CVE-2020-12062
HighAdvisory
Published 1 Jun 2020In the index since 6 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 7.5
- base score, highest
- EPSS
- 0.022
- 81st percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 75
- of 17,781 indexed, latest versions
- Container images
- 70
- deployed by those charts
- Fix available
- None
- affected package
The matching OSV records carry no description.
Carried by container images the latest versions of 75 of 17,781 indexed charts deploy, on 70 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| opensshdeb | 1:6.6p1-2ubuntu2, 1:6.6p1-2ubuntu2.13, 1:7.2p2-4ubuntu2.2, 1:7.2p2-4ubuntu2.4+15 more | no fix listed | 70 |
- OSV records
- UBUNTU-CVE-2020-12062
Charts affected
75 by stars
Container images carrying it
70 by charts deploying them
A fixed version is listed for 0 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| stackstorm/ | b1de2055c362 | openssh | no fix listed | 1 |
| stackstorm/ | b1a338f64773 | openssh | no fix listed | 1 |
| stackstorm/ | 1c8904a3bf67 | openssh | no fix listed | 1 |
| stackstorm/ | 1bf35bfaf00c | openssh | no fix listed | 1 |
| stackstorm/ | 19fdfffdbba8 | openssh | no fix listed | 1 |
| statcan/ | 3921305425b8 | openssh | no fix listed | 1 |
| svtechnmaa/ | 6e368ace0977 | openssh | no fix listed | 1 |
| voltha/ | c4e41e92f046 | openssh | no fix listed | 1 |
| gcr.io/ | 809338a69bd5 | openssh | no fix listed | 1 |
| ghcr.io/ | 6fde1edc0983 | openssh | no fix listed | 1 |
| ghcr.io/ | 3fbe4c29d14c | openssh | no fix listed | 1 |
| ghcr.io/ | 24efef013a53 | openssh | no fix listed | 1 |
| ghcr.io/ | e28e0e7de11b | openssh | no fix listed | 1 |
| ghcr.io/ | 01563adc95fd | openssh | no fix listed | 1 |
| ghcr.io/ | 2b92df1143b9 | openssh | no fix listed | 1 |
| ghcr.io/ | 600221f0f43f | openssh | no fix listed | 1 |
| ghcr.io/ | a85e03d8bc1d | openssh | no fix listed | 1 |
| ghcr.io/ | ff2af53897e7 | openssh | no fix listed | 1 |
| public.ecr.aws/ | 573779e57fae | openssh | no fix listed | 1 |
| quay.io/ | c6a934439421 | openssh | no fix listed | 1 |