CVE-2019-5482
CriticalAdvisory
Published 11 Sept 2019In the index since 6 Sept 2026
- Severity
- Critical
- worst across findings
- CVSS
- 9.8
- base score, highest
- EPSS
- 0.179
- 97th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 157
- of 17,781 indexed, latest versions
- Container images
- 128
- deployed by those charts
- Fix available
- 3 of 3
- affected packages
Red Hat Security Advisory: curl security update
Carried by container images the latest versions of 157 of 17,781 indexed charts deploy, on 128 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| curldeb | 7.35.0-1ubuntu2.1, 7.35.0-1ubuntu2.3, 7.35.0-1ubuntu2.16, 7.35.0-1ubuntu2.19+22 more | 7.35.0-1ubuntu2.20+esm3, 7.38.0-4+deb8u16, 7.47.0-1ubuntu2.14, 7.58.0-2ubuntu3.8 | 81 |
| curlapk | 7.57.0-r0, 7.58.0-r0, 7.59.0-r0, 7.60.0-r1+7 more | 7.61.1-r3, 7.64.0-r3, 7.66.0-r0 | 29 |
| curlrpm | 7.29.0-51.el7, 7.29.0-51.el7_6.3, 7.29.0-54.el7, 7.29.0-54.el7_7.2+1 more | 0:7.29.0-59.el7 | 18 |
- OSV records
- ALPINE-CVE-2019-5482UBUNTU-CVE-2019-5482RHSA-2020:3916DLA-1917-1
- Also known as
- RHSA-2021:0877, RHSA-2021:1027, USN-4129-1, USN-4129-2
Charts affected
157 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| logrotatestakaterVerified publisher | 1.0.19 | 1 of 1See more | 1,011 |
| restful-distributed-lock-managerstakaterVerified publisher | 1.0.4 | 1 of 1See more | 3,116 |
| standard-applicationthebitgram | 1.0.12 | 1 of 1See more | 11,007 |
| lightstepupdater-lightstep-satellite | 1.2.2 | 1 of 1See more | 15,330 |
| Wordressuvaise-wordpress | 0.2.0 | 1 of 2See more | 1,339 |
| Wordresswordpress | 0.2.0 | 1 of 2See more | 1,339 |
| satisfyymrs | 1.0.2 | 1 of 1See more | 1,572 |
Container images carrying it
128 by charts deploying them
A fixed version is listed for 3 of the 3 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| hyperledger/ | c65891b6c237 | curl | 7.47.0-1ubuntu2.14 | 1 |
| ibmcom/ | ce9d2a564273 | curl | 0:7.29.0-59.el7 | 1 |
| ibmcom/ | ee4624ba513d | curl | 0:7.29.0-59.el7 | 1 |
| ibmcom/ | 240ff499eb5b | curl | 0:7.29.0-59.el7 | 1 |
| ibmcom/ | e2a86997b36b | curl | 0:7.29.0-59.el7 | 1 |
| ibmcom/ | a6748792da26 | curl | 0:7.29.0-59.el7 | 1 |
| ibmcom/ | 02d882f2836e | curl | 0:7.29.0-59.el7 | 1 |
| ibmcom/ | 5441dba2fa00 | curl | 0:7.29.0-59.el7 | 1 |
| ibmcom/ | e31ff09e8aad | curl | 0:7.29.0-59.el7 | 1 |
| ibmcom/ | 58548034cf55 | curl | 0:7.29.0-59.el7 | 1 |
| ibmcom/ | b138f1eac0b1 | curl | 0:7.29.0-59.el7 | 1 |
| ibmcom/ | b8e8df11072d | curl | 0:7.29.0-59.el7 | 1 |
| ibmcom/ | 2dcde9774493 | curl | 7.38.0-4+deb8u16 | 1 |
| ibmcom/ | 7e4dc1e27cdf | curl | 7.47.0-1ubuntu2.14 | 1 |
| ibmcom/ | b558f2b444ae | curl | 7.64.0-r3 | 1 |
| ibmcom/ | c44e1ef21075 | curl | 7.64.0-r3 | 1 |
| ibmcom/ | b5d8c6714dbc | curl | 7.47.0-1ubuntu2.14 | 1 |
| ibmcom/ | e17bdccc5030 | curl | 7.47.0-1ubuntu2.14 | 1 |
| ibmcom/ | 395e60cc6e3d | curl | 7.58.0-2ubuntu3.8 | 1 |
| ibmcom/ | 0762ab1df6c1 | curl | 0:7.29.0-59.el7 | 1 |
| ibmcom/ | 28ae40e05980 | curl | 0:7.29.0-59.el7 | 1 |
| istio/ | 268ab879ea51 | curl | 7.47.0-1ubuntu2.14 | 1 |
| istio/ | c09319753454 | curl | 7.47.0-1ubuntu2.14 | 1 |
| istio/ | 0c78be035e98 | curl | 7.47.0-1ubuntu2.14 | 1 |
| jacobalberty/ | c409924e2463 | curl | 7.47.0-1ubuntu2.14 | 1 |
| kubeaws/ | c9cd2ba4373a | curl | 7.64.0-r3 | 1 |
| kubedex/ | 4f1008c51ef9 | curl | 0:7.29.0-59.el7 | 1 |
| library/ | 6ffe55dcc100 | curl | 7.61.1-r3 | 1 |
| library/ | 18a6c004398f | curl | 7.64.0-r3 | 1 |
| library/ | d5d7f368de4a | curl | 7.38.0-4+deb8u16 | 1 |
| lightbend/ | b0c9894ac8dd | curl | 7.47.0-1ubuntu2.14 | 1 |
| linuxserver/ | 89cd8d5fb1ac | curl | 7.61.1-r3 | 1 |
| linuxserver/ | 2fbb21fb4903 | curl | 7.58.0-2ubuntu3.8 | 1 |
| mintel/ | a3789f95d734 | curl | 7.66.0-r0 | 1 |
| muluder/ | 43b597a93da7 | curl | 7.47.0-1ubuntu2.14 | 1 |
| ncsapolyglot/ | 2ba4af461d51 | curl | 7.38.0-4+deb8u16 | 1 |
| neilpeterson/ | 8b645ac1a23e | curl | 7.38.0-4+deb8u16 | 1 |
| neilpeterson/ | 6527b05d5d03 | curl | 7.38.0-4+deb8u16 | 1 |
| neilpeterson/ | f4940e84ed05 | curl | 7.38.0-4+deb8u16 | 1 |
| neilpeterson/ | 5859d68a6c9f | curl | 7.38.0-4+deb8u16 | 1 |
| neilpeterson/ | 29d229ab446e | curl | 7.38.0-4+deb8u16 | 1 |
| neilpeterson/ | 969af3cb8466 | curl | 7.38.0-4+deb8u16 | 1 |
| omecproject/ | b4ae7d0d6b74 | curl | 7.58.0-2ubuntu3.8 | 1 |
| omecproject/ | 5715e5648aa0 | curl | 7.47.0-1ubuntu2.14 | 1 |
| omecproject/ | d109a8e57e71 | curl | 7.47.0-1ubuntu2.14 | 1 |
| oomk8s/ | ba60171909c7 | curl | 7.61.1-r3 | 1 |
| opendatacube/ | 5d810e8504b8 | curl | 7.58.0-2ubuntu3.8 | 1 |
| opendatacube/ | 91870111837c | curl | 7.58.0-2ubuntu3.8 | 1 |
| opendatacube/ | 1b90cdf68831 | curl | 7.58.0-2ubuntu3.8 | 1 |
| openliberty/ | 6f9278b8b2cc | curl | 0:7.29.0-59.el7 | 1 |