StackRadar

CVE-2020-24659

High

Advisory

Published 4 Sept 2020In the index since 6 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.037
89th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
20
of 17,781 indexed, latest versions
Container images
22
deployed by those charts
Fix available
3 of 3
affected packages

Red Hat Security Advisory: gnutls security and bug fix update

Carried by container images the latest versions of 20 of 17,781 indexed charts deploy, on 22 images.

Affected packageAffected versionsFixed inImages
gnutlsrpm3.6.5-2.el8, 3.6.7-6.29.1, 3.6.7-lp151.2.3.1, 3.6.8-8.el8+4 more0:3.6.14-7.el8_3, 3.6.7-6.34.1, 3.6.7-lp151.2.21.116
gnutlsapk3.6.7-r0, 3.6.7-r1, 3.6.10-r0, 3.6.14-r03.6.15-r05
gnutls28deb3.6.13-2ubuntu1.23.6.13-2ubuntu1.31
OSV records
ALPINE-CVE-2020-24659RHSA-2020:5483UBUNTU-CVE-2020-24659openSUSE-SU-2020:1724-1SUSE-SU-2020:2988-1
Also known as
USN-4491-1

Charts affected

20 by stars
ChartLatestAffected imagesRadar Score
xmrigbrannon0.1.11 of 1See more

xmrig brannon 0.1.1

1 of the 1 container images this version deploys carry CVE-2020-24659.

Container imageDigestPackageFixed in
brannondorsey/alpine-xmrig:v5.8.242d01bbe307f
gnutls@3.6.10-r0
3.6.15-r0

Open the chart page →

1,011
openshift-consoleav1o-chartsVerified publisher0.3.61 of 1See more

openshift-console av1o-charts 0.3.6

1 of the 1 container images this version deploys carry CVE-2020-24659.

Container imageDigestPackageFixed in
quay.io/openshift/origin-console:4.10.00bbe8b451fa3
gnutls@3.6.8-12.el8_2
0:3.6.14-7.el8_3

Open the chart page →

9,052
giteakeyporttech0.2.101 of 4See more

gitea keyporttech 0.2.10

1 of the 4 container images this version deploys carry CVE-2020-24659.

Container imageDigestPackageFixed in
gitea/gitea:1.12.485416d6f65fe
gnutls@3.6.14-r0
3.6.15-r0

Open the chart page →

5,408
mongodb-operatorccowleyVerified publisher0.1.11 of 1See more

mongodb-operator ccowley 0.1.1

1 of the 1 container images this version deploys carry CVE-2020-24659.

Container imageDigestPackageFixed in
quay.io/mongodb/mongodb-kubernetes-operator:0.3.0107a7c73af59
gnutls@3.6.14-6.el8
0:3.6.14-7.el8_3

Open the chart page →

6,389
developer-dashboardcloud-native-toolkit1.4.11 of 1See more

developer-dashboard cloud-native-toolkit 1.4.1

1 of the 1 container images this version deploys carry CVE-2020-24659.

Container imageDigestPackageFixed in
quay.io/ibmgaragecloud/developer-dashboard:v1.4.47a4b9fedc724
gnutls@3.6.8-11.el8_2
0:3.6.14-7.el8_3

Open the chart page →

25,456
backuppcfermosit0.0.21 of 2See more

backuppc fermosit 0.0.2

1 of the 2 container images this version deploys carry CVE-2020-24659.

Container imageDigestPackageFixed in
adferrand/backuppc:4.4.06fea97b02758
gnutls@3.6.14-r0
3.6.15-r0

Open the chart page →

4,622
wekan-oldgabisonfire0.1.21 of 1See more

wekan-old gabisonfire 0.1.2

1 of the 1 container images this version deploys carry CVE-2020-24659.

Container imageDigestPackageFixed in
wekanteam/wekan:v4.2268a51f0327df
gnutls28@3.6.13-2ubuntu1.2
3.6.13-2ubuntu1.3

Open the chart page →

5,941
xbackbonegeek-cookbookVerified publisher5.4.21 of 1See more

xbackbone geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry CVE-2020-24659.

Container imageDigestPackageFixed in
pe46dro/xbackbone-docker:3.3.309dfe3aa10f6
gnutls@3.6.7-r1
3.6.15-r0

Open the chart page →

1,655
hawkbit-operatorhelm-chartsVerified publisher0.1.41 of 1See more

hawkbit-operator helm-charts 0.1.4

1 of the 1 container images this version deploys carry CVE-2020-24659.

Container imageDigestPackageFixed in
ctron/hawkbit-operator:0.1.48fdea8f76499
gnutls@3.6.8-11.el8_2
0:3.6.14-7.el8_3

Open the chart page →

5,792
ibm-kerify-devibm-charts1.0.01 of 1See more

ibm-kerify-dev ibm-charts 1.0.0

1 of the 1 container images this version deploys carry CVE-2020-24659.

Container imageDigestPackageFixed in
ibmcom/icp-sert-bats:3.2.0b558f2b444ae
gnutls@3.6.7-r0
3.6.15-r0

Open the chart page →

8,221
ibm-object-storage-pluginibm-charts1.1.52 of 2See more

ibm-object-storage-plugin ibm-charts 1.1.5

2 of the 2 container images this version deploys carry CVE-2020-24659.

Container imageDigestPackageFixed in
ibmcom/ibmcloud-object-storage-driver:1.8.16c796a4c693b4
gnutls@3.6.8-10.el8_2
0:3.6.14-7.el8_3
ibmcom/ibmcloud-object-storage-plugin:1.8.169c73804b37a3
gnutls@3.6.8-10.el8_2
0:3.6.14-7.el8_3

Open the chart page →

12,461
ibm-ucv-prodibm-helm5.2.61 of 16See more

ibm-ucv-prod ibm-helm 5.2.6

1 of the 16 container images this version deploys carry CVE-2020-24659.

Container imageDigestPackageFixed in
ibmcom/opencontent-common-utils:1.1.2cd5065df7304
gnutls@3.6.5-2.el8
0:3.6.14-7.el8_3

Open the chart page →

12,105
jx-app-anchorejenkins-x0.0.41 of 2See more

jx-app-anchore jenkins-x 0.0.4

1 of the 2 container images this version deploys carry CVE-2020-24659.

Container imageDigestPackageFixed in
anchore/anchore-engine:v0.7.1ed9b3badd17c
gnutls@3.6.8-8.el8
0:3.6.14-7.el8_3

Open the chart page →

9,854
nexusjenkins-x0.1.371 of 1See more

nexus jenkins-x 0.1.37

1 of the 1 container images this version deploys carry CVE-2020-24659.

Container imageDigestPackageFixed in
ghcr.io/jenkins-x/nexus:0.1.378caf5289fe73
gnutls@3.6.8-11.el8_2
0:3.6.14-7.el8_3

Open the chart page →

12,856
cloud-native-javamcouliba0.1.01 of 1See more

cloud-native-java mcouliba 0.1.0

1 of the 1 container images this version deploys carry CVE-2020-24659.

Container imageDigestPackageFixed in
quay.io/mcouliba/quarkus-serverless:1.0c2851757eca4
gnutls@3.6.8-8.el8
0:3.6.14-7.el8_3

Open the chart page →

4,979
gitlab-runner-operatorpnnl-miscscripts0.1.61 of 1See more

gitlab-runner-operator pnnl-miscscripts 0.1.6

1 of the 1 container images this version deploys carry CVE-2020-24659.

Container imageDigestPackageFixed in
pnnlmiscscripts/gitlab-runner-operator:0.1.3-1155131891741
gnutls@3.6.8-8.el8
0:3.6.14-7.el8_3

Open the chart page →

11,151
cf-operatorquarks2.3.0+0.g27a91cdf2 of 2See more

cf-operator quarks 2.3.0+0.g27a91cdf

2 of the 2 container images this version deploys carry CVE-2020-24659.

Container imageDigestPackageFixed in
cfcontainerization/cf-operator:v2.3.0-0.g27a91cdf82fa261c18a8
gnutls@3.6.7-lp151.2.3.1
3.6.7-lp151.2.21.1
cfcontainerization/quarks-job:v0.0.0-0.g70ae34b58fb1c173a46
gnutls@3.6.7-lp151.2.3.1
3.6.7-lp151.2.21.1

Open the chart page →

11,942
quarks-jobquarks0.0.124-g03faac81 of 1See more

quarks-job quarks 0.0.124-g03faac8

1 of the 1 container images this version deploys carry CVE-2020-24659.

Container imageDigestPackageFixed in
cfcontainerization/quarks-job:v0.0.124-g03faac87366b11c5fa5
gnutls@3.6.7-6.29.1
3.6.7-6.34.1

Open the chart page →

1,804
quarks-secretquarks0.0.677-ga060bb61 of 1See more

quarks-secret quarks 0.0.677-ga060bb6

1 of the 1 container images this version deploys carry CVE-2020-24659.

Container imageDigestPackageFixed in
cfcontainerization/quarks-secret:v0.0.677-ga060bb643131dbc0c8f
gnutls@3.6.7-6.29.1
3.6.7-6.34.1

Open the chart page →

1,814
ploigosredhat-cop0.0.91 of 2See more

ploigos redhat-cop 0.0.9

1 of the 2 container images this version deploys carry CVE-2020-24659.

Container imageDigestPackageFixed in
quay.io/openshift/origin-cli:4.66722d5041b47
gnutls@3.6.8-12.el8_2
0:3.6.14-7.el8_3

Open the chart page →

11,437

Container images carrying it

22 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
adferrand/backuppc:4.4.06fea97b02758
gnutls@3.6.14-r0
3.6.15-r0
1
anchore/anchore-engine:v0.7.1ed9b3badd17c
gnutls@3.6.8-8.el8
0:3.6.14-7.el8_3
1
brannondorsey/alpine-xmrig:v5.8.242d01bbe307f
gnutls@3.6.10-r0
3.6.15-r0
1
cfcontainerization/cf-operator:v2.3.0-0.g27a91cdf82fa261c18a8
gnutls@3.6.7-lp151.2.3.1
3.6.7-lp151.2.21.1
1
cfcontainerization/quarks-job:v0.0.0-0.g70ae34b58fb1c173a46
gnutls@3.6.7-lp151.2.3.1
3.6.7-lp151.2.21.1
1
cfcontainerization/quarks-job:v0.0.124-g03faac87366b11c5fa5
gnutls@3.6.7-6.29.1
3.6.7-6.34.1
1
cfcontainerization/quarks-secret:v0.0.677-ga060bb643131dbc0c8f
gnutls@3.6.7-6.29.1
3.6.7-6.34.1
1
ctron/hawkbit-operator:0.1.48fdea8f76499
gnutls@3.6.8-11.el8_2
0:3.6.14-7.el8_3
1
gitea/gitea:1.12.485416d6f65fe
gnutls@3.6.14-r0
3.6.15-r0
1
ibmcom/ibmcloud-object-storage-driver:1.8.16c796a4c693b4
gnutls@3.6.8-10.el8_2
0:3.6.14-7.el8_3
1
ibmcom/ibmcloud-object-storage-plugin:1.8.169c73804b37a3
gnutls@3.6.8-10.el8_2
0:3.6.14-7.el8_3
1
ibmcom/icp-sert-bats:3.2.0b558f2b444ae
gnutls@3.6.7-r0
3.6.15-r0
1
ibmcom/opencontent-common-utils:1.1.2cd5065df7304
gnutls@3.6.5-2.el8
0:3.6.14-7.el8_3
1
pe46dro/xbackbone-docker:3.3.309dfe3aa10f6
gnutls@3.6.7-r1
3.6.15-r0
1
pnnlmiscscripts/gitlab-runner-operator:0.1.3-1155131891741
gnutls@3.6.8-8.el8
0:3.6.14-7.el8_3
1
wekanteam/wekan:v4.2268a51f0327df
gnutls28@3.6.13-2ubuntu1.2
3.6.13-2ubuntu1.3
1
ghcr.io/jenkins-x/nexus:0.1.378caf5289fe73
gnutls@3.6.8-11.el8_2
0:3.6.14-7.el8_3
1
quay.io/ibmgaragecloud/developer-dashboard:v1.4.47a4b9fedc724
gnutls@3.6.8-11.el8_2
0:3.6.14-7.el8_3
1
quay.io/mcouliba/quarkus-serverless:1.0c2851757eca4
gnutls@3.6.8-8.el8
0:3.6.14-7.el8_3
1
quay.io/mongodb/mongodb-kubernetes-operator:0.3.0107a7c73af59
gnutls@3.6.14-6.el8
0:3.6.14-7.el8_3
1
quay.io/openshift/origin-cli:4.66722d5041b47
gnutls@3.6.8-12.el8_2
0:3.6.14-7.el8_3
1
quay.io/openshift/origin-console:4.10.00bbe8b451fa3
gnutls@3.6.8-12.el8_2
0:3.6.14-7.el8_3
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.