CVE-2020-1971
MediumAdvisory
Published 8 Dec 2020In the index since 5 Sept 2026
- Severity
- Medium
- worst across findings
- CVSS
- 5.9
- base score, highest
- EPSS
- 0.071
- 94th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 952
- of 17,787 indexed, latest versions
- Container images
- 778
- deployed by those charts
- Fix available
- 5 of 5
- affected packages
Red Hat Security Advisory: openssl security update
Carried by container images the latest versions of 952 of 17,787 indexed charts deploy, on 778 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| opensslapk | 1.1.1a-r1, 1.1.1b-r1, 1.1.1c-r0, 1.1.1d-r0+5 more | 1.1.1i-r0 | 378 |
| openssldeb | 1.0.1f-1ubuntu2.5, 1.0.1f-1ubuntu2.8, 1.0.1f-1ubuntu2.25, 1.0.1f-1ubuntu2.27+27 more | 1.0.1f-1ubuntu2.27+esm2, 1.0.2g-1ubuntu4.18, 1.1.0l-1~deb9u2, 1.1.1-1ubuntu2.1~18.04.7+2 more | 360 |
| openssl1.0deb | 1.0.2l-2, 1.0.2l-2+deb9u1, 1.0.2l-2+deb9u2, 1.0.2l-2+deb9u3+8 more | 1.0.2n-1ubuntu5.5, 1.0.2u-1~deb9u3 | 90 |
| opensslrpm | 1:1.0.2k-16.el7_6.1, 1:1.0.2k-19.el7, 1:1.1.1-8.el8, 1:1.1.1c-2.el8_1.1+4 more | 1:1.0.2k-21.el7_9, 1:1.1.1c-16.el8_2, 1:1.1.1g-12.el8_3 | 30 |
| openssl-1_1rpm | 1.1.0i-14.6.1, 1.1.0i-lp151.8.3.1, 1.1.1d-11.6.1 | 1.1.0i-14.12.1, 1.1.0i-lp151.8.12.2, 1.1.1d-11.12.1 | 10 |
- OSV records
- ALPINE-CVE-2020-1971RHSA-2020:5422RHSA-2020:5476RHSA-2020:5566UBUNTU-CVE-2020-1971DLA-2492-1DLA-2493-1DSA-4807-1openSUSE-SU-2020:2245-1SUSE-SU-2020:3720-1SUSE-SU-2020:3721-1
- Also known as
- RHSA-2020:5588, RHSA-2020:5623, RHSA-2020:5637, RHSA-2020:5642, USN-4662-1, USN-4745-1
Charts affected
952 by stars
Container images carrying it
778 by charts deploying them
A fixed version is listed for 5 of the 5 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| stacksimplify/ | ead648280067 | openssl | 1.1.1d-0+deb10u4 | 1 |
| stacksimplify/ | ce2b15139aca | openssl | 1.1.1d-0+deb10u4 | 1 |
| stakater/ | 1dae2b995d81 | openssl | 1.1.1i-r0 | 1 |
| stakater/ | c1226e5270cd | openssl | 1.1.1i-r0 | 1 |
| stakater/ | 4e130e265f87 | openssl | 1.1.1i-r0 | 1 |
| stakater/ | 39107924063e | openssl | 1.1.1i-r0 | 1 |
| stakater/ | 82b839b4517d | openssl | 1.1.1i-r0 | 1 |
| subspacecommunity/ | e2042b63fb35 | openssl | 1.1.1i-r0 | 1 |
| svtechnmaa/ | b9d7ecf8de24 | openssl | 1.1.1d-0+deb10u4 | 1 |
| svtechnmaa/ | e19aba397c1f | openssl | 1.1.1d-0+deb10u4 | 1 |
| svtechnmaa/ | 674fad30a51f | openssl | 1.1.1d-0+deb10u4 | 1 |
| swaggerapi/ | d434cac93813 | openssl | 1.1.1i-r0 | 1 |
| t3nde/ | d2939e9a719b | openssl | 1.1.1i-r0 | 1 |
| t3nde/ | 7cc268408e1a | openssl | 1.1.1i-r0 | 1 |
| tensorflow/ | 1e3172090703 | openssl | 1.0.2g-1ubuntu4.18 | 1 |
| tenstartups/ | 379d9338c720 | openssl | 1.1.1i-r0 | 1 |
| testhubio/ | 56badee134b9 | openssl | 1.1.1d-0+deb10u4 | 1 |
| testhubio/ | e86c2db53be8 | openssl | 1.1.1i-r0 | 1 |
| thelounge/ | 639978459c3a | openssl | 1.1.1i-r0 | 1 |
| timothyclarke/ | 22c41e5ca7e2 | openssl | 1.0.2g-1ubuntu4.18 | 1 |
| tobiasbp/ | 14bee6e33a26 | openssl | 1.1.1i-r0 | 1 |
| tpdock/ | 3da600c95a49 | openssl | 1.0.2g-1ubuntu4.18 | 1 |
| trungkien210493/ | 2cc8c3763c4c | openssl | 1.1.1d-0+deb10u4 | 1 |
| vectorim/ | 080e313abd37 | openssl | 1.1.1i-r0 | 1 |
| volantmq/ | 9bfe7857ebc3 | openssl | 1.1.1i-r0 | 1 |
| voltha/ | 58b74386e276 | openssl | 1.1.1i-r0 | 1 |
| voltha/ | f04ebe2bc2e7 | openssl | 1.1.1i-r0 | 1 |
| voltha/ | c4e41e92f046 | openssl | 1.0.2g-1ubuntu4.18 | 1 |
| voltha/ | 59ab2a00f712 | openssl | 1.0.1f-1ubuntu2.27+esm2 | 1 |
| voltha/ | 37f80524c207 | openssl | 1.0.2g-1ubuntu4.18 | 1 |
| voltha/ | 9ee8c1f4428c | openssl | 1.0.2g-1ubuntu4.18 | 1 |
| voltha/ | e038acb950d3 | openssl | 1.1.1-1ubuntu2.1~18.04.7 | 1 |
| voltha/ | 99b0278f8411 | openssl | 1.1.1i-r0 | 1 |
| voltha/ | 655c3048a602 | openssl | 1.0.2g-1ubuntu4.18 | 1 |
| voltha/ | ff596b62de59 | openssl | 1.0.2g-1ubuntu4.18 | 1 |
| vromero/ | 408d6a46b153 | openssl openssl1.0 | 1.1.0l-1~deb9u2 1.0.2u-1~deb9u3 | 1 |
| vultr/ | 541c3e0aec58 | openssl | 1.1.1i-r0 | 1 |
| wavefronthq/ | d1064d28f6eb | openssl | 1.1.1-1ubuntu2.1~18.04.7 | 1 |
| weaveworks/ | 174307de1b36 | openssl | 1.1.1i-r0 | 1 |
| weaveworks/ | a9c2e9df4227 | openssl | 1.1.1i-r0 | 1 |
| weblate/ | 82848df56ecd | openssl | 1.1.1d-0+deb10u4 | 1 |
| wener/ | ef3bd19da190 | openssl | 1.1.1i-r0 | 1 |
| wiremind/ | 4dea42c8166c | openssl | 1.1.1d-0+deb10u4 | 1 |
| woojoong/ | ec230db19652 | openssl | 1.1.1-1ubuntu2.1~18.04.7 | 1 |
| xetusoss/ | 88f25242b9ee | openssl | 1.1.1i-r0 | 1 |
| yandex/ | ab1738a64b70 | openssl | 1.1.1-1ubuntu2.1~18.04.7 | 1 |
| yandex/ | ccf9c2b5e3f2 | openssl | 1.1.1-1ubuntu2.1~18.04.7 | 1 |
| yandex/ | d210dc69321e | openssl | 1.1.1-1ubuntu2.1~18.04.7 | 1 |
| gcr.io/ | a85176b8e7cc | openssl | 1.1.1d-0+deb10u4 | 1 |
| gcr.io/ | 809338a69bd5 | openssl openssl1.0 | 1.1.1-1ubuntu2.1~18.04.7 1.0.2n-1ubuntu5.5 | 1 |