CVE-2020-1971
MediumAdvisory
Published 8 Dec 2020In the index since 5 Sept 2026
- Severity
- Medium
- worst across findings
- CVSS
- 5.9
- base score, highest
- EPSS
- 0.071
- 94th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 952
- of 17,781 indexed, latest versions
- Container images
- 778
- deployed by those charts
- Fix available
- 5 of 5
- affected packages
Red Hat Security Advisory: openssl security update
Carried by container images the latest versions of 952 of 17,781 indexed charts deploy, on 778 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| opensslapk | 1.1.1a-r1, 1.1.1b-r1, 1.1.1c-r0, 1.1.1d-r0+5 more | 1.1.1i-r0 | 378 |
| openssldeb | 1.0.1f-1ubuntu2.5, 1.0.1f-1ubuntu2.8, 1.0.1f-1ubuntu2.25, 1.0.1f-1ubuntu2.27+27 more | 1.0.1f-1ubuntu2.27+esm2, 1.0.2g-1ubuntu4.18, 1.1.0l-1~deb9u2, 1.1.1-1ubuntu2.1~18.04.7+2 more | 360 |
| openssl1.0deb | 1.0.2l-2, 1.0.2l-2+deb9u1, 1.0.2l-2+deb9u2, 1.0.2l-2+deb9u3+8 more | 1.0.2n-1ubuntu5.5, 1.0.2u-1~deb9u3 | 90 |
| opensslrpm | 1:1.0.2k-16.el7_6.1, 1:1.0.2k-19.el7, 1:1.1.1-8.el8, 1:1.1.1c-2.el8_1.1+4 more | 1:1.0.2k-21.el7_9, 1:1.1.1c-16.el8_2, 1:1.1.1g-12.el8_3 | 30 |
| openssl-1_1rpm | 1.1.0i-14.6.1, 1.1.0i-lp151.8.3.1, 1.1.1d-11.6.1 | 1.1.0i-14.12.1, 1.1.0i-lp151.8.12.2, 1.1.1d-11.12.1 | 10 |
- OSV records
- ALPINE-CVE-2020-1971RHSA-2020:5422RHSA-2020:5476RHSA-2020:5566UBUNTU-CVE-2020-1971DLA-2492-1DLA-2493-1DSA-4807-1openSUSE-SU-2020:2245-1SUSE-SU-2020:3720-1SUSE-SU-2020:3721-1
- Also known as
- RHSA-2020:5588, RHSA-2020:5623, RHSA-2020:5637, RHSA-2020:5642, USN-4662-1, USN-4745-1
Charts affected
952 by stars
Container images carrying it
778 by charts deploying them
A fixed version is listed for 5 of the 5 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| amancevice/ | 12a0a9e66550 | openssl | 1.1.1d-0+deb10u4 | 2 |
| apachepulsar/ | b341ef76a852 | openssl | 1.1.1i-r0 | 2 |
| architectminds/ | 9735e59a1085 | openssl | 1.1.1i-r0 | 2 |
| bitnamilegacy/ | 4fe2bd7b4036 | openssl | 1.1.1d-0+deb10u4 | 2 |
| caicloud/ | 1c853be4662e | openssl | 1.1.1i-r0 | 2 |
| curlimages/ | 5329ee280d3d | openssl | 1.1.1i-r0 | 2 |
| curlimages/ | 533cc13b5e39 | openssl | 1.1.1i-r0 | 2 |
| fjvela/ | a8ebe5ca13fc | openssl openssl1.0 | 1.1.0l-1~deb9u2 1.0.2u-1~deb9u3 | 2 |
| fjvela/ | 85727d4079d6 | openssl | 1.1.1i-r0 | 2 |
| fjvela/ | 3c840aebce22 | openssl openssl1.0 | 1.1.0l-1~deb9u2 1.0.2u-1~deb9u3 | 2 |
| freeradius/ | 21c8bfa904d8 | openssl | 1.1.1-1ubuntu2.1~18.04.7 | 2 |
| giantswarm/ | 58a9d175cdb7 | openssl | 1.1.1i-r0 | 2 |
| governify/ | 2987672448c7 | openssl | 1.1.1i-r0 | 2 |
| governify/ | 608c6940bb98 | openssl | 1.1.1i-r0 | 2 |
| governify/ | d3f37f4f8168 | openssl | 1.1.1i-r0 | 2 |
| governify/ | daeca1ce28e6 | openssl | 1.1.1i-r0 | 2 |
| governify/ | 38595913458f | openssl | 1.1.1i-r0 | 2 |
| gradiant/ | c33d53913869 | openssl | 1.1.1i-r0 | 2 |
| gradiant/ | 97657d56e927 | openssl | 1.1.1i-r0 | 2 |
| grafana/ | 511bc20bfcd1 | openssl | 1.1.1i-r0 | 2 |
| grafana/ | d66b41cf7e05 | openssl openssl1.0 | 1.1.0l-1~deb9u2 1.0.2u-1~deb9u3 | 2 |
| grafana/ | 922b3f412fdd | openssl | 1.1.1i-r0 | 2 |
| grafana/ | 46e88d390cd6 | openssl | 1.1.0l-1~deb9u2 | 2 |
| hjacobs/ | 58221b57d4d2 | openssl | 1.1.1d-0+deb10u4 | 2 |
| istio/ | 4c3379923c8a | openssl | 1.1.0l-1~deb9u2 | 2 |
| istio/ | fce0bcbff0be | openssl | 1.1.0l-1~deb9u2 | 2 |
| istio/ | 0a5eb4795952 | openssl | 1.1.0l-1~deb9u2 | 2 |
| istio/ | 22a0410f35a8 | openssl | 1.1.0l-1~deb9u2 | 2 |
| istio/ | 09b9d6958a13 | openssl openssl1.0 | 1.1.0l-1~deb9u2 1.0.2u-1~deb9u3 | 2 |
| istio/ | eb0f1a725ca8 | openssl openssl1.0 | 1.1.0l-1~deb9u2 1.0.2u-1~deb9u3 | 2 |
| istio/ | 40e8aba77c1b | openssl | 1.0.2g-1ubuntu4.18 | 2 |
| istio/ | ee156b8aefd6 | openssl | 1.0.2g-1ubuntu4.18 | 2 |
| istio/ | e86d247b7ac2 | openssl | 1.0.2g-1ubuntu4.18 | 2 |
| istio/ | eab80bcd2132 | openssl | 1.0.2g-1ubuntu4.18 | 2 |
| istio/ | 1e37fca43550 | openssl | 1.0.2g-1ubuntu4.18 | 2 |
| istio/ | e454cab754cf | openssl | 1.0.2g-1ubuntu4.18 | 2 |
| istio/ | dbb7726d1bf0 | openssl | 1.1.1-1ubuntu2.1~18.04.7 | 2 |
| jettech/ | c42098c8d855 | openssl | 1.1.0l-1~deb9u2 | 2 |
| jettech/ | fb7c2cd46ccf | openssl | 1.1.0l-1~deb9u2 | 2 |
| kubesphere/ | 71b85abfd057 | openssl | 1.1.1i-r0 | 2 |
| larribas/ | 05ccb0b46bfb | openssl | 1.1.1d-0+deb10u4 | 2 |
| library/ | 644fcb1a676b | openssl | 1.1.1i-r0 | 2 |
| library/ | 5aa8400b4b3b | openssl | 1.1.1-1ubuntu2.1~18.04.7 | 2 |
| library/ | 6ba79811d478 | openssl | 1.1.1i-r0 | 2 |
| library/ | 37c28f53d30d | openssl | 1.1.1i-r0 | 2 |
| library/ | 58b25d51baa1 | openssl | 1.1.1-1ubuntu2.1~18.04.7 | 2 |
| library/ | 32f9d9a069f7 | openssl | 1.1.1d-0+deb10u4 | 2 |
| library/ | 9643e9fbd633 | openssl | 1.1.1d-0+deb10u4 | 2 |
| library/ | 6fff55753e3b | openssl | 1.1.1d-0+deb10u4 | 2 |
| library/ | b1d09e971889 | openssl | 1.1.0l-1~deb9u2 | 2 |