CVE-2020-12399

Medium

Advisory

Published 26 May 2020In the index since 6 Sept 2026

Severity: Medium; worst across findings
CVSS: 4.4; base score, highest
EPSS: 0.007; 49th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 18; of 17,787 indexed, latest versions
Container images: 16; deployed by those charts
Fix available: 2 of 2; affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 18 of 17,787 indexed charts deploy, on 16 images.

Affected package	Affected versions	Fixed in	Images
nssdeb	2:3.17.1-0ubuntu0.14.04.1, 2:3.28.4-0ubuntu0.14.04.3, 2:3.28.4-0ubuntu0.16.04.3, 2:3.28.4-0ubuntu0.16.04.4+5 more	2:3.28.4-0ubuntu0.14.04.5+esm5, 2:3.28.4-0ubuntu0.16.04.11, 2:3.35-2ubuntu2.8	16
firefoxdeb	57.0.4+build1-0ubuntu0.16.04.1	77.0.1+build1-0ubuntu0.16.04.1	1

OSV records: UBUNTU-CVE-2020-12399
Also known as: USN-4383-1, USN-4397-1, USN-4397-2

Charts affected

18 by stars

Chart

Latest

Affected images

Radar Score

oesopsmx

4.0.32

1 of 25 See more

oes opsmx 4.0.32

1 of the 25 container images this version deploys carry CVE-2020-12399.

Container image	Digest	Package	Fixed in
quay.io/opsmxpublic/spin-sample-pipeline :v1.0.1	c6a934439421	nss@2:3.28.4-0ubuntu0.16.04.6	2:3.28.4-0ubuntu0.16.04.11

Open the chart page →

107,899

dltbrokerassist-iot-distributed-broker

0.2.0

2 of 9 See more

dltbroker assist-iot-distributed-broker 0.2.0

2 of the 9 container images this version deploys carry CVE-2020-12399.

Container image	Digest	Package	Fixed in
hyperledger/fabric-ca-tools :latest	4ce6f43ded2e	nss@2:3.28.4-0ubuntu0.16.04.3	2:3.28.4-0ubuntu0.16.04.11
hyperledger/fabric-couchdb :0.4.15	f6c724592abf	nss@2:3.28.4-0ubuntu0.16.04.5	2:3.28.4-0ubuntu0.16.04.11

Open the chart page →

77,821

dltloggingassist-iot-logging-auditing

0.2.0

2 of 9 See more

dltlogging assist-iot-logging-auditing 0.2.0

2 of the 9 container images this version deploys carry CVE-2020-12399.

Container image	Digest	Package	Fixed in
hyperledger/fabric-ca-tools :latest	4ce6f43ded2e	nss@2:3.28.4-0ubuntu0.16.04.3	2:3.28.4-0ubuntu0.16.04.11
hyperledger/fabric-couchdb :0.4.15	f6c724592abf	nss@2:3.28.4-0ubuntu0.16.04.5	2:3.28.4-0ubuntu0.16.04.11

Open the chart page →

77,802

tensorflow-notebookcloudnativeapp

0.1.2

1 of 1 See more

tensorflow-notebook cloudnativeapp 0.1.2

1 of the 1 container images this version deploys carry CVE-2020-12399.

Container image	Digest	Package	Fixed in
tensorflow/tensorflow :1.6.0-devel	1e3172090703	nss@2:3.28.4-0ubuntu0.16.04.3	2:3.28.4-0ubuntu0.16.04.11

Open the chart page →

36,132

kafka-devwikimedia

0.2.0

1 of 1 See more

kafka-dev wikimedia 0.2.0

1 of the 1 container images this version deploys carry CVE-2020-12399.

Container image	Digest	Package	Fixed in
wurstmeister/zookeeper :latest	7a7fd44a7210	nss@2:3.17.1-0ubuntu0.14.04.1	2:3.28.4-0ubuntu0.14.04.5+esm5

Open the chart page →

41,455

dltkvassist-iot-data-integrity-verification

0.2.0

2 of 9 See more

dltkv assist-iot-data-integrity-verification 0.2.0

2 of the 9 container images this version deploys carry CVE-2020-12399.

Container image	Digest	Package	Fixed in
hyperledger/fabric-ca-tools :latest	4ce6f43ded2e	nss@2:3.28.4-0ubuntu0.16.04.3	2:3.28.4-0ubuntu0.16.04.11
hyperledger/fabric-couchdb :0.4.15	f6c724592abf	nss@2:3.28.4-0ubuntu0.16.04.5	2:3.28.4-0ubuntu0.16.04.11

Open the chart page →

77,821

dltflassist-iot-dlt-based-fl

0.2.0

2 of 9 See more

dltfl assist-iot-dlt-based-fl 0.2.0

2 of the 9 container images this version deploys carry CVE-2020-12399.

Container image	Digest	Package	Fixed in
hyperledger/fabric-ca-tools :latest	4ce6f43ded2e	nss@2:3.28.4-0ubuntu0.16.04.3	2:3.28.4-0ubuntu0.16.04.11
hyperledger/fabric-couchdb :0.4.15	f6c724592abf	nss@2:3.28.4-0ubuntu0.16.04.5	2:3.28.4-0ubuntu0.16.04.11

Open the chart page →

77,821

distributed-tensorflowcloudnativeapp

0.1.1

1 of 1 See more

distributed-tensorflow cloudnativeapp 0.1.1

1 of the 1 container images this version deploys carry CVE-2020-12399.

Container image	Digest	Package	Fixed in
cheyang/distributed-tf :1.6.0	46cc34755493	nss@2:3.28.4-0ubuntu0.16.04.3	2:3.28.4-0ubuntu0.16.04.11

Open the chart page →

36,132

hlf-couchdbcloudnativeapp

1.0.6

1 of 1 See more

hlf-couchdb cloudnativeapp 1.0.6

1 of the 1 container images this version deploys carry CVE-2020-12399.

Container image	Digest	Package	Fixed in
hyperledger/fabric-couchdb :0.4.10	c65891b6c237	nss@2:3.28.4-0ubuntu0.16.04.3	2:3.28.4-0ubuntu0.16.04.11

Open the chart page →

34,014

rundeckcloudnativeapp

0.1.0

1 of 2 See more

rundeck cloudnativeapp 0.1.0

1 of the 2 container images this version deploys carry CVE-2020-12399.

Container image	Digest	Package	Fixed in
rundeck/rundeck :3.0.16	b13e8059ad72	nss@2:3.28.4-0ubuntu0.16.04.4	2:3.28.4-0ubuntu0.16.04.11

Open the chart page →

23,683

unificloudnativeapp

0.4.2

1 of 1 See more

unifi cloudnativeapp 0.4.2

1 of the 1 container images this version deploys carry CVE-2020-12399.

Container image	Digest	Package	Fixed in
jacobalberty/unifi :5.10.19	c409924e2463	nss@2:3.28.4-0ubuntu0.16.04.4	2:3.28.4-0ubuntu0.16.04.11

Open the chart page →

22,448

webpagetest-agentcloudnativeapp

0.2.0

1 of 1 See more

webpagetest-agent cloudnativeapp 0.2.0

1 of the 1 container images this version deploys carry CVE-2020-12399.

Container image	Digest	Package	Fixed in
timothyclarke/wptagent :2018-01-23	22c41e5ca7e2	firefox@57.0.4+build1-0ubuntu0.16.04.1 nss@2:3.28.4-0ubuntu0.16.04.3	77.0.1+build1-0ubuntu0.16.04.1 2:3.28.4-0ubuntu0.16.04.11

Open the chart page →

77,798

galaxy-stablecloudve

2.0.0

2 of 5 See more

galaxy-stable cloudve 2.0.0

2 of the 5 container images this version deploys carry CVE-2020-12399.

Container image	Digest	Package	Fixed in
galaxy/galaxy-init :v18.01	0267bad550e6	nss@2:3.28.4-0ubuntu0.14.04.3	2:3.28.4-0ubuntu0.14.04.5+esm5
galaxy/galaxy-stable :v18.01	8e577a626dfd	nss@2:3.28.4-0ubuntu0.14.04.3	2:3.28.4-0ubuntu0.14.04.5+esm5

Open the chart page →

70,968

rundeckdwardu-helm-charts

0.3.4

1 of 2 See more

rundeck dwardu-helm-charts 0.3.4

1 of the 2 container images this version deploys carry CVE-2020-12399.

Container image	Digest	Package	Fixed in
rundeck/rundeck :3.2.7	4d64fe56f767	nss@2:3.28.4-0ubuntu0.16.04.10	2:3.28.4-0ubuntu0.16.04.11

Open the chart page →

19,820

zookeeper-helm-chartnotesprojectchart

0.1.0

1 of 1 See more

zookeeper-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2020-12399.

Container image	Digest	Package	Fixed in
wurstmeister/zookeeper :latest	7a7fd44a7210	nss@2:3.17.1-0ubuntu0.14.04.1	2:3.28.4-0ubuntu0.14.04.5+esm5

Open the chart page →

41,455

splashntppool

1.0.4

1 of 1 See more

splash ntppool 1.0.4

1 of the 1 container images this version deploys carry CVE-2020-12399.

Container image	Digest	Package	Fixed in
scrapinghub/splash :3.4.1	a5f89bc84606	nss@2:3.35-2ubuntu2.7	2:3.35-2ubuntu2.8

Open the chart page →

27,667

cdn-remoteopencord

0.2.4

1 of 3 See more

cdn-remote opencord 0.2.4

1 of the 3 container images this version deploys carry CVE-2020-12399.

Container image	Digest	Package	Fixed in
omecproject/cdn-antmedia :1.0.0	b4ae7d0d6b74	nss@2:3.35-2ubuntu2.2	2:3.35-2ubuntu2.8

Open the chart page →

63,277

issuegenopsmx

1.0.2

1 of 1 See more

issuegen opsmx 1.0.2

1 of the 1 container images this version deploys carry CVE-2020-12399.

Container image	Digest	Package	Fixed in
opsmx11/issuegen :v2.1.0	5c50ca123d88	nss@2:3.28.4-0ubuntu0.14.04.3	2:3.28.4-0ubuntu0.14.04.5+esm5

Open the chart page →

26,367

Container images carrying it

16 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
hyperledger/fabric-ca-tools :latest	4ce6f43ded2e	nss@2:3.28.4-0ubuntu0.16.04.3	2:3.28.4-0ubuntu0.16.04.11	4
hyperledger/fabric-couchdb :0.4.15	f6c724592abf	nss@2:3.28.4-0ubuntu0.16.04.5	2:3.28.4-0ubuntu0.16.04.11	4
wurstmeister/zookeeper :latest	7a7fd44a7210	nss@2:3.17.1-0ubuntu0.14.04.1	2:3.28.4-0ubuntu0.14.04.5+esm5	2
cheyang/distributed-tf :1.6.0	46cc34755493	nss@2:3.28.4-0ubuntu0.16.04.3	2:3.28.4-0ubuntu0.16.04.11	1
galaxy/galaxy-init :v18.01	0267bad550e6	nss@2:3.28.4-0ubuntu0.14.04.3	2:3.28.4-0ubuntu0.14.04.5+esm5	1
galaxy/galaxy-stable :v18.01	8e577a626dfd	nss@2:3.28.4-0ubuntu0.14.04.3	2:3.28.4-0ubuntu0.14.04.5+esm5	1
hyperledger/fabric-couchdb :0.4.10	c65891b6c237	nss@2:3.28.4-0ubuntu0.16.04.3	2:3.28.4-0ubuntu0.16.04.11	1
jacobalberty/unifi :5.10.19	c409924e2463	nss@2:3.28.4-0ubuntu0.16.04.4	2:3.28.4-0ubuntu0.16.04.11	1
omecproject/cdn-antmedia :1.0.0	b4ae7d0d6b74	nss@2:3.35-2ubuntu2.2	2:3.35-2ubuntu2.8	1
opsmx11/issuegen :v2.1.0	5c50ca123d88	nss@2:3.28.4-0ubuntu0.14.04.3	2:3.28.4-0ubuntu0.14.04.5+esm5	1
rundeck/rundeck :3.2.7	4d64fe56f767	nss@2:3.28.4-0ubuntu0.16.04.10	2:3.28.4-0ubuntu0.16.04.11	1
rundeck/rundeck :3.0.16	b13e8059ad72	nss@2:3.28.4-0ubuntu0.16.04.4	2:3.28.4-0ubuntu0.16.04.11	1
scrapinghub/splash :3.4.1	a5f89bc84606	nss@2:3.35-2ubuntu2.7	2:3.35-2ubuntu2.8	1
tensorflow/tensorflow :1.6.0-devel	1e3172090703	nss@2:3.28.4-0ubuntu0.16.04.3	2:3.28.4-0ubuntu0.16.04.11	1
timothyclarke/wptagent :2018-01-23	22c41e5ca7e2	firefox@57.0.4+build1-0ubuntu0.16.04.1 nss@2:3.28.4-0ubuntu0.16.04.3	77.0.1+build1-0ubuntu0.16.04.1 2:3.28.4-0ubuntu0.16.04.11	1
quay.io/opsmxpublic/spin-sample-pipeline :v1.0.1	c6a934439421	nss@2:3.28.4-0ubuntu0.16.04.6	2:3.28.4-0ubuntu0.16.04.11	1