CVE-2020-14776

Medium

Advisory

Published 21 Oct 2020In the index since 6 Sept 2026

Severity: Medium; worst across findings
CVSS: 4.9; base score, highest
EPSS: 0.027; 85th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 12; of 17,781 indexed, latest versions
Container images: 10; deployed by those charts
Fix available: 2 of 5; affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 12 of 17,781 indexed charts deploy, on 10 images.

Affected package	Affected versions	Fixed in	Images
mariadbapk	10.4.13-r0	10.4.17-r0	3
mariadb-10.1deb	1:10.1.47-0ubuntu0.18.04.1, 1:10.1.48-0ubuntu0.18.04.1	no fix listed	2
mysql-5.5deb	5.5.60-0ubuntu0.14.04.1, 5.5.62-0ubuntu0.14.04.1	no fix listed	2
mysql-5.7deb	5.7.20-0ubuntu0.16.04.1, 5.7.29-0ubuntu0.18.04.1	5.7.32-0ubuntu0.16.04.1, 5.7.32-0ubuntu0.18.04.1	2
mariadb-10.3deb	1:10.3.34-0ubuntu0.20.04.1	no fix listed	1

OSV records: ALPINE-CVE-2020-14776 UBUNTU-CVE-2020-14776
Also known as: USN-4604-1

Charts affected

12 by stars

Chart

Latest

Affected images

Radar Score

openvpn-asstenic

0.1.9

1 of 1 See more

openvpn-as stenic 0.1.9

1 of the 1 container images this version deploys carry CVE-2020-14776.

Container image	Digest	Package	Fixed in
ghcr.io/linuxserver/openvpn-as :version-2.8.6-916f8e7d-ubuntu18	4ee0764310e7	mariadb-10.1@1:10.1.47-0ubuntu0.18.04.1	no fix listed

Open the chart page →

15,592

netris-controllernetrisai

2.8.2

1 of 14 See more

netris-controller netrisai 2.8.2

1 of the 14 container images this version deploys carry CVE-2020-14776.

Container image	Digest	Package	Fixed in
graphiteapp/graphite-statsd :1.1.7-6	04a0037cc2ae	mariadb@10.4.13-r0	10.4.17-r0

Open the chart page →

30,326

db-backupballe-petersen

0.1.4

1 of 1 See more

db-backup balle-petersen 0.1.4

1 of the 1 container images this version deploys carry CVE-2020-14776.

Container image	Digest	Package	Fixed in
tobiasbp/db-backup :0.0.3	14bee6e33a26	mariadb@10.4.13-r0	10.4.17-r0

Open the chart page →

4,814

opensipschetan-opensips

0.1.0

1 of 1 See more

opensips chetan-opensips 0.1.0

1 of the 1 container images this version deploys carry CVE-2020-14776.

Container image	Digest	Package	Fixed in
chetangautamm/repo :Opensips_Build	b4b94155ff5a	mysql-5.5@5.5.62-0ubuntu0.14.04.1	no fix listed

Open the chart page →

30,140

galaxy-stablecloudve

2.0.0

1 of 5 See more

galaxy-stable cloudve 2.0.0

1 of the 5 container images this version deploys carry CVE-2020-14776.

Container image	Digest	Package	Fixed in
galaxy/galaxy-stable :v18.01	8e577a626dfd	mysql-5.5@5.5.60-0ubuntu0.14.04.1	no fix listed

Open the chart page →

70,895

jisortjisort

0.4.1

1 of 7 See more

jisort jisort 0.4.1

1 of the 7 container images this version deploys carry CVE-2020-14776.

Container image	Digest	Package	Fixed in
litmuschaos/mysql-client :latest	251afd8fc039	mariadb@10.4.13-r0	10.4.17-r0

Open the chart page →

1,826

MINTmint

8.0.2

1 of 15 See more

MINT mint 8.0.2

1 of the 15 container images this version deploys carry CVE-2020-14776.

Container image	Digest	Package	Fixed in
mintproject/graphql-engine :305c0dbeba1878eafe348f21fc300fbfc017d9dc	83aade2c1855	mariadb-10.3@1:10.3.34-0ubuntu0.20.04.1	no fix listed

Open the chart page →

43,341

freeradiusopencord

1.0.4

1 of 1 See more

freeradius opencord 1.0.4

1 of the 1 container images this version deploys carry CVE-2020-14776.

Container image	Digest	Package	Fixed in
freeradius/freeradius-server :3.0.21	21c8bfa904d8	mysql-5.7@5.7.29-0ubuntu0.18.04.1	5.7.32-0ubuntu0.18.04.1

Open the chart page →

15,702

sebaopencord

1.0.0

1 of 17 See more

seba opencord 1.0.0

1 of the 17 container images this version deploys carry CVE-2020-14776.

Container image	Digest	Package	Fixed in
tpdock/freeradius :2.2.9	3da600c95a49	mysql-5.7@5.7.20-0ubuntu0.16.04.1	5.7.32-0ubuntu0.16.04.1

Open the chart page →

93,855

voltha-infraopencord

2.14.0

1 of 10 See more

voltha-infra opencord 2.14.0

1 of the 10 container images this version deploys carry CVE-2020-14776.

Container image	Digest	Package	Fixed in
freeradius/freeradius-server :3.0.21	21c8bfa904d8	mysql-5.7@5.7.29-0ubuntu0.18.04.1	5.7.32-0ubuntu0.18.04.1

Open the chart page →

41,044

open-vpnopenvpn

0.0.1

1 of 1 See more

open-vpn openvpn 0.0.1

1 of the 1 container images this version deploys carry CVE-2020-14776.

Container image	Digest	Package	Fixed in
ghcr.io/linuxserver/openvpn-as :version-2.8.6-916f8e7d-ubuntu18	4ee0764310e7	mariadb-10.1@1:10.1.47-0ubuntu0.18.04.1	no fix listed

Open the chart page →

15,592

wbaas-backupwbstack

0.1.0

1 of 1 See more

wbaas-backup wbstack 0.1.0

1 of the 1 container images this version deploys carry CVE-2020-14776.

Container image	Digest	Package	Fixed in
ghcr.io/wmde/wbaas-backup :v0.1.7	8e6a9516eac0	mariadb-10.1@1:10.1.48-0ubuntu0.18.04.1	no fix listed

Open the chart page →

9,743

Container images carrying it

10 by charts deploying them

A fixed version is listed for 2 of the 5 affected packages.

Container image	Digest	Package	Fixed in	Used by
freeradius/freeradius-server :3.0.21	21c8bfa904d8	mysql-5.7@5.7.29-0ubuntu0.18.04.1	5.7.32-0ubuntu0.18.04.1	2
ghcr.io/linuxserver/openvpn-as :version-2.8.6-916f8e7d-ubuntu18	4ee0764310e7	mariadb-10.1@1:10.1.47-0ubuntu0.18.04.1	no fix listed	2
chetangautamm/repo :Opensips_Build	b4b94155ff5a	mysql-5.5@5.5.62-0ubuntu0.14.04.1	no fix listed	1
galaxy/galaxy-stable :v18.01	8e577a626dfd	mysql-5.5@5.5.60-0ubuntu0.14.04.1	no fix listed	1
graphiteapp/graphite-statsd :1.1.7-6	04a0037cc2ae	mariadb@10.4.13-r0	10.4.17-r0	1
litmuschaos/mysql-client :latest	251afd8fc039	mariadb@10.4.13-r0	10.4.17-r0	1
mintproject/graphql-engine :305c0dbeba1878eafe348f21fc300fbfc017d9dc	83aade2c1855	mariadb-10.3@1:10.3.34-0ubuntu0.20.04.1	no fix listed	1
tobiasbp/db-backup :0.0.3	14bee6e33a26	mariadb@10.4.13-r0	10.4.17-r0	1
tpdock/freeradius :2.2.9	3da600c95a49	mysql-5.7@5.7.20-0ubuntu0.16.04.1	5.7.32-0ubuntu0.16.04.1	1
ghcr.io/wmde/wbaas-backup :v0.1.7	8e6a9516eac0	mariadb-10.1@1:10.1.48-0ubuntu0.18.04.1	no fix listed	1