CVE-2020-12403

Critical

Advisory

Published 18 Aug 2020In the index since 6 Sept 2026

Severity: Critical; worst across findings
CVSS: 9.1; base score, highest
EPSS: 0.015; 73rd percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 19; of 17,781 indexed, latest versions
Container images: 17; deployed by those charts
Fix available: 1 of 1; affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 19 of 17,781 indexed charts deploy, on 17 images.

Affected package	Affected versions	Fixed in	Images
nssdeb	2:3.17.1-0ubuntu0.14.04.1, 2:3.28.4-0ubuntu0.14.04.3, 2:3.28.4-0ubuntu0.16.04.3, 2:3.28.4-0ubuntu0.16.04.4+6 more	2:3.28.4-0ubuntu0.14.04.5+esm8, 2:3.28.4-0ubuntu0.16.04.14, 2:3.35-2ubuntu2.12	17

OSV records: UBUNTU-CVE-2020-12403
Also known as: USN-4476-1

Charts affected

19 by stars

Chart

Latest

Affected images

Radar Score

oesopsmx

4.0.32

1 of 25 See more

oes opsmx 4.0.32

1 of the 25 container images this version deploys carry CVE-2020-12403.

Container image	Digest	Package	Fixed in
quay.io/opsmxpublic/spin-sample-pipeline :v1.0.1	c6a934439421	nss@2:3.28.4-0ubuntu0.16.04.6	2:3.28.4-0ubuntu0.16.04.14

Open the chart page →

107,811

dltbrokerassist-iot-distributed-broker

0.2.0

2 of 9 See more

dltbroker assist-iot-distributed-broker 0.2.0

2 of the 9 container images this version deploys carry CVE-2020-12403.

Container image	Digest	Package	Fixed in
hyperledger/fabric-ca-tools :latest	4ce6f43ded2e	nss@2:3.28.4-0ubuntu0.16.04.3	2:3.28.4-0ubuntu0.16.04.14
hyperledger/fabric-couchdb :0.4.15	f6c724592abf	nss@2:3.28.4-0ubuntu0.16.04.5	2:3.28.4-0ubuntu0.16.04.14

Open the chart page →

77,706

dltloggingassist-iot-logging-auditing

0.2.0

2 of 9 See more

dltlogging assist-iot-logging-auditing 0.2.0

2 of the 9 container images this version deploys carry CVE-2020-12403.

Container image	Digest	Package	Fixed in
hyperledger/fabric-ca-tools :latest	4ce6f43ded2e	nss@2:3.28.4-0ubuntu0.16.04.3	2:3.28.4-0ubuntu0.16.04.14
hyperledger/fabric-couchdb :0.4.15	f6c724592abf	nss@2:3.28.4-0ubuntu0.16.04.5	2:3.28.4-0ubuntu0.16.04.14

Open the chart page →

77,687

tensorflow-notebookcloudnativeapp

0.1.2

1 of 1 See more

tensorflow-notebook cloudnativeapp 0.1.2

1 of the 1 container images this version deploys carry CVE-2020-12403.

Container image	Digest	Package	Fixed in
tensorflow/tensorflow :1.6.0-devel	1e3172090703	nss@2:3.28.4-0ubuntu0.16.04.3	2:3.28.4-0ubuntu0.16.04.14

Open the chart page →

36,094

wavefront-adapter-for-istiowavefront

0.1.4

1 of 2 See more

wavefront-adapter-for-istio wavefront 0.1.4

1 of the 2 container images this version deploys carry CVE-2020-12403.

Container image	Digest	Package	Fixed in
wavefronthq/proxy :9.2	d1064d28f6eb	nss@2:3.35-2ubuntu2.11	2:3.35-2ubuntu2.12

Open the chart page →

15,970

kafka-devwikimedia

0.2.0

1 of 1 See more

kafka-dev wikimedia 0.2.0

1 of the 1 container images this version deploys carry CVE-2020-12403.

Container image	Digest	Package	Fixed in
wurstmeister/zookeeper :latest	7a7fd44a7210	nss@2:3.17.1-0ubuntu0.14.04.1	2:3.28.4-0ubuntu0.14.04.5+esm8

Open the chart page →

41,427

dltkvassist-iot-data-integrity-verification

0.2.0

2 of 9 See more

dltkv assist-iot-data-integrity-verification 0.2.0

2 of the 9 container images this version deploys carry CVE-2020-12403.

Container image	Digest	Package	Fixed in
hyperledger/fabric-ca-tools :latest	4ce6f43ded2e	nss@2:3.28.4-0ubuntu0.16.04.3	2:3.28.4-0ubuntu0.16.04.14
hyperledger/fabric-couchdb :0.4.15	f6c724592abf	nss@2:3.28.4-0ubuntu0.16.04.5	2:3.28.4-0ubuntu0.16.04.14

Open the chart page →

77,706

dltflassist-iot-dlt-based-fl

0.2.0

2 of 9 See more

dltfl assist-iot-dlt-based-fl 0.2.0

2 of the 9 container images this version deploys carry CVE-2020-12403.

Container image	Digest	Package	Fixed in
hyperledger/fabric-ca-tools :latest	4ce6f43ded2e	nss@2:3.28.4-0ubuntu0.16.04.3	2:3.28.4-0ubuntu0.16.04.14
hyperledger/fabric-couchdb :0.4.15	f6c724592abf	nss@2:3.28.4-0ubuntu0.16.04.5	2:3.28.4-0ubuntu0.16.04.14

Open the chart page →

77,706

distributed-tensorflowcloudnativeapp

0.1.1

1 of 1 See more

distributed-tensorflow cloudnativeapp 0.1.1

1 of the 1 container images this version deploys carry CVE-2020-12403.

Container image	Digest	Package	Fixed in
cheyang/distributed-tf :1.6.0	46cc34755493	nss@2:3.28.4-0ubuntu0.16.04.3	2:3.28.4-0ubuntu0.16.04.14

Open the chart page →

36,094

hlf-couchdbcloudnativeapp

1.0.6

1 of 1 See more

hlf-couchdb cloudnativeapp 1.0.6

1 of the 1 container images this version deploys carry CVE-2020-12403.

Container image	Digest	Package	Fixed in
hyperledger/fabric-couchdb :0.4.10	c65891b6c237	nss@2:3.28.4-0ubuntu0.16.04.3	2:3.28.4-0ubuntu0.16.04.14

Open the chart page →

33,963

rundeckcloudnativeapp

0.1.0

1 of 2 See more

rundeck cloudnativeapp 0.1.0

1 of the 2 container images this version deploys carry CVE-2020-12403.

Container image	Digest	Package	Fixed in
rundeck/rundeck :3.0.16	b13e8059ad72	nss@2:3.28.4-0ubuntu0.16.04.4	2:3.28.4-0ubuntu0.16.04.14

Open the chart page →

23,665

unificloudnativeapp

0.4.2

1 of 1 See more

unifi cloudnativeapp 0.4.2

1 of the 1 container images this version deploys carry CVE-2020-12403.

Container image	Digest	Package	Fixed in
jacobalberty/unifi :5.10.19	c409924e2463	nss@2:3.28.4-0ubuntu0.16.04.4	2:3.28.4-0ubuntu0.16.04.14

Open the chart page →

22,442

webpagetest-agentcloudnativeapp

0.2.0

1 of 1 See more

webpagetest-agent cloudnativeapp 0.2.0

1 of the 1 container images this version deploys carry CVE-2020-12403.

Container image	Digest	Package	Fixed in
timothyclarke/wptagent :2018-01-23	22c41e5ca7e2	nss@2:3.28.4-0ubuntu0.16.04.3	2:3.28.4-0ubuntu0.16.04.14

Open the chart page →

77,758

galaxy-stablecloudve

2.0.0

2 of 5 See more

galaxy-stable cloudve 2.0.0

2 of the 5 container images this version deploys carry CVE-2020-12403.

Container image	Digest	Package	Fixed in
galaxy/galaxy-init :v18.01	0267bad550e6	nss@2:3.28.4-0ubuntu0.14.04.3	2:3.28.4-0ubuntu0.14.04.5+esm8
galaxy/galaxy-stable :v18.01	8e577a626dfd	nss@2:3.28.4-0ubuntu0.14.04.3	2:3.28.4-0ubuntu0.14.04.5+esm8

Open the chart page →

70,895

rundeckdwardu-helm-charts

0.3.4

1 of 2 See more

rundeck dwardu-helm-charts 0.3.4

1 of the 2 container images this version deploys carry CVE-2020-12403.

Container image	Digest	Package	Fixed in
rundeck/rundeck :3.2.7	4d64fe56f767	nss@2:3.28.4-0ubuntu0.16.04.10	2:3.28.4-0ubuntu0.16.04.14

Open the chart page →

19,802

zookeeper-helm-chartnotesprojectchart

0.1.0

1 of 1 See more

zookeeper-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2020-12403.

Container image	Digest	Package	Fixed in
wurstmeister/zookeeper :latest	7a7fd44a7210	nss@2:3.17.1-0ubuntu0.14.04.1	2:3.28.4-0ubuntu0.14.04.5+esm8

Open the chart page →

41,427

splashntppool

1.0.4

1 of 1 See more

splash ntppool 1.0.4

1 of the 1 container images this version deploys carry CVE-2020-12403.

Container image	Digest	Package	Fixed in
scrapinghub/splash :3.4.1	a5f89bc84606	nss@2:3.35-2ubuntu2.7	2:3.35-2ubuntu2.12

Open the chart page →

27,633

cdn-remoteopencord

0.2.4

1 of 3 See more

cdn-remote opencord 0.2.4

1 of the 3 container images this version deploys carry CVE-2020-12403.

Container image	Digest	Package	Fixed in
omecproject/cdn-antmedia :1.0.0	b4ae7d0d6b74	nss@2:3.35-2ubuntu2.2	2:3.35-2ubuntu2.12

Open the chart page →

63,223

issuegenopsmx

1.0.2

1 of 1 See more

issuegen opsmx 1.0.2

1 of the 1 container images this version deploys carry CVE-2020-12403.

Container image	Digest	Package	Fixed in
opsmx11/issuegen :v2.1.0	5c50ca123d88	nss@2:3.28.4-0ubuntu0.14.04.3	2:3.28.4-0ubuntu0.14.04.5+esm8

Open the chart page →

26,339

Container images carrying it

17 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
hyperledger/fabric-ca-tools :latest	4ce6f43ded2e	nss@2:3.28.4-0ubuntu0.16.04.3	2:3.28.4-0ubuntu0.16.04.14	4
hyperledger/fabric-couchdb :0.4.15	f6c724592abf	nss@2:3.28.4-0ubuntu0.16.04.5	2:3.28.4-0ubuntu0.16.04.14	4
wurstmeister/zookeeper :latest	7a7fd44a7210	nss@2:3.17.1-0ubuntu0.14.04.1	2:3.28.4-0ubuntu0.14.04.5+esm8	2
cheyang/distributed-tf :1.6.0	46cc34755493	nss@2:3.28.4-0ubuntu0.16.04.3	2:3.28.4-0ubuntu0.16.04.14	1
galaxy/galaxy-init :v18.01	0267bad550e6	nss@2:3.28.4-0ubuntu0.14.04.3	2:3.28.4-0ubuntu0.14.04.5+esm8	1
galaxy/galaxy-stable :v18.01	8e577a626dfd	nss@2:3.28.4-0ubuntu0.14.04.3	2:3.28.4-0ubuntu0.14.04.5+esm8	1
hyperledger/fabric-couchdb :0.4.10	c65891b6c237	nss@2:3.28.4-0ubuntu0.16.04.3	2:3.28.4-0ubuntu0.16.04.14	1
jacobalberty/unifi :5.10.19	c409924e2463	nss@2:3.28.4-0ubuntu0.16.04.4	2:3.28.4-0ubuntu0.16.04.14	1
omecproject/cdn-antmedia :1.0.0	b4ae7d0d6b74	nss@2:3.35-2ubuntu2.2	2:3.35-2ubuntu2.12	1
opsmx11/issuegen :v2.1.0	5c50ca123d88	nss@2:3.28.4-0ubuntu0.14.04.3	2:3.28.4-0ubuntu0.14.04.5+esm8	1
rundeck/rundeck :3.2.7	4d64fe56f767	nss@2:3.28.4-0ubuntu0.16.04.10	2:3.28.4-0ubuntu0.16.04.14	1
rundeck/rundeck :3.0.16	b13e8059ad72	nss@2:3.28.4-0ubuntu0.16.04.4	2:3.28.4-0ubuntu0.16.04.14	1
scrapinghub/splash :3.4.1	a5f89bc84606	nss@2:3.35-2ubuntu2.7	2:3.35-2ubuntu2.12	1
tensorflow/tensorflow :1.6.0-devel	1e3172090703	nss@2:3.28.4-0ubuntu0.16.04.3	2:3.28.4-0ubuntu0.16.04.14	1
timothyclarke/wptagent :2018-01-23	22c41e5ca7e2	nss@2:3.28.4-0ubuntu0.16.04.3	2:3.28.4-0ubuntu0.16.04.14	1
wavefronthq/proxy :9.2	d1064d28f6eb	nss@2:3.35-2ubuntu2.11	2:3.35-2ubuntu2.12	1
quay.io/opsmxpublic/spin-sample-pipeline :v1.0.1	c6a934439421	nss@2:3.28.4-0ubuntu0.16.04.6	2:3.28.4-0ubuntu0.16.04.14	1