CVE-2019-5188
MediumAdvisory
Published 8 Jan 2020In the index since 6 Sept 2026
- Severity
- Medium
- worst across findings
- CVSS
- 6.7
- base score, highest
- EPSS
- 0.010
- 62nd percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 433
- of 17,787 indexed, latest versions
- Container images
- 334
- deployed by those charts
- Fix available
- 3 of 3
- affected packages
e2fsprogs - security update
Carried by container images the latest versions of 433 of 17,787 indexed charts deploy, on 334 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| e2fsprogsdeb | 1.42.9-3ubuntu1, 1.42.9-3ubuntu1.2, 1.42.9-3ubuntu1.3, 1.42.12-1.1+10 more | 1.42.9-3ubuntu1.3+esm2, 1.42.12-2+deb8u2, 1.42.13-1ubuntu1.2, 1.43.4-2+deb9u2+1 more | 275 |
| e2fsprogsapk | 1.44.2-r0, 1.44.5-r0, 1.44.5-r1, 1.45.2-r0+1 more | 1.44.2-r2, 1.44.5-r2, 1.45.5-r0 | 57 |
| e2fsprogsrpm | 1.43.8-lp151.5.6.1 | 1.43.8-lp151.5.12.1 | 2 |
- OSV records
- ALPINE-CVE-2019-5188UBUNTU-CVE-2019-5188DLA-2156-1DLA-2290-1openSUSE-SU-2020:0166-1
- Also known as
- USN-4249-1
Charts affected
433 by stars
Container images carrying it
334 by charts deploying them
A fixed version is listed for 3 of the 3 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| stakater/ | 4f8e409f30c2 | e2fsprogs | 1.42.12-2+deb8u2 | 1 |
| tensorflow/ | 1e3172090703 | e2fsprogs | 1.42.13-1ubuntu1.2 | 1 |
| thelastpickle/ | 9c53996c457d | e2fsprogs | 1.44.2-r2 | 1 |
| timothyclarke/ | 22c41e5ca7e2 | e2fsprogs | 1.42.13-1ubuntu1.2 | 1 |
| timothyclarke/ | 40a80ced8031 | e2fsprogs | 1.42.12-2+deb8u2 | 1 |
| tpdock/ | 3da600c95a49 | e2fsprogs | 1.42.13-1ubuntu1.2 | 1 |
| voltha/ | c4e41e92f046 | e2fsprogs | 1.42.13-1ubuntu1.2 | 1 |
| voltha/ | 59ab2a00f712 | e2fsprogs | 1.42.9-3ubuntu1.3+esm2 | 1 |
| voltha/ | 37f80524c207 | e2fsprogs | 1.42.13-1ubuntu1.2 | 1 |
| voltha/ | 9ee8c1f4428c | e2fsprogs | 1.42.13-1ubuntu1.2 | 1 |
| voltha/ | 655c3048a602 | e2fsprogs | 1.42.13-1ubuntu1.2 | 1 |
| voltha/ | ff596b62de59 | e2fsprogs | 1.42.13-1ubuntu1.2 | 1 |
| vromero/ | 408d6a46b153 | e2fsprogs | 1.43.4-2+deb9u2 | 1 |
| woojoong/ | ec230db19652 | e2fsprogs | 1.44.1-1ubuntu1.3 | 1 |
| xetusoss/ | 88f25242b9ee | e2fsprogs | 1.44.5-r2 | 1 |
| zenko/ | 386a1f48ec0e | e2fsprogs | 1.42.12-2+deb8u2 | 1 |
| zooz/ | f491d1f7a865 | e2fsprogs | 1.43.4-2+deb9u2 | 1 |
| gcr.io/ | 809338a69bd5 | e2fsprogs | 1.44.1-1ubuntu1.3 | 1 |
| gcr.io/ | 10f4dbc8eeeb | e2fsprogs | 1.42.13-1ubuntu1.2 | 1 |
| gcr.io/ | cb5c1bddd1b5 | e2fsprogs | 1.42.13-1ubuntu1.2 | 1 |
| gcr.io/ | 9d0006c93668 | e2fsprogs | 1.43.4-2+deb9u2 | 1 |
| gcr.io/ | 5ea7b7f3632a | e2fsprogs | 1.42.13-1ubuntu1.2 | 1 |
| gcr.io/ | 8f9ff98fdbef | e2fsprogs | 1.42.13-1ubuntu1.2 | 1 |
| gcr.io/ | e8bc6cf08613 | e2fsprogs | 1.42.13-1ubuntu1.2 | 1 |
| ghcr.io/ | c144bdd688d7 | e2fsprogs | 1.44.5-r2 | 1 |
| ghcr.io/ | 451706815103 | e2fsprogs | 1.43.4-2+deb9u2 | 1 |
| ghcr.io/ | 763daf9caf8e | e2fsprogs | 1.43.4-2+deb9u2 | 1 |
| ghcr.io/ | b83b5b81d4b6 | e2fsprogs | 1.44.5-r2 | 1 |
| ghcr.io/ | 7525a57ac3f1 | e2fsprogs | 1.44.5-r2 | 1 |
| quay.io/ | c2126f99e5c9 | e2fsprogs | 1.43.4-2+deb9u2 | 1 |
| quay.io/ | ea7bb56278ab | e2fsprogs | 1.43.4-2+deb9u2 | 1 |
| quay.io/ | 86b71e90319f | e2fsprogs | 1.42.12-2+deb8u2 | 1 |
| quay.io/ | 98c26e1b8f70 | e2fsprogs | 1.44.5-r2 | 1 |
| quay.io/ | c6a934439421 | e2fsprogs | 1.42.13-1ubuntu1.2 | 1 |