CVE-2020-1967
HighAdvisory
Published 21 Apr 2020In the index since 5 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 7.5
- base score, highest
- EPSS
- 0.533
- 99th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 120
- of 17,781 indexed, latest versions
- Container images
- 101
- deployed by those charts
- Fix available
- 2 of 2
- affected packages
openssl - security update
Carried by container images the latest versions of 120 of 17,781 indexed charts deploy, on 101 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| opensslapk | 1.1.1d-r0, 1.1.1d-r2, 1.1.1d-r3, 1.1.1d-r4+1 more | 1.1.1g-r0 | 69 |
| openssldeb | 1.1.1c-1, 1.1.1d-0+deb10u2 | 1.1.1d-0+deb10u3 | 32 |
- OSV records
- ALPINE-CVE-2020-1967DSA-4661-1
Charts affected
120 by stars
Container images carrying it
101 by charts deploying them
A fixed version is listed for 2 of the 2 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| library/ | b7a76ec06f68 | openssl | 1.1.1d-0+deb10u3 | 6 |
| mojaloop/ | 89b8ab71b74b | openssl | 1.1.1g-r0 | 5 |
| osixia/ | d112b82be133 | openssl | 1.1.1d-0+deb10u3 | 5 |
| curlimages/ | 99a8e9629b3a | openssl | 1.1.1g-r0 | 4 |
| grafana/ | 1ff3999e0fc0 | openssl | 1.1.1g-r0 | 4 |
| library/ | 2f561d372672 | openssl | 1.1.1d-0+deb10u3 | 4 |
| grafana/ | 3114894d8923 | openssl | 1.1.1g-r0 | 3 |
| library/ | 72ff40a31dc4 | openssl | 1.1.1g-r0 | 3 |
| mintel/ | caf71cee7b9a | openssl | 1.1.1g-r0 | 3 |
| mojaloop/ | b06d3287ea82 | openssl | 1.1.1g-r0 | 3 |
| abutaha/ | 190ed2d1dfc8 | openssl | 1.1.1g-r0 | 2 |
| amancevice/ | 12a0a9e66550 | openssl | 1.1.1d-0+deb10u3 | 2 |
| curlimages/ | 533cc13b5e39 | openssl | 1.1.1g-r0 | 2 |
| fjvela/ | 85727d4079d6 | openssl | 1.1.1g-r0 | 2 |
| library/ | 37c28f53d30d | openssl | 1.1.1g-r0 | 2 |
| mojaloop/ | 1abc8a7aa71c | openssl | 1.1.1g-r0 | 2 |
| mojaloop/ | fb71d233c742 | openssl | 1.1.1g-r0 | 2 |
| neuvector/ | dc3140b998c7 | openssl | 1.1.1g-r0 | 2 |
| neuvector/ | 22ce2230b414 | openssl | 1.1.1g-r0 | 2 |
| neuvector/ | f1b7d666eae0 | openssl | 1.1.1g-r0 | 2 |
| pypiserver/ | 303ac89b2aa2 | openssl | 1.1.1g-r0 | 2 |
| squareup/ | 70f4cf270425 | openssl | 1.1.1g-r0 | 2 |
| ujamii/ | 6243197349e1 | openssl | 1.1.1d-0+deb10u3 | 2 |
| quay.io/ | ead845a9d8e2 | openssl | 1.1.1g-r0 | 2 |
| quay.io/ | 5c050e59074e | openssl | 1.1.1g-r0 | 2 |
| quay.io/ | f1941498a28c | openssl | 1.1.1g-r0 | 2 |
| adgoal/ | 75ed282ad613 | openssl | 1.1.1g-r0 | 1 |
| amundsendev/ | 69e7915e61c1 | openssl | 1.1.1d-0+deb10u3 | 1 |
| apachepulsar/ | 4db6ff0b4045 | openssl | 1.1.1d-0+deb10u3 | 1 |
| audig/ | 2c3fe34ee430 | openssl | 1.1.1g-r0 | 1 |
| aureliengasser/ | 11c4318c2571 | openssl | 1.1.1g-r0 | 1 |
| bootc/ | f1383295e7be | openssl | 1.1.1g-r0 | 1 |
| brannondorsey/ | 42d01bbe307f | openssl | 1.1.1g-r0 | 1 |
| brannondorsey/ | 7bd011904534 | openssl | 1.1.1d-0+deb10u3 | 1 |
| camptocamp/ | 35c91d5fda04 | openssl | 1.1.1d-0+deb10u3 | 1 |
| cdignam/ | 5a6a55b39cee | openssl | 1.1.1d-0+deb10u3 | 1 |
| ceticasbl/ | 6c0aa7567145 | openssl | 1.1.1d-0+deb10u3 | 1 |
| conduction/ | d591f5e6f2a9 | openssl | 1.1.1g-r0 | 1 |
| datarhei/ | 655e12f9eeed | openssl | 1.1.1d-0+deb10u3 | 1 |
| devspacecloud/ | 9ccfe38b31b5 | openssl | 1.1.1g-r0 | 1 |
| devspacecloud/ | 49c397413f7b | openssl | 1.1.1g-r0 | 1 |
| digitsy/ | f91d7f56b55d | openssl | 1.1.1d-0+deb10u3 | 1 |
| dniel/ | a8d3cb14f4f6 | openssl | 1.1.1g-r0 | 1 |
| eaudeweb/ | b8ad9b7e19bb | openssl | 1.1.1d-0+deb10u3 | 1 |
| envoyproxy/ | 71081616da3e | openssl | 1.1.1g-r0 | 1 |
| fjvela/ | 70cebf67bd66 | openssl | 1.1.1d-0+deb10u3 | 1 |
| folioci/ | 1b57d690d568 | openssl | 1.1.1g-r0 | 1 |
| forchaladtest/ | 5909cf64ef53 | openssl | 1.1.1d-0+deb10u3 | 1 |
| gomods/ | d714c7ff0231 | openssl | 1.1.1g-r0 | 1 |
| gomods/ | efb811df7844 | openssl | 1.1.1g-r0 | 1 |