CVE-2020-28196
HighAdvisory
Published 6 Nov 2020In the index since 5 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 7.5
- base score, highest
- EPSS
- 0.044
- 91st percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 428
- of 17,781 indexed, latest versions
- Container images
- 330
- deployed by those charts
- Fix available
- 3 of 3
- affected packages
Red Hat Security Advisory: krb5 security update
Carried by container images the latest versions of 428 of 17,781 indexed charts deploy, on 330 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| krb5deb | 1.12+dfsg-2ubuntu5, 1.12+dfsg-2ubuntu5.1, 1.12+dfsg-2ubuntu5.3, 1.12+dfsg-2ubuntu5.4+8 more | 1.12+dfsg-2ubuntu5.4+esm2, 1.13.2+dfsg-5ubuntu2.2, 1.15-1+deb9u2, 1.16-2ubuntu0.2+2 more | 228 |
| krb5apk | 1.15.5-r0, 1.17-r0, 1.17.1-r0, 1.18.2-r0 | 1.15.5-r1, 1.17.2-r0, 1.18.3-r0 | 69 |
| krb5rpm | 1.16.1-22.el8, 1.16.3-3.9.1, 1.16.3-3.12.2, 1.16.3-lp151.2.6.1+4 more | 0:1.18.2-8.el8, 1.16.3-3.15.1, 1.16.3-lp151.2.15.1 | 33 |
- OSV records
- ALPINE-CVE-2020-28196RHSA-2021:1593UBUNTU-CVE-2020-28196DLA-2437-1DSA-4795-1openSUSE-SU-2020:2037-1SUSE-SU-2020:3377-1
- Also known as
- USN-4635-1
Charts affected
428 by stars
Container images carrying it
330 by charts deploying them
A fixed version is listed for 3 of the 3 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| conduction/ | 45f20c4cd2fa | krb5 | 1.15-1+deb9u2 | 1 |
| conduction/ | 8722700f1768 | krb5 | 1.15-1+deb9u2 | 1 |
| conduction/ | c3e5737ae68f | krb5 | 1.15-1+deb9u2 | 1 |
| confluentinc/ | f2975d507a2a | krb5 | 0:1.18.2-8.el8 | 1 |
| confluentinc/ | 8f1544df1f48 | krb5 | 0:1.18.2-8.el8 | 1 |
| confluentinc/ | 5f990b0f43c9 | krb5 | 1.15-1+deb9u2 | 1 |
| confluentinc/ | 4bc70a83ca6f | krb5 | 0:1.18.2-8.el8 | 1 |
| confluentinc/ | b0b7aa26254a | krb5 | 0:1.18.2-8.el8 | 1 |
| confluentinc/ | ee403d5b9090 | krb5 | 0:1.18.2-8.el8 | 1 |
| confluentinc/ | b651d4b6185a | krb5 | 0:1.18.2-8.el8 | 1 |
| confluentinc/ | 78c190f4472c | krb5 | 0:1.18.2-8.el8 | 1 |
| ctron/ | 8fdea8f76499 | krb5 | 0:1.18.2-8.el8 | 1 |
| daskdev/ | 4ecd7bc35500 | krb5 | 1.15-1+deb9u2 | 1 |
| daskdev/ | 052630f5ca04 | krb5 | 1.16-2ubuntu0.2 | 1 |
| datalust/ | 9c731bb207a6 | krb5 | 1.13.2+dfsg-5ubuntu2.2 | 1 |
| davidvmar/ | 2a68e9ac7f09 | krb5 | 1.15-1+deb9u2 | 1 |
| davidvmar/ | 5663f5b24615 | krb5 | 1.15-1+deb9u2 | 1 |
| dbanda/ | 0ca125e68e53 | krb5 | 1.15.5-r1 | 1 |
| dbanda/ | d0e6367876ae | krb5 | 1.15.5-r1 | 1 |
| digitsy/ | f91d7f56b55d | krb5 | 1.17-3+deb10u1 | 1 |
| dniel/ | 45a667852f2a | krb5 | 1.16-2ubuntu0.2 | 1 |
| douz/ | f2bc7fc068c1 | krb5 | 1.17-3+deb10u1 | 1 |
| dpage/ | a5a656e1d5fd | krb5 | 1.15.5-r1 | 1 |
| dpage/ | b1f00b8163cf | krb5 | 1.17.2-r0 | 1 |
| dstacademy/ | 46487aa079b0 | krb5 | 1.15-1+deb9u2 | 1 |
| duplicati/ | 8660f0eda7c9 | krb5 | 1.15-1+deb9u2 | 1 |
| eaudeweb/ | b8ad9b7e19bb | krb5 | 1.17-3+deb10u1 | 1 |
| egdsandaru/ | 681baa1926f4 | krb5 | 1.15-1+deb9u2 | 1 |
| elastictranscoder/ | 963ab3858c6b | krb5 | 1.16-2ubuntu0.2 | 1 |
| elastictranscoder/ | 26208b8c2359 | krb5 | 1.16-2ubuntu0.2 | 1 |
| elastictranscoder/ | b4a0327029e6 | krb5 | 1.16-2ubuntu0.2 | 1 |
| elastictranscoder/ | 5b75d19e2733 | krb5 | 1.16-2ubuntu0.2 | 1 |
| erlangsolutions/ | ad603bcb0b03 | krb5 | 1.15-1+deb9u2 | 1 |
| erlio/ | dcdaf720107c | krb5 | 1.15-1+deb9u2 | 1 |
| ethereumex/ | a7603aa8df4c | krb5 | 1.13.2+dfsg-5ubuntu2.2 | 1 |
| fimperato/ | 604012b77841 | krb5 | 1.15.5-r1 | 1 |
| fiware/ | fe11f55a926d | krb5 | 1.15-1+deb9u2 | 1 |
| fjvela/ | 70cebf67bd66 | krb5 | 1.17-3+deb10u1 | 1 |
| folioci/ | 1b57d690d568 | krb5 | 1.17.2-r0 | 1 |
| frankescobar/ | 8a4d7e9308de | krb5 | 1.16-2ubuntu0.2 | 1 |
| frankescobar/ | cafa03b94dac | krb5 | 1.16-2ubuntu0.2 | 1 |
| free5gmano/ | 36f806935519 | krb5 | 1.13.2+dfsg-5ubuntu2.2 | 1 |
| galaxy/ | 0267bad550e6 | krb5 | 1.12+dfsg-2ubuntu5.4+esm2 | 1 |
| galaxy/ | 8e577a626dfd | krb5 | 1.12+dfsg-2ubuntu5.4+esm2 | 1 |
| geoscienceaustralia/ | f4039b45572a | krb5 | 1.16-2ubuntu0.2 | 1 |
| gocd/ | 53588bd3221f | krb5 | 1.15.5-r1 | 1 |
| gocd/ | 2da45cb09d57 | krb5 | 1.15.5-r1 | 1 |
| gotson/ | 9b15ea6bfc30 | krb5 | 1.16-2ubuntu0.2 | 1 |
| grafana/ | 052147d7e0ec | krb5 | 1.17.2-r0 | 1 |
| grafana/ | 104f434d47c8 | krb5 | 1.15-1+deb9u2 | 1 |