CVE-2019-6111

Medium

Advisory

Published 14 Jan 2019In the index since 6 Sept 2026

Severity: Medium; worst across findings
CVSS: 5.9; base score, highest
EPSS: 0.582; 99th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 57; of 17,781 indexed, latest versions
Container images: 35; deployed by those charts
Fix available: 2 of 2; affected packages

openssh - security update

Carried by container images the latest versions of 57 of 17,781 indexed charts deploy, on 35 images.

Affected package	Affected versions	Fixed in	Images
opensshdeb	1:6.6p1-2ubuntu2, 1:7.2p2-4ubuntu2.2, 1:7.2p2-4ubuntu2.4, 1:7.2p2-4ubuntu2.6+7 more	1:6.6p1-2ubuntu2.13, 1:7.2p2-4ubuntu2.8, 1:7.2p2-4ubuntu2.fips.2.8.1, 1:7.4p1-10+deb9u6	32
opensshapk	7.5_p1-r2, 7.5_p1-r8	7.5_p1-r4, 7.5_p1-r10	3

OSV records: ALPINE-CVE-2019-6111 UBUNTU-CVE-2019-6111 DSA-4387-2
Also known as: USN-3885-1, USN-3885-2

Charts affected

57 by stars

Chart

Latest

Affected images

Radar Score

sdnc-promsmo-helm-chart

6.0.0

1 of 2 See more

sdnc-prom smo-helm-chart 6.0.0

1 of the 2 container images this version deploys carry CVE-2019-6111.

Container image	Digest	Package	Fixed in
oomk8s/readiness-check :2.0.2	875814cc853d	openssh@1:7.2p2-4ubuntu2.8	1:7.2p2-4ubuntu2.fips.2.8.1

Open the chart page →

24,776

sdnc-websmo-helm-chart

6.0.0

1 of 3 See more

sdnc-web smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2019-6111.

Container image	Digest	Package	Fixed in
oomk8s/readiness-check :2.0.2	875814cc853d	openssh@1:7.2p2-4ubuntu2.8	1:7.2p2-4ubuntu2.fips.2.8.1

Open the chart page →

24,776

ueb-listenersmo-helm-chart

6.0.0

1 of 3 See more

ueb-listener smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2019-6111.

Container image	Digest	Package	Fixed in
oomk8s/readiness-check :2.0.2	875814cc853d	openssh@1:7.2p2-4ubuntu2.8	1:7.2p2-4ubuntu2.fips.2.8.1

Open the chart page →

25,769

voteappvoting-app-helm-charts-repo

1.0.0

1 of 5 See more

voteapp voting-app-helm-charts-repo 1.0.0

1 of the 5 container images this version deploys carry CVE-2019-6111.

Container image	Digest	Package	Fixed in
kodekloud/examplevotingapp_worker :v1	741e3aaaa812	openssh@1:7.4p1-10+deb9u1	1:7.4p1-10+deb9u6

Open the chart page →

8,262

workerappvoting-app-helm-charts-repo

1.0.0

1 of 1 See more

workerapp voting-app-helm-charts-repo 1.0.0

1 of the 1 container images this version deploys carry CVE-2019-6111.

Container image	Digest	Package	Fixed in
kodekloud/examplevotingapp_worker :v1	741e3aaaa812	openssh@1:7.4p1-10+deb9u1	1:7.4p1-10+deb9u6

Open the chart page →

3,329

voteappvoting-app-helm-charts-repo-cloud

1.0.0

1 of 5 See more

voteapp voting-app-helm-charts-repo-cloud 1.0.0

1 of the 5 container images this version deploys carry CVE-2019-6111.

Container image	Digest	Package	Fixed in
kodekloud/examplevotingapp_worker :v1	741e3aaaa812	openssh@1:7.4p1-10+deb9u1	1:7.4p1-10+deb9u6

Open the chart page →

8,262

workerappvoting-app-helm-charts-repo-cloud

1.0.0

1 of 1 See more

workerapp voting-app-helm-charts-repo-cloud 1.0.0

1 of the 1 container images this version deploys carry CVE-2019-6111.

Container image	Digest	Package	Fixed in
kodekloud/examplevotingapp_worker :v1	741e3aaaa812	openssh@1:7.4p1-10+deb9u1	1:7.4p1-10+deb9u6

Open the chart page →

3,329

Container images carrying it

35 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
oomk8s/readiness-check :2.0.2	875814cc853d	openssh@1:7.2p2-4ubuntu2.8	1:7.2p2-4ubuntu2.fips.2.8.1	11
oomk8s/readiness-check :2.0.0	7daa08b81954	openssh@1:7.2p2-4ubuntu2.4	1:7.2p2-4ubuntu2.8	6
hyperledger/fabric-ca-tools :latest	4ce6f43ded2e	openssh@1:7.2p2-4ubuntu2.4	1:7.2p2-4ubuntu2.8	4
hyperledger/fabric-couchdb :0.4.15	f6c724592abf	openssh@1:7.2p2-4ubuntu2.8	1:7.2p2-4ubuntu2.fips.2.8.1	4
kodekloud/examplevotingapp_worker :v1	741e3aaaa812	openssh@1:7.4p1-10+deb9u1	1:7.4p1-10+deb9u6	4
gitea/gitea :1.4	146196cbc344	openssh@7.5_p1-r8	7.5_p1-r10	2
nachomillangarcia/prometheus_aws_cost_exporter :latest	e4ce056f2d6d	openssh@1:7.4p1-10+deb9u4	1:7.4p1-10+deb9u6	2
neilpeterson/azure-vote-front :v3	84062718347c	openssh@1:7.4p1-10+deb9u2	1:7.4p1-10+deb9u6	2
omecproject/mcord-synchronizer :comac-1.0.0	cfdb566dd949	openssh@1:7.2p2-4ubuntu2.7	1:7.2p2-4ubuntu2.8	2
wurstmeister/zookeeper :latest	7a7fd44a7210	openssh@1:6.6p1-2ubuntu2	1:6.6p1-2ubuntu2.13	2
bryanalves/honeywell_exporter :0.0.11	95f73dce8b21	openssh@1:7.4p1-10+deb9u3	1:7.4p1-10+deb9u6	1
bryanalves/smart_exporter :0.2	af47dfbb9413	openssh@1:7.4p1-10+deb9u4	1:7.4p1-10+deb9u6	1
daskdev/dask :1.1.0	4ecd7bc35500	openssh@1:7.4p1-10+deb9u4	1:7.4p1-10+deb9u6	1
ethereumex/eth-stats-dashboard :v0.0.1	a7603aa8df4c	openssh@1:7.2p2-4ubuntu2.2	1:7.2p2-4ubuntu2.8	1
hyperledger/fabric-couchdb :0.4.10	c65891b6c237	openssh@1:7.2p2-4ubuntu2.4	1:7.2p2-4ubuntu2.8	1
ibmcom/icp-swift-sample :latest	b5d8c6714dbc	openssh@1:7.2p2-4ubuntu2.4	1:7.2p2-4ubuntu2.8	1
ibmcom/microclimate-theia :latest	e17bdccc5030	openssh@1:7.2p2-4ubuntu2.2	1:7.2p2-4ubuntu2.8	1
jenkinsci/jenkins :2.67	a1f33f004659	openssh@1:7.4p1-10+deb9u1	1:7.4p1-10+deb9u6	1
muluder/prograncontrollermcord :0.1.8	43b597a93da7	openssh@1:7.2p2-4ubuntu2.4	1:7.2p2-4ubuntu2.8	1
neilpeterson/aks-helloworld :v1	fb47732ef36b	openssh@1:7.4p1-10+deb9u2	1:7.4p1-10+deb9u6	1
neilpeterson/burst-scheduler :v1.2	3a8877032972	openssh@1:7.4p1-10+deb9u2	1:7.4p1-10+deb9u6	1
neilpeterson/chart-tweet :latest	64fd8dab075f	openssh@1:7.4p1-10+deb9u2	1:7.4p1-10+deb9u6	1
neilpeterson/process-tweet :latest	39ce9f92e899	openssh@1:7.4p1-10+deb9u3	1:7.4p1-10+deb9u6	1
nodered/node-red-docker :0.19.6-v8	070643219ea2	openssh@1:7.4p1-10+deb9u4	1:7.4p1-10+deb9u6	1
omecproject/onos-progran :1.0.0	5715e5648aa0	openssh@1:7.2p2-4ubuntu2.4	1:7.2p2-4ubuntu2.8	1
omecproject/progran-synchronizer :comac-1.0.0	d109a8e57e71	openssh@1:7.2p2-4ubuntu2.7	1:7.2p2-4ubuntu2.8	1
rawlingsj/build-controller :upstream3	06dd328e3d79	openssh@7.5_p1-r2	7.5_p1-r4	1
raykrueger/riemann :0.2.14	c8baf3de57bb	openssh@1:7.4p1-10+deb9u1	1:7.4p1-10+deb9u6	1
resouer/redis-slave :v2	e2f198b49ba7	openssh@1:6.6p1-2ubuntu2	1:6.6p1-2ubuntu2.13	1
rundeck/rundeck :3.2.7	4d64fe56f767	openssh@1:7.2p2-4ubuntu2.8	1:7.2p2-4ubuntu2.fips.2.8.1	1
rundeck/rundeck :3.0.16	b13e8059ad72	openssh@1:7.2p2-4ubuntu2.6	1:7.2p2-4ubuntu2.8	1
seldonio/locust-core :0.8	1d0da98a2d76	openssh@1:7.2p2-4ubuntu2.8	1:7.2p2-4ubuntu2.fips.2.8.1	1
voltha/voltha-cli :1.6.0	c4e41e92f046	openssh@1:7.2p2-4ubuntu2.6	1:7.2p2-4ubuntu2.8	1
wiremind/sshd :latest	b3d63ce7d198	openssh@7.5_p1-r8	7.5_p1-r10	1
quay.io/opsmxpublic/spin-sample-pipeline :v1.0.1	c6a934439421	openssh@1:7.2p2-4ubuntu2.10	1:7.2p2-4ubuntu2.fips.2.8.1	1