CVE-2020-12243
HighAdvisory
Published 28 Apr 2020In the index since 5 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 7.5
- base score, highest
- EPSS
- 0.044
- 91st percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 352
- of 17,781 indexed, latest versions
- Container images
- 232
- deployed by those charts
- Fix available
- 4 of 4
- affected packages
Red Hat Security Advisory: openldap security update
Carried by container images the latest versions of 352 of 17,781 indexed charts deploy, on 232 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| openldapdeb | 2.4.31-1+nmu2ubuntu8, 2.4.31-1+nmu2ubuntu8.4, 2.4.31-1+nmu2ubuntu8.5, 2.4.40+dfsg-1+deb8u2+18 more | 2.4.31-1+nmu2ubuntu8.5+esm2, 2.4.40+dfsg-1+deb8u6, 2.4.42+dfsg-2ubuntu3.8, 2.4.44+dfsg-5+deb9u4+2 more | 206 |
| openldaprpm | 2.4.44-21.el7_6 | 0:2.4.44-22.el7 | 18 |
| openldapapk | 2.4.47-r2, 2.4.48-r0, 2.4.48-r1 | 2.4.48-r1, 2.4.48-r2 | 6 |
| openldap2rpm | 2.4.46-lp151.10.3.1 | 2.4.46-lp151.10.9.1 | 2 |
- OSV records
- ALPINE-CVE-2020-12243RHSA-2020:4041UBUNTU-CVE-2020-12243DLA-2199-1DSA-4666-1openSUSE-SU-2020:0647-1
- Also known as
- USN-4352-1, USN-4352-2
Charts affected
352 by stars
Container images carrying it
232 by charts deploying them
A fixed version is listed for 4 of the 4 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| flyway/ | 22d97ceb0c47 | openldap | 2.4.45+dfsg-1ubuntu1.5 | 79 |
| oomk8s/ | 875814cc853d | openldap | 2.4.42+dfsg-2ubuntu3.8 | 11 |
| gradiant/ | 3b28784ba41f | openldap | 2.4.47+dfsg-3+deb10u2 | 7 |
| library/ | ce85468c5bad | openldap | 2.4.44+dfsg-5+deb9u4 | 7 |
| library/ | 5284ba74a106 | openldap | 2.4.40+dfsg-1+deb8u6 | 7 |
| library/ | b7a76ec06f68 | openldap | 2.4.47+dfsg-3+deb10u2 | 6 |
| oomk8s/ | 7daa08b81954 | openldap | 2.4.42+dfsg-2ubuntu3.8 | 6 |
| osixia/ | d112b82be133 | openldap | 2.4.47+dfsg-3+deb10u2 | 5 |
| bde2020/ | 620267768985 | openldap | 2.4.40+dfsg-1+deb8u6 | 4 |
| grafana/ | ab415470454b | openldap | 2.4.44+dfsg-5+deb9u4 | 4 |
| hyperledger/ | 4ce6f43ded2e | openldap | 2.4.42+dfsg-2ubuntu3.8 | 4 |
| hyperledger/ | f6c724592abf | openldap | 2.4.42+dfsg-2ubuntu3.8 | 4 |
| kodekloud/ | 741e3aaaa812 | openldap | 2.4.44+dfsg-5+deb9u4 | 4 |
| library/ | 6216f64ab88f | openldap | 2.4.40+dfsg-1+deb8u6 | 4 |
| osixia/ | 1ab629698ae0 | openldap | 2.4.44+dfsg-5+deb9u4 | 4 |
| library/ | e1b0fd480a11 | openldap | 2.4.44+dfsg-5+deb9u4 | 3 |
| mautic/ | a954c5868d76 | openldap | 2.4.40+dfsg-1+deb8u6 | 3 |
| omecproject/ | d59ccb138ffb | openldap | 2.4.42+dfsg-2ubuntu3.8 | 3 |
| quay.io/ | ef035ac10498 | openldap | 2.4.44+dfsg-5+deb9u4 | 3 |
| amancevice/ | 12a0a9e66550 | openldap | 2.4.47+dfsg-3+deb10u2 | 2 |
| danisla/ | 255ba2dd739b | openldap | 2.4.40+dfsg-1+deb8u6 | 2 |
| fjvela/ | a8ebe5ca13fc | openldap | 2.4.44+dfsg-5+deb9u4 | 2 |
| fjvela/ | 3c840aebce22 | openldap | 2.4.44+dfsg-5+deb9u4 | 2 |
| freeradius/ | 21c8bfa904d8 | openldap | 2.4.45+dfsg-1ubuntu1.5 | 2 |
| gradiant/ | aae4f8a21f8b | openldap | 2.4.40+dfsg-1+deb8u6 | 2 |
| grafana/ | d66b41cf7e05 | openldap | 2.4.44+dfsg-5+deb9u4 | 2 |
| istio/ | 09b9d6958a13 | openldap | 2.4.44+dfsg-5+deb9u4 | 2 |
| istio/ | eb0f1a725ca8 | openldap | 2.4.44+dfsg-5+deb9u4 | 2 |
| jfindley/ | 8dbae22f4fe7 | openldap | 2.4.40+dfsg-1+deb8u6 | 2 |
| library/ | 58b25d51baa1 | openldap | 2.4.45+dfsg-1ubuntu1.5 | 2 |
| library/ | 9643e9fbd633 | openldap | 2.4.47+dfsg-3+deb10u2 | 2 |
| library/ | b3770d9c4ef1 | openldap | 2.4.44+dfsg-5+deb9u4 | 2 |
| lightstep/ | 11c5569aaf3b | openldap | 2.4.42+dfsg-2ubuntu3.8 | 2 |
| migmartri/ | 486aacfd5aa9 | openldap | 2.4.40+dfsg-1+deb8u6 | 2 |
| nachomillangarcia/ | e4ce056f2d6d | openldap | 2.4.44+dfsg-5+deb9u4 | 2 |
| neilpeterson/ | 84062718347c | openldap | 2.4.44+dfsg-5+deb9u4 | 2 |
| omecproject/ | cfdb566dd949 | openldap | 2.4.42+dfsg-2ubuntu3.8 | 2 |
| osixia/ | d212a12aa728 | openldap | 2.4.44+dfsg-5+deb9u4 | 2 |
| rodolpheche/ | 3be08a386092 | openldap | 2.4.44+dfsg-5+deb9u4 | 2 |
| statsd/ | dab129e74c25 | openldap | 2.4.44+dfsg-5+deb9u4 | 2 |
| ujamii/ | 6243197349e1 | openldap | 2.4.47+dfsg-3+deb10u2 | 2 |
| wurstmeister/ | 7a7fd44a7210 | openldap | 2.4.31-1+nmu2ubuntu8.5+esm2 | 2 |
| gcr.io/ | fbe12aa24de6 | openldap | 2.4.42+dfsg-2ubuntu3.8 | 2 |
| a5huynh/ | 0c7307d31ca8 | openldap | 2.4.40+dfsg-1+deb8u6 | 1 |
| aaionap/ | 89c1078a1b23 | openldap | 2.4.44+dfsg-5+deb9u4 | 1 |
| alphayax/ | c284977f027a | openldap | 2.4.44+dfsg-5+deb9u4 | 1 |
| amancevice/ | c8c04bfe3d66 | openldap | 2.4.44+dfsg-5+deb9u4 | 1 |
| apache/ | 9f895c8ae371 | openldap | 2.4.44+dfsg-5+deb9u4 | 1 |
| apacherocketmq/ | 24799aff6cf8 | openldap | 2.4.40+dfsg-1+deb8u6 | 1 |
| argoproj/ | b0230853357d | openldap | 2.4.44+dfsg-5+deb9u4 | 1 |