CVE-2020-1971
MediumAdvisory
Published 8 Dec 2020In the index since 5 Sept 2026
- Severity
- Medium
- worst across findings
- CVSS
- 5.9
- base score, highest
- EPSS
- 0.071
- 94th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 954
- of 17,787 indexed, latest versions
- Container images
- 780
- deployed by those charts
- Fix available
- 5 of 5
- affected packages
Red Hat Security Advisory: openssl security update
Carried by container images the latest versions of 954 of 17,787 indexed charts deploy, on 780 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| opensslapk | 1.1.1a-r1, 1.1.1b-r1, 1.1.1c-r0, 1.1.1d-r0+5 more | 1.1.1i-r0 | 379 |
| openssldeb | 1.0.1f-1ubuntu2.5, 1.0.1f-1ubuntu2.8, 1.0.1f-1ubuntu2.25, 1.0.1f-1ubuntu2.27+27 more | 1.0.1f-1ubuntu2.27+esm2, 1.0.2g-1ubuntu4.18, 1.1.0l-1~deb9u2, 1.1.1-1ubuntu2.1~18.04.7+2 more | 361 |
| openssl1.0deb | 1.0.2l-2, 1.0.2l-2+deb9u1, 1.0.2l-2+deb9u2, 1.0.2l-2+deb9u3+8 more | 1.0.2n-1ubuntu5.5, 1.0.2u-1~deb9u3 | 90 |
| opensslrpm | 1:1.0.2k-16.el7_6.1, 1:1.0.2k-19.el7, 1:1.1.1-8.el8, 1:1.1.1c-2.el8_1.1+4 more | 1:1.0.2k-21.el7_9, 1:1.1.1c-16.el8_2, 1:1.1.1g-12.el8_3 | 30 |
| openssl-1_1rpm | 1.1.0i-14.6.1, 1.1.0i-lp151.8.3.1, 1.1.1d-11.6.1 | 1.1.0i-14.12.1, 1.1.0i-lp151.8.12.2, 1.1.1d-11.12.1 | 10 |
- OSV records
- ALPINE-CVE-2020-1971RHSA-2020:5422RHSA-2020:5476RHSA-2020:5566UBUNTU-CVE-2020-1971DLA-2492-1DLA-2493-1DSA-4807-1openSUSE-SU-2020:2245-1SUSE-SU-2020:3720-1SUSE-SU-2020:3721-1
- Also known as
- RHSA-2020:5588, RHSA-2020:5623, RHSA-2020:5637, RHSA-2020:5642, USN-4662-1, USN-4745-1
Charts affected
954 by stars
Container images carrying it
780 by charts deploying them
A fixed version is listed for 5 of the 5 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| omecproject/ | b4ae7d0d6b74 | openssl | 1.1.1-1ubuntu2.1~18.04.7 | 1 |
| omecproject/ | b5ddd36ec20c | openssl openssl1.0 | 1.1.1-1ubuntu2.1~18.04.7 1.0.2n-1ubuntu5.5 | 1 |
| omecproject/ | bcc5f19fd676 | openssl | 1.1.1-1ubuntu2.1~18.04.7 | 1 |
| omecproject/ | 5715e5648aa0 | openssl | 1.0.2g-1ubuntu4.18 | 1 |
| omecproject/ | 64776cb9edb3 | openssl | 1.0.2g-1ubuntu4.18 | 1 |
| omecproject/ | d109a8e57e71 | openssl | 1.0.2g-1ubuntu4.18 | 1 |
| onosproject/ | 44914a8d4b3f | openssl | 1.1.1-1ubuntu2.1~18.04.7 | 1 |
| oomk8s/ | 3adf3d21ad3b | openssl | 1.0.2g-1ubuntu4.18 | 1 |
| opencord/ | 1d9ee8ce7fab | openssl openssl1.0 | 1.1.0l-1~deb9u2 1.0.2u-1~deb9u3 | 1 |
| opendatacube/ | 5d810e8504b8 | openssl | 1.1.1-1ubuntu2.1~18.04.7 | 1 |
| opendatacube/ | 91870111837c | openssl | 1.1.1-1ubuntu2.1~18.04.7 | 1 |
| opendatacube/ | 1b90cdf68831 | openssl | 1.1.1-1ubuntu2.1~18.04.7 | 1 |
| openebs/ | 4f41dd782761 | openssl | 1.1.1i-r0 | 1 |
| openliberty/ | 6f9278b8b2cc | openssl | 1:1.0.2k-21.el7_9 | 1 |
| openliberty/ | c649524bc428 | openssl | 1:1.0.2k-21.el7_9 | 1 |
| openpolicyagent/ | a54693fd75f5 | openssl | 1.1.1i-r0 | 1 |
| openpolicyagent/ | c385ae5fa5c5 | openssl | 1.1.0l-1~deb9u2 | 1 |
| openwhisk/ | b695a6ceb406 | openssl openssl1.0 | 1.1.0l-1~deb9u2 1.0.2u-1~deb9u3 | 1 |
| openwhisk/ | df52384d7f92 | openssl | 1.1.1i-r0 | 1 |
| openwhisk/ | f5831ec85525 | openssl | 1.1.1i-r0 | 1 |
| openwhisk/ | 63dc3d2a0904 | openssl | 1.1.1d-0+deb10u4 | 1 |
| openwhisk/ | c80dba0de3aa | openssl openssl1.0 | 1.1.1-1ubuntu2.1~18.04.7 1.0.2n-1ubuntu5.5 | 1 |
| openzipkin/ | 60c3970df479 | openssl | 1.1.0l-1~deb9u2 | 1 |
| openzipkin/ | 5ff2fa849a82 | openssl | 1.1.1i-r0 | 1 |
| openzipkin/ | b5d51d1144e2 | openssl | 1.1.0l-1~deb9u2 | 1 |
| openzipkin/ | 672cbc94256b | openssl | 1.1.1i-r0 | 1 |
| opsgenie/ | ecb246e4d260 | openssl | 1.1.0l-1~deb9u2 | 1 |
| opsmx11/ | 5c50ca123d88 | openssl | 1.0.1f-1ubuntu2.27+esm2 | 1 |
| oryd/ | 26347ef0a2de | openssl | 1.1.1i-r0 | 1 |
| osixia/ | 58cce1b08592 | openssl openssl1.0 | 1.1.0l-1~deb9u2 1.0.2u-1~deb9u3 | 1 |
| owasp/ | efc65e702ee1 | openssl | 1.1.1i-r0 | 1 |
| oxynozeta/ | a153c386f5af | openssl | 1.1.1i-r0 | 1 |
| oxynozeta/ | 31f11669d597 | openssl | 1.1.1i-r0 | 1 |
| pachyderm/ | 94e9a281e5a4 | openssl | 1.1.0l-1~deb9u2 | 1 |
| pachyderm/ | 2b27f41d4d02 | openssl openssl1.0 | 1.1.0l-1~deb9u2 1.0.2u-1~deb9u3 | 1 |
| pactfoundation/ | 062d6c710099 | openssl | 1.1.1i-r0 | 1 |
| paulczar/ | c7140cecd5f7 | openssl | 1.1.0l-1~deb9u2 | 1 |
| pe46dro/ | 09dfe3aa10f6 | openssl | 1.1.1i-r0 | 1 |
| pecan/ | 73b2074f3fec | openssl | 1.1.1d-0+deb10u4 | 1 |
| pedrocesarti/ | 14851f144f57 | openssl | 1.1.0l-1~deb9u2 | 1 |
| pgbouncer/ | aa8a38b7b33e | openssl | 1.1.1i-r0 | 1 |
| phntom/ | 85a2dfb83b11 | openssl | 1.1.1d-0+deb10u4 | 1 |
| phntom/ | d2b844700b57 | openssl | 1.1.1i-r0 | 1 |
| pihole/ | 8c172c4cf344 | openssl openssl1.0 | 1.1.0l-1~deb9u2 1.0.2u-1~deb9u3 | 1 |
| plexinc/ | b598abb134ad | openssl | 1.0.2g-1ubuntu4.18 | 1 |
| pnnlmiscscripts/ | 4eafeb809124 | openssl | 1.1.1i-r0 | 1 |
| pnnlmiscscripts/ | bbb6940d849f | openssl | 1.1.1i-r0 | 1 |
| pnnlmiscscripts/ | c516c2485271 | openssl | 1.1.1i-r0 | 1 |
| pnnlmiscscripts/ | 393724518ff7 | openssl | 1.1.1i-r0 | 1 |
| pnnlmiscscripts/ | 2648032cb498 | openssl | 1.1.1i-r0 | 1 |