sasl@2.1.27-2.el8_2
0:2.1.27-5.el8
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.