CVE-2020-29362

Medium

Advisory

Published 16 Dec 2020In the index since 6 Sept 2026

Severity: Medium; worst across findings
CVSS: 5.3; base score, highest
EPSS: 0.023; 82nd percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 206; of 17,781 indexed, latest versions
Container images: 109; deployed by those charts
Fix available: 2 of 2; affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 206 of 17,781 indexed charts deploy, on 109 images.

Affected package	Affected versions	Fixed in	Images
p11-kitdeb	0.23.2-5~ubuntu16.04.1, 0.23.9-2, 0.23.20-1build1	0.23.2-5~ubuntu16.04.2, 0.23.9-2ubuntu0.1, 0.23.20-1ubuntu0.1	99
p11-kitapk	0.23.16.1-r0, 0.23.18.1-r0, 0.23.20-r5	0.23.16.1-r1, 0.23.18.1-r1, 0.23.22-r0	10

OSV records: ALPINE-CVE-2020-29362 UBUNTU-CVE-2020-29362
Also known as: USN-4677-1

Charts affected

206 by stars

Chart

Latest

Affected images

Radar Score

pagesthuy-pages

1.0.0

1 of 3 See more

pages thuy-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2020-29362.

Container image	Digest	Package	Fixed in
flyway/flyway :6.4.4	22d97ceb0c47	p11-kit@0.23.9-2	0.23.9-2ubuntu0.1

Open the chart page →

20,190

lightstepupdater-lightstep-satellite

1.2.2

1 of 1 See more

lightstep updater-lightstep-satellite 1.2.2

1 of the 1 container images this version deploys carry CVE-2020-29362.

Container image	Digest	Package	Fixed in
lightstep/collector :2021-01-26_23-02-36Z	11c5569aaf3b	p11-kit@0.23.2-5~ubuntu16.04.1	0.23.2-5~ubuntu16.04.2

Open the chart page →

15,330

pagesvictor-pages

1.0.0

1 of 3 See more

pages victor-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2020-29362.

Container image	Digest	Package	Fixed in
flyway/flyway :6.4.4	22d97ceb0c47	p11-kit@0.23.9-2	0.23.9-2ubuntu0.1

Open the chart page →

20,190

pageswalter

1.0.0

1 of 3 See more

pages walter 1.0.0

1 of the 3 container images this version deploys carry CVE-2020-29362.

Container image	Digest	Package	Fixed in
flyway/flyway :6.4.4	22d97ceb0c47	p11-kit@0.23.9-2	0.23.9-2ubuntu0.1

Open the chart page →

20,190

emissary-ingresswenerme

8.12.2

1 of 2 See more

emissary-ingress wenerme 8.12.2

1 of the 2 container images this version deploys carry CVE-2020-29362.

Container image	Digest	Package	Fixed in
istio/kubectl :1.5.10	dbb7726d1bf0	p11-kit@0.23.9-2	0.23.9-2ubuntu0.1

Open the chart page →

10,843

apicurio-registry-sqlwitcom-gmbh

0.1.0

1 of 1 See more

apicurio-registry-sql witcom-gmbh 0.1.0

1 of the 1 container images this version deploys carry CVE-2020-29362.

Container image	Digest	Package	Fixed in
apicurio/apicurio-registry-jpa :1.3.2.Final	44eeddd3562c	p11-kit@0.23.18.1-r0	0.23.18.1-r1

Open the chart page →

3,424

Container images carrying it

109 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
flyway/flyway :6.4.4	22d97ceb0c47	p11-kit@0.23.9-2	0.23.9-2ubuntu0.1	79
oomk8s/readiness-check :2.0.2	875814cc853d	p11-kit@0.23.2-5~ubuntu16.04.1	0.23.2-5~ubuntu16.04.2	11
oomk8s/readiness-check :2.0.0	7daa08b81954	p11-kit@0.23.2-5~ubuntu16.04.1	0.23.2-5~ubuntu16.04.2	6
hyperledger/fabric-ca-tools :latest	4ce6f43ded2e	p11-kit@0.23.2-5~ubuntu16.04.1	0.23.2-5~ubuntu16.04.2	4
hyperledger/fabric-couchdb :0.4.15	f6c724592abf	p11-kit@0.23.2-5~ubuntu16.04.1	0.23.2-5~ubuntu16.04.2	4
omecproject/cdn-video-repo :1.0.0 :remote-v3	d59ccb138ffb	p11-kit@0.23.2-5~ubuntu16.04.1	0.23.2-5~ubuntu16.04.2	3
selenium/hub :3.141.59	02f251d48d5f	p11-kit@0.23.20-1build1	0.23.20-1ubuntu0.1	3
freeradius/freeradius-server :3.0.21	21c8bfa904d8	p11-kit@0.23.9-2	0.23.9-2ubuntu0.1	2
gradiant/spark :2.4.4-python-alpine	97657d56e927	p11-kit@0.23.16.1-r0	0.23.16.1-r1	2
istio/kubectl :1.5.10	dbb7726d1bf0	p11-kit@0.23.9-2	0.23.9-2ubuntu0.1	2
library/cassandra :3.11.6	5aa8400b4b3b	p11-kit@0.23.9-2	0.23.9-2ubuntu0.1	2
library/mongo :4.2.3	58b25d51baa1	p11-kit@0.23.9-2	0.23.9-2ubuntu0.1	2
lightstep/collector :2021-01-26_23-02-36Z	11c5569aaf3b	p11-kit@0.23.2-5~ubuntu16.04.1	0.23.2-5~ubuntu16.04.2	2
mesosphere/kubeaddons-catalog :v0.11.4	073db43d0b8b	p11-kit@0.23.20-1build1	0.23.20-1ubuntu0.1	2
neuvector/manager :3.2.1	f1b7d666eae0	p11-kit@0.23.18.1-r0	0.23.18.1-r1	2
ngick8stesting/c3po-mmeinit :latest	1e764eab77b4	p11-kit@0.23.9-2	0.23.9-2ubuntu0.1	2
omecproject/mcord-synchronizer :comac-1.0.0	cfdb566dd949	p11-kit@0.23.2-5~ubuntu16.04.1	0.23.2-5~ubuntu16.04.2	2
gcr.io/google_containers/kubernetes-dashboard-init-amd64 :v1.0.0	fbe12aa24de6	p11-kit@0.23.2-5~ubuntu16.04.1	0.23.2-5~ubuntu16.04.2	2
ghcr.io/linuxserver/openvpn-as :version-2.8.6-916f8e7d-ubuntu18	4ee0764310e7	p11-kit@0.23.9-2	0.23.9-2ubuntu0.1	2
a10networks/acos-prometheus-exporter :latest	8dc58d434d71	p11-kit@0.23.9-2	0.23.9-2ubuntu0.1	1
adferrand/backuppc :4.4.0	6fea97b02758	p11-kit@0.23.20-r5	0.23.22-r0	1
apicurio/apicurio-registry-jpa :1.3.2.Final	44eeddd3562c	p11-kit@0.23.18.1-r0	0.23.18.1-r1	1
brannondorsey/alpine-xmrig :v5.8.2	42d01bbe307f	p11-kit@0.23.18.1-r0	0.23.18.1-r1	1
cheyang/distributed-tf :1.6.0	46cc34755493	p11-kit@0.23.2-5~ubuntu16.04.1	0.23.2-5~ubuntu16.04.2	1
cloudve/janis-terminal :latest	af56e77ca587	p11-kit@0.23.9-2	0.23.9-2ubuntu0.1	1
cloudve/ttyd :latest	d79c1c5881c0	p11-kit@0.23.9-2	0.23.9-2ubuntu0.1	1
cradlepoint/pgbouncer :1.0.1	8f5720b0cd03	p11-kit@0.23.9-2	0.23.9-2ubuntu0.1	1
daedalusproject/base_kubectl :latest	6f72b5119eda	p11-kit@0.23.20-1build1	0.23.20-1ubuntu0.1	1
daskdev/dask-notebook :1.1.0	052630f5ca04	p11-kit@0.23.9-2	0.23.9-2ubuntu0.1	1
datalust/seq :5.0.832-pre	9c731bb207a6	p11-kit@0.23.2-5~ubuntu16.04.1	0.23.2-5~ubuntu16.04.2	1
dniel/api-posts :master	45a667852f2a	p11-kit@0.23.9-2	0.23.9-2ubuntu0.1	1
elastictranscoder/media :627e21dc	963ab3858c6b	p11-kit@0.23.9-2	0.23.9-2ubuntu0.1	1
elastictranscoder/media-storage :f6d861a0	26208b8c2359	p11-kit@0.23.9-2	0.23.9-2ubuntu0.1	1
elastictranscoder/transcoder :627e21dc	b4a0327029e6	p11-kit@0.23.9-2	0.23.9-2ubuntu0.1	1
elastictranscoder/transcoder-handler :627e21dc	5b75d19e2733	p11-kit@0.23.9-2	0.23.9-2ubuntu0.1	1
ethereumex/eth-stats-dashboard :v0.0.1	a7603aa8df4c	p11-kit@0.23.2-5~ubuntu16.04.1	0.23.2-5~ubuntu16.04.2	1
folioci/mod-marccat :latest	1b57d690d568	p11-kit@0.23.16.1-r0	0.23.16.1-r1	1
frankescobar/allure-docker-service :2.21.0	8a4d7e9308de	p11-kit@0.23.9-2	0.23.9-2ubuntu0.1	1
frankescobar/allure-docker-service :2.19.0	cafa03b94dac	p11-kit@0.23.9-2	0.23.9-2ubuntu0.1	1
free5gmano/nextepc-mongodb :latest	36f806935519	p11-kit@0.23.2-5~ubuntu16.04.1	0.23.2-5~ubuntu16.04.2	1
geoscienceaustralia/dea-k8s-data :latest	f4039b45572a	p11-kit@0.23.9-2	0.23.9-2ubuntu0.1	1
gitea/gitea :1.12.4	85416d6f65fe	p11-kit@0.23.18.1-r0	0.23.18.1-r1	1
gitea/gitea :1.13.0	d5ab14cd29af	p11-kit@0.23.20-r5	0.23.22-r0	1
gotson/komga :0.99.4	9b15ea6bfc30	p11-kit@0.23.9-2	0.23.9-2ubuntu0.1	1
haveagitgat/tdarr_node :2.00.10	1e3f9328327d	p11-kit@0.23.20-1build1	0.23.20-1ubuntu0.1	1
hyperledger/fabric-couchdb :0.4.10	c65891b6c237	p11-kit@0.23.2-5~ubuntu16.04.1	0.23.2-5~ubuntu16.04.2	1
ibmcom/ibm-workload-scheduler-agent-dynamic-dev :9.4.0.04	7e4dc1e27cdf	p11-kit@0.23.2-5~ubuntu16.04.1	0.23.2-5~ubuntu16.04.2	1
ibmcom/icp-swift-sample :latest	b5d8c6714dbc	p11-kit@0.23.2-5~ubuntu16.04.1	0.23.2-5~ubuntu16.04.2	1
ibmcom/microclimate-theia :latest	e17bdccc5030	p11-kit@0.23.2-5~ubuntu16.04.1	0.23.2-5~ubuntu16.04.2	1
ibmcom/skydive :0.22.0	395e60cc6e3d	p11-kit@0.23.9-2	0.23.9-2ubuntu0.1	1