CVE-2020-17049

High

Advisory

Published 16 Sept 2024In the index since 8 Sept 2026

Severity: High; worst across findings
CVSS: 7.2; base score, highest
EPSS: 0.137; 96th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 1; of 17,781 indexed, latest versions
Container images: 18; deployed by those charts
Fix available: 1 of 1; affected package

Red Hat Security Advisory: krb5 security, bug fix, and enhancement update

Carried by container images the latest versions of 1 of 17,781 indexed charts deploy, on 18 images.

Affected package	Affected versions	Fixed in	Images
krb5rpm	1.19.1-23.el9_1	0:1.20.1-8.el9	18

OSV records: RHSA-2023:2570

Charts affected

1 by stars

Chart

Latest

Affected images

Radar Score

drogue-cloud-coredrogue-iot

0.7.11

18 of 22 See more

drogue-cloud-core drogue-iot 0.7.11

18 of the 22 container images this version deploys carry CVE-2020-17049.

Container image	Digest	Package	Fixed in
ghcr.io/drogue-iot/authentication-service :0.11.0	857b137fc7b3	krb5@1.19.1-23.el9_1	0:1.20.1-8.el9
ghcr.io/drogue-iot/coap-endpoint :0.11.0	44790b71aa22	krb5@1.19.1-23.el9_1	0:1.20.1-8.el9
ghcr.io/drogue-iot/command-endpoint :0.11.0	6dce3158b851	krb5@1.19.1-23.el9_1	0:1.20.1-8.el9
ghcr.io/drogue-iot/console-backend :0.11.0	25d229ae5bde	krb5@1.19.1-23.el9_1	0:1.20.1-8.el9
ghcr.io/drogue-iot/console-frontend :0.11.0	558972f9374c	krb5@1.19.1-23.el9_1	0:1.20.1-8.el9
ghcr.io/drogue-iot/database-migration :0.11.0	57072c72a7cd	krb5@1.19.1-23.el9_1	0:1.20.1-8.el9
ghcr.io/drogue-iot/device-management-controller :0.11.0	200aea1a2b42	krb5@1.19.1-23.el9_1	0:1.20.1-8.el9
ghcr.io/drogue-iot/device-management-service :0.11.0	f4a5bfc06a74	krb5@1.19.1-23.el9_1	0:1.20.1-8.el9
ghcr.io/drogue-iot/device-state-service :0.11.0	fbf0738cfc7e	krb5@1.19.1-23.el9_1	0:1.20.1-8.el9
ghcr.io/drogue-iot/http-endpoint :0.11.0	b612c18479e0	krb5@1.19.1-23.el9_1	0:1.20.1-8.el9
ghcr.io/drogue-iot/knative-operator :0.11.0	e2d927639f6e	krb5@1.19.1-23.el9_1	0:1.20.1-8.el9
ghcr.io/drogue-iot/mqtt-endpoint :0.11.0	32c6d2f5eab9	krb5@1.19.1-23.el9_1	0:1.20.1-8.el9
ghcr.io/drogue-iot/mqtt-integration :0.11.0	7ac2adb6ca49	krb5@1.19.1-23.el9_1	0:1.20.1-8.el9
ghcr.io/drogue-iot/outbox-controller :0.11.0	1a958edafdb1	krb5@1.19.1-23.el9_1	0:1.20.1-8.el9
ghcr.io/drogue-iot/topic-strimzi-operator :0.11.0	5253fbf8d04c	krb5@1.19.1-23.el9_1	0:1.20.1-8.el9
ghcr.io/drogue-iot/ttn-operator :0.11.0	7dd5ac80c8f1	krb5@1.19.1-23.el9_1	0:1.20.1-8.el9
ghcr.io/drogue-iot/user-auth-service :0.11.0	adebc40ddf98	krb5@1.19.1-23.el9_1	0:1.20.1-8.el9
ghcr.io/drogue-iot/websocket-integration :0.11.0	372dcd370945	krb5@1.19.1-23.el9_1	0:1.20.1-8.el9

Open the chart page →

55,666

Container images carrying it

18 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/drogue-iot/authentication-service :0.11.0	857b137fc7b3	krb5@1.19.1-23.el9_1	0:1.20.1-8.el9	1
ghcr.io/drogue-iot/coap-endpoint :0.11.0	44790b71aa22	krb5@1.19.1-23.el9_1	0:1.20.1-8.el9	1
ghcr.io/drogue-iot/command-endpoint :0.11.0	6dce3158b851	krb5@1.19.1-23.el9_1	0:1.20.1-8.el9	1
ghcr.io/drogue-iot/console-backend :0.11.0	25d229ae5bde	krb5@1.19.1-23.el9_1	0:1.20.1-8.el9	1
ghcr.io/drogue-iot/console-frontend :0.11.0	558972f9374c	krb5@1.19.1-23.el9_1	0:1.20.1-8.el9	1
ghcr.io/drogue-iot/database-migration :0.11.0	57072c72a7cd	krb5@1.19.1-23.el9_1	0:1.20.1-8.el9	1
ghcr.io/drogue-iot/device-management-controller :0.11.0	200aea1a2b42	krb5@1.19.1-23.el9_1	0:1.20.1-8.el9	1
ghcr.io/drogue-iot/device-management-service :0.11.0	f4a5bfc06a74	krb5@1.19.1-23.el9_1	0:1.20.1-8.el9	1
ghcr.io/drogue-iot/device-state-service :0.11.0	fbf0738cfc7e	krb5@1.19.1-23.el9_1	0:1.20.1-8.el9	1
ghcr.io/drogue-iot/http-endpoint :0.11.0	b612c18479e0	krb5@1.19.1-23.el9_1	0:1.20.1-8.el9	1
ghcr.io/drogue-iot/knative-operator :0.11.0	e2d927639f6e	krb5@1.19.1-23.el9_1	0:1.20.1-8.el9	1
ghcr.io/drogue-iot/mqtt-endpoint :0.11.0	32c6d2f5eab9	krb5@1.19.1-23.el9_1	0:1.20.1-8.el9	1
ghcr.io/drogue-iot/mqtt-integration :0.11.0	7ac2adb6ca49	krb5@1.19.1-23.el9_1	0:1.20.1-8.el9	1
ghcr.io/drogue-iot/outbox-controller :0.11.0	1a958edafdb1	krb5@1.19.1-23.el9_1	0:1.20.1-8.el9	1
ghcr.io/drogue-iot/topic-strimzi-operator :0.11.0	5253fbf8d04c	krb5@1.19.1-23.el9_1	0:1.20.1-8.el9	1
ghcr.io/drogue-iot/ttn-operator :0.11.0	7dd5ac80c8f1	krb5@1.19.1-23.el9_1	0:1.20.1-8.el9	1
ghcr.io/drogue-iot/user-auth-service :0.11.0	adebc40ddf98	krb5@1.19.1-23.el9_1	0:1.20.1-8.el9	1
ghcr.io/drogue-iot/websocket-integration :0.11.0	372dcd370945	krb5@1.19.1-23.el9_1	0:1.20.1-8.el9	1