CVE-2019-5481
CriticalAdvisory
Published 11 Sept 2019In the index since 6 Sept 2026
- Severity
- Critical
- worst across findings
- CVSS
- 9.8
- base score, highest
- EPSS
- 0.075
- 94th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 55
- of 17,781 indexed, latest versions
- Container images
- 37
- deployed by those charts
- Fix available
- 2 of 2
- affected packages
The matching OSV records carry no description.
Carried by container images the latest versions of 55 of 17,781 indexed charts deploy, on 37 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| curlapk | 7.57.0-r0, 7.58.0-r0, 7.59.0-r0, 7.60.0-r1+7 more | 7.61.1-r3, 7.64.0-r3, 7.66.0-r0 | 29 |
| curldeb | 7.58.0-2ubuntu3.3, 7.58.0-2ubuntu3.5, 7.58.0-2ubuntu3.6, 7.58.0-2ubuntu3.7 | 7.58.0-2ubuntu3.8 | 8 |
- OSV records
- ALPINE-CVE-2019-5481UBUNTU-CVE-2019-5481
- Also known as
- USN-4129-1
Charts affected
55 by stars
Container images carrying it
37 by charts deploying them
A fixed version is listed for 2 of the 2 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| appropriate/ | c8bf5bbec639 | curl | 7.61.1-r3 | 9 |
| gradiant/ | a1ee6de94c04 | curl | 7.61.1-r3 | 4 |
| anapsix/ | fae78e3809e9 | curl | 7.61.1-r3 | 3 |
| library/ | 94cdbd83f24e | curl | 7.64.0-r3 | 3 |
| architectminds/ | 9735e59a1085 | curl | 7.66.0-r0 | 2 |
| gitea/ | 146196cbc344 | curl | 7.61.1-r3 | 2 |
| omecproject/ | 7c17a7b1d1ef | curl | 7.64.0-r3 | 2 |
| pstauffer/ | 2663156457ab | curl | 7.61.1-r3 | 2 |
| weaveworks/ | 2887407cb701 | curl | 7.61.1-r3 | 2 |
| bpineau/ | 76edd9d121b8 | curl | 7.61.1-r3 | 1 |
| daskdev/ | 052630f5ca04 | curl | 7.58.0-2ubuntu3.8 | 1 |
| fourcube/ | 5091df635f7e | curl | 7.61.1-r3 | 1 |
| gocd/ | 53588bd3221f | curl | 7.64.0-r3 | 1 |
| gocd/ | 2da45cb09d57 | curl | 7.64.0-r3 | 1 |
| hazelcast/ | ca7d5589744f | curl | 7.61.1-r3 | 1 |
| hazelcast/ | df495e64ea65 | curl | 7.64.0-r3 | 1 |
| ibmcom/ | b558f2b444ae | curl | 7.64.0-r3 | 1 |
| ibmcom/ | c44e1ef21075 | curl | 7.64.0-r3 | 1 |
| ibmcom/ | 395e60cc6e3d | curl | 7.58.0-2ubuntu3.8 | 1 |
| kubeaws/ | c9cd2ba4373a | curl | 7.64.0-r3 | 1 |
| library/ | 6ffe55dcc100 | curl | 7.61.1-r3 | 1 |
| library/ | 18a6c004398f | curl | 7.64.0-r3 | 1 |
| linuxserver/ | 89cd8d5fb1ac | curl | 7.61.1-r3 | 1 |
| linuxserver/ | 2fbb21fb4903 | curl | 7.58.0-2ubuntu3.8 | 1 |
| mintel/ | a3789f95d734 | curl | 7.66.0-r0 | 1 |
| omecproject/ | b4ae7d0d6b74 | curl | 7.58.0-2ubuntu3.8 | 1 |
| oomk8s/ | ba60171909c7 | curl | 7.61.1-r3 | 1 |
| opendatacube/ | 5d810e8504b8 | curl | 7.58.0-2ubuntu3.8 | 1 |
| opendatacube/ | 91870111837c | curl | 7.58.0-2ubuntu3.8 | 1 |
| opendatacube/ | 1b90cdf68831 | curl | 7.58.0-2ubuntu3.8 | 1 |
| runatlantis/ | 68fa470d1416 | curl | 7.64.0-r3 | 1 |
| sismics/ | f4b0ef019cf1 | curl | 7.58.0-2ubuntu3.8 | 1 |
| squareup/ | 80674e1ec91c | curl | 7.61.1-r3 | 1 |
| stakater/ | 5c0e01c23993 | curl | 7.61.1-r3 | 1 |
| tenstartups/ | 379d9338c720 | curl | 7.64.0-r3 | 1 |
| weaveworks/ | 3cdac6928a63 | curl | 7.61.1-r3 | 1 |
| wiremind/ | b3d63ce7d198 | curl | 7.61.1-r3 | 1 |