CVE-2020-15778

High

Advisory

Published 24 Jul 2020In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.4; base score, highest
EPSS: 0.130; 96th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 258; of 17,781 indexed, latest versions
Container images: 255; deployed by those charts
Fix available: 1 of 2; affected packages

Red Hat Security Advisory: openssh security update

Carried by container images the latest versions of 258 of 17,781 indexed charts deploy, on 255 images.

Affected package	Affected versions	Fixed in	Images
opensshdeb	1:6.6p1-2ubuntu2, 1:6.6p1-2ubuntu2.13, 1:7.2p2-4ubuntu2.2, 1:7.2p2-4ubuntu2.4+29 more	no fix listed	246
opensshrpm	8.0p1-4.el8_1, 8.0p1-6.el8_4.2, 8.0p1-9.el8, 8.0p1-15.el8_6.3+1 more	0:8.0p1-24.el8	9

OSV records: DEBIAN-CVE-2020-15778 UBUNTU-CVE-2020-15778 RHSA-2024:3166

Charts affected

258 by stars

Chart

Latest

Affected images

Radar Score

codegentest-opea

1.0.0

1 of 5 See more

codegen test-opea 1.0.0

1 of the 5 container images this version deploys carry CVE-2020-15778.

Container image	Digest	Package	Fixed in
opea/codegen-ui :1.0	2bee4eb66f3e	openssh@1:9.2p1-2+deb12u2	no fix listed

Open the chart page →

28,814

codetranstest-opea

1.0.0

1 of 5 See more

codetrans test-opea 1.0.0

1 of the 5 container images this version deploys carry CVE-2020-15778.

Container image	Digest	Package	Fixed in
opea/codetrans-ui :1.0	3ef121f34610	openssh@1:9.2p1-2+deb12u2	no fix listed

Open the chart page →

28,385

docsumtest-opea

1.0.0

1 of 5 See more

docsum test-opea 1.0.0

1 of the 5 container images this version deploys carry CVE-2020-15778.

Container image	Digest	Package	Fixed in
opea/docsum-ui :1.0	7f854e9bffaf	openssh@1:9.2p1-2+deb12u2	no fix listed

Open the chart page →

28,858

jenkinstnh

2.7.1

1 of 2 See more

jenkins tnh 2.7.1

1 of the 2 container images this version deploys carry CVE-2020-15778.

Container image	Digest	Package	Fixed in
jenkins/jenkins :lts	c1e4c349365f	openssh@1:10.0p1-7+deb13u4	no fix listed

Open the chart page →

4,423

tfy-distributortruefoundry

0.0.1

1 of 4 See more

tfy-distributor truefoundry 0.0.1

1 of the 4 container images this version deploys carry CVE-2020-15778.

Container image	Digest	Package	Fixed in
public.ecr.aws/truefoundrycloud/async-service-distributor :5d48113bc678d694a0c8f8dabb2207c5aa2cfc53	f74851ce31f5	openssh@1:9.2p1-2+deb12u2	no fix listed

Open the chart page →

17,323

demo-backendv2fly

0.0.3

1 of 1 See more

demo-backend v2fly 0.0.3

1 of the 1 container images this version deploys carry CVE-2020-15778.

Container image	Digest	Package	Fixed in
quay.io/yushiwho/api :e1f9d77	e0d9b93dbf2b	openssh@1:9.2p1-2	no fix listed

Open the chart page →

14,358

jenkinswebencryptor

1.9.18

1 of 1 See more

jenkins webencryptor 1.9.18

1 of the 1 container images this version deploys carry CVE-2020-15778.

Container image	Digest	Package	Fixed in
jenkins/jenkins :lts	c1e4c349365f	openssh@1:10.0p1-7+deb13u4	no fix listed

Open the chart page →

2,476

marge-botwiremind

1.4.4

1 of 1 See more

marge-bot wiremind 1.4.4

1 of the 1 container images this version deploys carry CVE-2020-15778.

Container image	Digest	Package	Fixed in
hiboxsystems/marge-bot :0.14.0	dcffb926e563	openssh@1:9.2p1-2+deb12u2	no fix listed

Open the chart page →

5,542

Container images carrying it

255 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
library/python :3.10	70c9cc675605	openssh@1:10.0p1-7+deb13u4	no fix listed	1
library/python :3.8	d41127070014	openssh@1:9.2p1-2+deb12u3	no fix listed	1
library/python :3.9	da5aee29682d	openssh@1:10.0p1-7	no fix listed	1
library/redmine :6.1.2	04ac44a2595b	openssh@1:10.0p1-7+deb13u4	no fix listed	1
linuxserver/calibre :version-v5.21.0	a847b5b2d860	openssh@1:7.6p1-4ubuntu0.3	no fix listed	1
maksymhencha/educative-helm-bookapp :0.0.2	7f096a681192	openssh@1:8.2p1-4ubuntu0.13	no fix listed	1
mathesar/mathesar :0.12.0	091757cb01fe	openssh@1:9.2p1-2+deb12u10	no fix listed	1
mindsdb/mindsdb :latest	163011c09299	openssh@1:10.0p1-7+deb13u2	no fix listed	1
mintproject/model-catalog-fastapi :7dd88dc5bf1fe6a6d4703ea0a077afee45cb2561	02260d20a21f	openssh@1:9.2p1-2+deb12u5	no fix listed	1
moodlehq/moodle-php-apache :8.4-bookworm	922af5166835	openssh@1:9.2p1-2+deb12u10	no fix listed	1
moreillon/api-proxy :latest	d7d4a5463525	openssh@1:9.2p1-2+deb12u6	no fix listed	1
moreillon/food-manager :latest	e8fd856e593d	openssh@1:9.2p1-2+deb12u6	no fix listed	1
moreillon/group-manager :latest	3caa8f710ee0	openssh@1:9.2p1-2+deb12u7	no fix listed	1
moreillon/user-manager-mongoose :v5.0.1	d2ee0423b797	openssh@1:9.2p1-2+deb12u1	no fix listed	1
mshanley80/httpbin2022 :latest	5b189a70c0fb	openssh@1:8.2p1-4ubuntu0.5	no fix listed	1
muhammedgamal/fp23 :latest	74b4cd69b6fa	openssh@1:9.2p1-2+deb12u2	no fix listed	1
muluder/prograncontrollermcord :0.1.8	43b597a93da7	openssh@1:7.2p2-4ubuntu2.4	no fix listed	1
nousresearch/hermes-agent :v2026.8.27	e0df6adebddf	openssh@1:10.0p1-7+deb13u4	no fix listed	1
omecproject/onos-progran :1.0.0	5715e5648aa0	openssh@1:7.2p2-4ubuntu2.4	no fix listed	1
omecproject/progran-synchronizer :comac-1.0.0	d109a8e57e71	openssh@1:7.2p2-4ubuntu2.7	no fix listed	1
oneuptime/runner :release	4accc516d800	openssh@1:10.0p1-7+deb13u4	no fix listed	1
opea/codegen-ui :1.0	2bee4eb66f3e	openssh@1:9.2p1-2+deb12u2	no fix listed	1
opea/codetrans-ui :1.0	3ef121f34610	openssh@1:9.2p1-2+deb12u2	no fix listed	1
opea/docsum-ui :1.0	7f854e9bffaf	openssh@1:9.2p1-2+deb12u2	no fix listed	1
openbas/caldera-server :5.1.0	a277796d9724	openssh@1:9.2p1-2+deb12u5	no fix listed	1
opencsghq/gitlab-gitaly :v17.5.0	bdd2c58b9744	openssh@1:9.2p1-2+deb12u3	no fix listed	1
opencsghq/gitlab-shell :v17.5.0	f6d7e7d6be5d	openssh@1:9.2p1-2+deb12u3	no fix listed	1
opencsghq/kubectl :latest	b6d87e1048c2	openssh@1:9.2p1-2+deb12u7	no fix listed	1
opennode/waldur-mastermind :8.1.2	4c82b15d9042	openssh@1:10.0p1-7+deb13u4	no fix listed	1
openproject/hocuspocus :release-338001b2	88dc1359dfb5	openssh@1:9.2p1-2+deb12u7	no fix listed	1
openwhisk/ow-utils :1.0.0	c80dba0de3aa	openssh@1:7.6p1-4ubuntu0.3	no fix listed	1
pretix/standalone :2026.7.0	5df3b7aa852e	openssh@1:10.0p1-7+deb13u4	no fix listed	1
psorab/elibrary :latest	53b68896c4ce	openssh@1:8.2p1-4ubuntu0.7	no fix listed	1
redimp/otterwiki :2	778bf30da3da	openssh@1:9.2p1-2+deb12u10	no fix listed	1
resouer/redis-slave :v2	e2f198b49ba7	openssh@1:6.6p1-2ubuntu2	no fix listed	1
rundeck/rundeck :3.2.7	4d64fe56f767	openssh@1:7.2p2-4ubuntu2.8	no fix listed	1
rundeck/rundeck :3.0.16	b13e8059ad72	openssh@1:7.2p2-4ubuntu2.6	no fix listed	1
sashafefler/spacecapybara_app :latest	f96d7804c0ca	openssh@1:9.2p1-2+deb12u3	no fix listed	1
seafileltd/seafile-mc :9.0.10	6693911bcc40	openssh@1:8.2p1-4ubuntu0.2	no fix listed	1
seafileltd/seafile-mc :10.0.1	70628f29c663	openssh@1:8.2p1-4ubuntu0.7	no fix listed	1
seafileltd/seafile-mc :9.0.9	7ac833196f60	openssh@1:8.2p1-4ubuntu0.2	no fix listed	1
seafileltd/seafile-mc :8.0.7	ed0fcda5e6a9	openssh@1:8.2p1-4ubuntu0.2	no fix listed	1
seldonio/locust-core :0.8	1d0da98a2d76	openssh@1:7.2p2-4ubuntu2.8	no fix listed	1
seldonio/seldon-request-logger :1.11.2	4e985d2006a8	openssh@8.0p1-6.el8_4.2	0:8.0p1-24.el8	1
sirrend/helmup-engine :0.1.13	699e79e3d4e2	openssh@1:9.2p1-2+deb12u3	no fix listed	1
sirrend/helmup-github-scraper :0.1.4	7ca688c7abf5	openssh@1:9.2p1-2+deb12u3	no fix listed	1
socialmediamacroscope/autophrase :0.1.5	70fb11d4f531	openssh@1:8.2p1-4ubuntu0.9	no fix listed	1
socialmediamacroscope/histogram :0.1.2	6418f9bdb4d2	openssh@1:9.2p1-2	no fix listed	1
socialmediamacroscope/network_analysis :0.1.3	b351c21422e6	openssh@1:9.2p1-2	no fix listed	1
socialmediamacroscope/preprocessing :0.1.3	ca863306314b	openssh@1:9.2p1-2	no fix listed	1