CVE-2020-35492
HighAdvisory
Published 6 Jan 2021In the index since 6 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 7.8
- base score, highest
- EPSS
- 0.011
- 64th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 90
- of 17,781 indexed, latest versions
- Container images
- 92
- deployed by those charts
- Fix available
- 3 of 3
- affected packages
Red Hat Security Advisory: cairo and pixman security and bug fix update
Carried by container images the latest versions of 90 of 17,781 indexed charts deploy, on 92 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| cairodeb | 1.14.6-1, 1.14.8-1, 1.15.10-2, 1.15.10-2ubuntu0.1+1 more | 1.14.6-1ubuntu0.1~esm1, 1.14.8-1+deb9u1, 1.15.10-2ubuntu0.1+esm1, 1.16.0-4ubuntu1+esm1 | 87 |
| cairoapk | 1.16.0-r2 | 1.16.0-r3 | 2 |
| cairorpm | 1.15.12-3.el8 | 0:1.15.12-6.el8 | 3 |
- OSV records
- ALPINE-CVE-2020-35492UBUNTU-CVE-2020-35492RHSA-2022:1961DLA-2518-1
- Also known as
- USN-5407-1, USN-8140-1
Charts affected
90 by stars
Container images carrying it
92 by charts deploying them
A fixed version is listed for 3 of the 3 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| hyperledger/ | 4ce6f43ded2e | cairo | 1.14.6-1ubuntu0.1~esm1 | 4 |
| hyperledger/ | f6c724592abf | cairo | 1.14.6-1ubuntu0.1~esm1 | 4 |
| ciscolabs/ | a7b60ec88285 | cairo | 1.16.0-4ubuntu1+esm1 | 3 |
| ciscolabs/ | b59fc10bb821 | cairo | 1.16.0-4ubuntu1+esm1 | 3 |
| omecproject/ | d59ccb138ffb | cairo | 1.14.6-1ubuntu0.1~esm1 | 3 |
| fjvela/ | a8ebe5ca13fc | cairo | 1.14.8-1+deb9u1 | 2 |
| fjvela/ | 3c840aebce22 | cairo | 1.14.8-1+deb9u1 | 2 |
| nachomillangarcia/ | e4ce056f2d6d | cairo | 1.14.8-1+deb9u1 | 2 |
| neilpeterson/ | 84062718347c | cairo | 1.14.8-1+deb9u1 | 2 |
| statsd/ | dab129e74c25 | cairo | 1.14.8-1+deb9u1 | 2 |
| ghcr.io/ | 103fbcec2314 | cairo | 1.16.0-4ubuntu1+esm1 | 2 |
| ghcr.io/ | 9b6105be7ad0 | cairo | 1.16.0-4ubuntu1+esm1 | 2 |
| 5200710/ | 092d3088a5fb | cairo | 1.16.0-4ubuntu1+esm1 | 1 |
| adferrand/ | 6fea97b02758 | cairo | 1.16.0-r3 | 1 |
| airsonicadvanced/ | f7cbafac2806 | cairo | 1.16.0-4ubuntu1+esm1 | 1 |
| amancevice/ | c8c04bfe3d66 | cairo | 1.14.8-1+deb9u1 | 1 |
| assistiot/ | e5ae539ce2cb | cairo | 1.16.0-4ubuntu1+esm1 | 1 |
| browserless/ | c81ae5585b47 | cairo | 1.16.0-4ubuntu1+esm1 | 1 |
| bryanalves/ | 95f73dce8b21 | cairo | 1.14.8-1+deb9u1 | 1 |
| bryanalves/ | af47dfbb9413 | cairo | 1.14.8-1+deb9u1 | 1 |
| cheyang/ | 46cc34755493 | cairo | 1.14.6-1ubuntu0.1~esm1 | 1 |
| codaprotocol/ | 4ba4dd3a041f | cairo | 1.14.8-1+deb9u1 | 1 |
| countly/ | e3c238248f99 | cairo | 1.16.0-4ubuntu1+esm1 | 1 |
| daskdev/ | 052630f5ca04 | cairo | 1.15.10-2ubuntu0.1+esm1 | 1 |
| davidvmar/ | 2a68e9ac7f09 | cairo | 1.14.8-1+deb9u1 | 1 |
| davidvmar/ | 5663f5b24615 | cairo | 1.14.8-1+deb9u1 | 1 |
| duplicati/ | 8660f0eda7c9 | cairo | 1.14.8-1+deb9u1 | 1 |
| elastictranscoder/ | b4a0327029e6 | cairo | 1.15.10-2ubuntu0.1+esm1 | 1 |
| elastictranscoder/ | 5b75d19e2733 | cairo | 1.15.10-2ubuntu0.1+esm1 | 1 |
| fiware/ | 29456835bb2c | cairo | 1.16.0-4ubuntu1+esm1 | 1 |
| graphiteapp/ | 04a0037cc2ae | cairo | 1.16.0-r3 | 1 |
| guacamole/ | 333a7f40c145 | cairo | 1.14.8-1+deb9u1 | 1 |
| halkeye/ | 53eb2b3cd4cb | cairo | 1.14.8-1+deb9u1 | 1 |
| halkeye/ | 77b05e95fdb5 | cairo | 1.14.8-1+deb9u1 | 1 |
| haveagitgat/ | 1256348872ce | cairo | 1.16.0-4ubuntu1+esm1 | 1 |
| haveagitgat/ | 3ff0913202dd | cairo | 1.16.0-4ubuntu1+esm1 | 1 |
| huginn/ | c794eddc7b47 | cairo | 1.15.10-2ubuntu0.1+esm1 | 1 |
| hyperledger/ | c65891b6c237 | cairo | 1.14.6-1ubuntu0.1~esm1 | 1 |
| intel/ | aa8f5483a2ef | cairo | 1.16.0-4ubuntu1+esm1 | 1 |
| jakowenko/ | b858bac9e32a | cairo | 1.16.0-4ubuntu1+esm1 | 1 |
| jenkinsci/ | a1f33f004659 | cairo | 1.14.8-1+deb9u1 | 1 |
| koumoul/ | 7108d47be3b2 | cairo | 1.14.8-1+deb9u1 | 1 |
| library/ | cb079c0d7a57 | cairo | 1.14.8-1+deb9u1 | 1 |
| library/ | 41ed3a1a16b6 | cairo | 1.14.8-1+deb9u1 | 1 |
| library/ | 0ae5169e3d0f | cairo | 1.14.8-1+deb9u1 | 1 |
| linuxserver/ | a847b5b2d860 | cairo | 1.15.10-2ubuntu0.1+esm1 | 1 |
| linuxserver/ | 938810eca3d3 | cairo | 1.16.0-4ubuntu1+esm1 | 1 |
| linuxserver/ | 2427dde159a2 | cairo | 1.16.0-4ubuntu1+esm1 | 1 |
| mvitale1989/ | 1504ccda06df | cairo | 1.14.8-1+deb9u1 | 1 |
| ncsapolyglot/ | c44b22eb58bb | cairo | 1.14.8-1+deb9u1 | 1 |