CVE-2020-12243
HighAdvisory
Published 28 Apr 2020In the index since 5 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 7.5
- base score, highest
- EPSS
- 0.044
- 91st percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 352
- of 17,781 indexed, latest versions
- Container images
- 232
- deployed by those charts
- Fix available
- 4 of 4
- affected packages
Red Hat Security Advisory: openldap security update
Carried by container images the latest versions of 352 of 17,781 indexed charts deploy, on 232 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| openldapdeb | 2.4.31-1+nmu2ubuntu8, 2.4.31-1+nmu2ubuntu8.4, 2.4.31-1+nmu2ubuntu8.5, 2.4.40+dfsg-1+deb8u2+18 more | 2.4.31-1+nmu2ubuntu8.5+esm2, 2.4.40+dfsg-1+deb8u6, 2.4.42+dfsg-2ubuntu3.8, 2.4.44+dfsg-5+deb9u4+2 more | 206 |
| openldaprpm | 2.4.44-21.el7_6 | 0:2.4.44-22.el7 | 18 |
| openldapapk | 2.4.47-r2, 2.4.48-r0, 2.4.48-r1 | 2.4.48-r1, 2.4.48-r2 | 6 |
| openldap2rpm | 2.4.46-lp151.10.3.1 | 2.4.46-lp151.10.9.1 | 2 |
- OSV records
- ALPINE-CVE-2020-12243RHSA-2020:4041UBUNTU-CVE-2020-12243DLA-2199-1DSA-4666-1openSUSE-SU-2020:0647-1
- Also known as
- USN-4352-1, USN-4352-2
Charts affected
352 by stars
Container images carrying it
232 by charts deploying them
A fixed version is listed for 4 of the 4 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| grafana/ | 104f434d47c8 | openldap | 2.4.44+dfsg-5+deb9u4 | 1 |
| grafana/ | 9e7fe9c7903a | openldap | 2.4.44+dfsg-5+deb9u4 | 1 |
| grafana/ | a6b37f9afdd9 | openldap | 2.4.44+dfsg-5+deb9u4 | 1 |
| grafana/ | b5591419cfa3 | openldap | 2.4.44+dfsg-5+deb9u4 | 1 |
| graylog2/ | 8ff28c66e6c1 | openldap | 2.4.40+dfsg-1+deb8u6 | 1 |
| guacamole/ | 333a7f40c145 | openldap | 2.4.44+dfsg-5+deb9u4 | 1 |
| guacamole/ | 2288530a4d1c | openldap | 2.4.47+dfsg-3+deb10u2 | 1 |
| halkeye/ | 53eb2b3cd4cb | openldap | 2.4.44+dfsg-5+deb9u4 | 1 |
| halkeye/ | 77b05e95fdb5 | openldap | 2.4.44+dfsg-5+deb9u4 | 1 |
| hickey/ | c1148a09ef20 | openldap | 2.4.40+dfsg-1+deb8u6 | 1 |
| hyperledger/ | c65891b6c237 | openldap | 2.4.42+dfsg-2ubuntu3.8 | 1 |
| ibmcom/ | ce9d2a564273 | openldap | 0:2.4.44-22.el7 | 1 |
| ibmcom/ | ee4624ba513d | openldap | 0:2.4.44-22.el7 | 1 |
| ibmcom/ | 240ff499eb5b | openldap | 0:2.4.44-22.el7 | 1 |
| ibmcom/ | e2a86997b36b | openldap | 0:2.4.44-22.el7 | 1 |
| ibmcom/ | a6748792da26 | openldap | 0:2.4.44-22.el7 | 1 |
| ibmcom/ | 02d882f2836e | openldap | 0:2.4.44-22.el7 | 1 |
| ibmcom/ | 5441dba2fa00 | openldap | 0:2.4.44-22.el7 | 1 |
| ibmcom/ | e31ff09e8aad | openldap | 0:2.4.44-22.el7 | 1 |
| ibmcom/ | 58548034cf55 | openldap | 0:2.4.44-22.el7 | 1 |
| ibmcom/ | b138f1eac0b1 | openldap | 0:2.4.44-22.el7 | 1 |
| ibmcom/ | b8e8df11072d | openldap | 0:2.4.44-22.el7 | 1 |
| ibmcom/ | 2dcde9774493 | openldap | 2.4.40+dfsg-1+deb8u6 | 1 |
| ibmcom/ | 9a766604a73b | openldap | 2.4.44+dfsg-5+deb9u4 | 1 |
| ibmcom/ | 7e4dc1e27cdf | openldap | 2.4.42+dfsg-2ubuntu3.8 | 1 |
| ibmcom/ | b5d8c6714dbc | openldap | 2.4.42+dfsg-2ubuntu3.8 | 1 |
| ibmcom/ | e17bdccc5030 | openldap | 2.4.42+dfsg-2ubuntu3.8 | 1 |
| ibmcom/ | 395e60cc6e3d | openldap | 2.4.45+dfsg-1ubuntu1.5 | 1 |
| ibmcom/ | 0762ab1df6c1 | openldap | 0:2.4.44-22.el7 | 1 |
| ibmcom/ | 28ae40e05980 | openldap | 0:2.4.44-22.el7 | 1 |
| istio/ | 268ab879ea51 | openldap | 2.4.42+dfsg-2ubuntu3.8 | 1 |
| istio/ | c09319753454 | openldap | 2.4.42+dfsg-2ubuntu3.8 | 1 |
| istio/ | 0c78be035e98 | openldap | 2.4.42+dfsg-2ubuntu3.8 | 1 |
| jacobalberty/ | c409924e2463 | openldap | 2.4.42+dfsg-2ubuntu3.8 | 1 |
| jenkinsci/ | a1f33f004659 | openldap | 2.4.44+dfsg-5+deb9u4 | 1 |
| jmferrer/ | 030f68ec6998 | openldap | 2.4.42+dfsg-2ubuntu3.8 | 1 |
| kennethreitz/ | 599fe5e50731 | openldap | 2.4.45+dfsg-1ubuntu1.5 | 1 |
| konradkleine/ | 181aad54ee64 | openldap | 2.4.40+dfsg-1+deb8u6 | 1 |
| koumoul/ | 7108d47be3b2 | openldap | 2.4.44+dfsg-5+deb9u4 | 1 |
| kubedex/ | 4f1008c51ef9 | openldap | 0:2.4.44-22.el7 | 1 |
| kubesphere/ | f1b5bf878196 | openldap | 2.4.44+dfsg-5+deb9u4 | 1 |
| library/ | f42d935fec5a | openldap | 2.4.48-r2 | 1 |
| library/ | 98531a31f213 | openldap | 2.4.44+dfsg-5+deb9u4 | 1 |
| library/ | cb079c0d7a57 | openldap | 2.4.44+dfsg-5+deb9u4 | 1 |
| library/ | ee75c9a737e7 | openldap | 2.4.44+dfsg-5+deb9u4 | 1 |
| library/ | 41ed3a1a16b6 | openldap | 2.4.44+dfsg-5+deb9u4 | 1 |
| library/ | 6ca49afbcb2b | openldap | 2.4.45+dfsg-1ubuntu1.5 | 1 |
| library/ | 691c55aabb3c | openldap | 2.4.44+dfsg-5+deb9u4 | 1 |
| library/ | 6d95fa56e008 | openldap | 2.4.44+dfsg-5+deb9u4 | 1 |
| library/ | 96104cb965fc | openldap | 2.4.47+dfsg-3+deb10u2 | 1 |