StackRadar

CVE-2020-8177

High

Advisory

Published 24 Jun 2020In the index since 6 Sept 2026
Severity
High
worst across findings
CVSS
7.8
base score, highest
EPSS
0.013
68th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
341
of 17,781 indexed, latest versions
Container images
265
deployed by those charts
Fix available
3 of 3
affected packages

Red Hat Security Advisory: curl security and bug fix update

Carried by container images the latest versions of 341 of 17,781 indexed charts deploy, on 265 images.

Affected packageAffected versionsFixed inImages
curldeb7.35.0-1ubuntu2.1, 7.35.0-1ubuntu2.3, 7.35.0-1ubuntu2.16, 7.35.0-1ubuntu2.19+25 more7.35.0-1ubuntu2.20+esm4, 7.47.0-1ubuntu2.15, 7.52.1-5+deb9u11, 7.58.0-2ubuntu3.9137
curlapk7.63.0-r0, 7.64.0-r1, 7.64.0-r2, 7.64.0-r3+4 more7.64.0-r4, 7.66.0-r1, 7.67.0-r1, 7.69.1-r196
curlrpm7.29.0-51.el7, 7.29.0-51.el7_6.3, 7.29.0-54.el7, 7.29.0-54.el7_7.2+7 more0:7.29.0-59.el7_9.1, 0:7.61.1-14.el8, 7.60.0-lp151.5.12.132
OSV records
ALPINE-CVE-2020-8177UBUNTU-CVE-2020-8177RHSA-2020:4599RHSA-2020:5002DLA-2295-1openSUSE-SU-2020:0908-1
Also known as
RHSA-2020:5417, USN-4402-1

Charts affected

341 by stars
ChartLatestAffected imagesRadar Score
pndasmo-helm-chart6.0.01 of 3See more

pnda smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2020-8177.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.07daa08b81954
curl@7.47.0-1ubuntu2.7
7.47.0-1ubuntu2.15

Open the chart page →

27,477
pombasmo-helm-chart6.0.01 of 17See more

pomba smo-helm-chart 6.0.0

1 of the 17 container images this version deploys carry CVE-2020-8177.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.07daa08b81954
curl@7.47.0-1ubuntu2.7
7.47.0-1ubuntu2.15

Open the chart page →

29,220
portalsmo-helm-chart6.0.01 of 8See more

portal smo-helm-chart 6.0.0

1 of the 8 container images this version deploys carry CVE-2020-8177.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.07daa08b81954
curl@7.47.0-1ubuntu2.7
7.47.0-1ubuntu2.15

Open the chart page →

27,477
sdcsmo-helm-chart6.0.01 of 14See more

sdc smo-helm-chart 6.0.0

1 of the 14 container images this version deploys carry CVE-2020-8177.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
curl@7.47.0-1ubuntu2.12
7.47.0-1ubuntu2.15

Open the chart page →

25,769
sdnc-ansible-serversmo-helm-chart6.0.01 of 3See more

sdnc-ansible-server smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2020-8177.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
curl@7.47.0-1ubuntu2.12
7.47.0-1ubuntu2.15

Open the chart page →

25,769
sdnc-portalsmo-helm-chart6.0.01 of 3See more

sdnc-portal smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2020-8177.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
curl@7.47.0-1ubuntu2.12
7.47.0-1ubuntu2.15

Open the chart page →

25,769
sdnc-promsmo-helm-chart6.0.01 of 2See more

sdnc-prom smo-helm-chart 6.0.0

1 of the 2 container images this version deploys carry CVE-2020-8177.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
curl@7.47.0-1ubuntu2.12
7.47.0-1ubuntu2.15

Open the chart page →

24,776
sdnc-websmo-helm-chart6.0.01 of 3See more

sdnc-web smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2020-8177.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
curl@7.47.0-1ubuntu2.12
7.47.0-1ubuntu2.15

Open the chart page →

24,776
ueb-listenersmo-helm-chart6.0.01 of 3See more

ueb-listener smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2020-8177.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
curl@7.47.0-1ubuntu2.12
7.47.0-1ubuntu2.15

Open the chart page →

25,769
spinnakerspinnakerVerified publisher2.2.131 of 4See more

spinnaker spinnaker 2.2.13

1 of the 4 container images this version deploys carry CVE-2020-8177.

Container imageDigestPackageFixed in
minio/minio:RELEASE.2020-01-03T19-12-21Zf00aa6ef2b72
curl@7.64.0-r3
7.64.0-r4

Open the chart page →

6,836
pagessrinipages1.0.01 of 3See more

pages srinipages 1.0.0

1 of the 3 container images this version deploys carry CVE-2020-8177.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
curl@7.58.0-2ubuntu3.8
7.58.0-2ubuntu3.9

Open the chart page →

20,190
grafanastakaterVerified publisher1.0.391 of 3See more

grafana stakater 1.0.39

1 of the 3 container images this version deploys carry CVE-2020-8177.

Container imageDigestPackageFixed in
grafana/grafana:5.2.1104f434d47c8
curl@7.52.1-5+deb9u6
7.52.1-5+deb9u11

Open the chart page →

1,355
sonarqubestakaterVerified publisher0.10.31 of 2See more

sonarqube stakater 0.10.3

1 of the 2 container images this version deploys carry CVE-2020-8177.

Container imageDigestPackageFixed in
library/sonarqube:6.7.6-community0ae5169e3d0f
curl@7.52.1-5+deb9u9
7.52.1-5+deb9u11

Open the chart page →

11,841
pachydermstatcan0.5.11 of 4See more

pachyderm statcan 0.5.1

1 of the 4 container images this version deploys carry CVE-2020-8177.

Container imageDigestPackageFixed in
pachyderm/grpc-proxy:0.4.92b27f41d4d02
curl@7.52.1-5+deb9u9
7.52.1-5+deb9u11

Open the chart page →

4,967
prometheus-operatorstatcan0.2.21 of 7See more

prometheus-operator statcan 0.2.2

1 of the 7 container images this version deploys carry CVE-2020-8177.

Container imageDigestPackageFixed in
squareup/ghostunnel:v1.5.270f4cf270425
curl@7.66.0-r0
7.66.0-r1

Open the chart page →

12,237
pagesstephendillondell1.0.01 of 3See more

pages stephendillondell 1.0.0

1 of the 3 container images this version deploys carry CVE-2020-8177.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
curl@7.58.0-2ubuntu3.8
7.58.0-2ubuntu3.9

Open the chart page →

20,190
pagessunilb2590-pages1.0.01 of 3See more

pages sunilb2590-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2020-8177.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
curl@7.58.0-2ubuntu3.8
7.58.0-2ubuntu3.9

Open the chart page →

20,190
pi-holet3n1.0.01 of 1See more

pi-hole t3n 1.0.0

1 of the 1 container images this version deploys carry CVE-2020-8177.

Container imageDigestPackageFixed in
pihole/pihole:v4.48c172c4cf344
curl@7.52.1-5+deb9u10
7.52.1-5+deb9u11

Open the chart page →

1,373
taalhuizen-servicetaalhuizen-service1.0.01 of 3See more

taalhuizen-service taalhuizen-service 1.0.0

1 of the 3 container images this version deploys carry CVE-2020-8177.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/taalhuizen-service-php:latest04f1b7f0d573
curl@7.69.1-r0
7.69.1-r1

Open the chart page →

7,480
repmanteam-blueVerified publisher0.3.01 of 5See more

repman team-blue 0.3.0

1 of the 5 container images this version deploys carry CVE-2020-8177.

Container imageDigestPackageFixed in
buddy/repman:1.4.0097c897f8b54
curl@7.67.0-r0
7.67.0-r1

Open the chart page →

3,993
democharttech-challenge0.1.01 of 4See more

demochart tech-challenge 0.1.0

1 of the 4 container images this version deploys carry CVE-2020-8177.

Container imageDigestPackageFixed in
grafana/grafana:5.1.0a6b37f9afdd9
curl@7.52.1-5+deb9u5
7.52.1-5+deb9u11

Open the chart page →

3,632
pagestest43221.0.01 of 3See more

pages test4322 1.0.0

1 of the 3 container images this version deploys carry CVE-2020-8177.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
curl@7.58.0-2ubuntu3.8
7.58.0-2ubuntu3.9

Open the chart page →

20,190
standard-applicationthebitgram1.0.121 of 1See more

standard-application thebitgram 1.0.12

1 of the 1 container images this version deploys carry CVE-2020-8177.

Container imageDigestPackageFixed in
gcr.io/google_containers/echoserver:1.10cb5c1bddd1b5
curl@7.47.0-1ubuntu2.2
7.47.0-1ubuntu2.15

Open the chart page →

11,007
pagesthiru-pages1.0.01 of 3See more

pages thiru-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2020-8177.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
curl@7.58.0-2ubuntu3.8
7.58.0-2ubuntu3.9

Open the chart page →

20,190
pagesthuy-pages1.0.01 of 3See more

pages thuy-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2020-8177.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
curl@7.58.0-2ubuntu3.8
7.58.0-2ubuntu3.9

Open the chart page →

20,190
trouw-servicetrouw-service1.0.01 of 3See more

trouw-service trouw-service 1.0.0

1 of the 3 container images this version deploys carry CVE-2020-8177.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/trouw-service-php:latestf745e2870692
curl@7.69.1-r0
7.69.1-r1

Open the chart page →

7,510
lightstepupdater-lightstep-satellite1.2.21 of 1See more

lightstep updater-lightstep-satellite 1.2.2

1 of the 1 container images this version deploys carry CVE-2020-8177.

Container imageDigestPackageFixed in
lightstep/collector:2021-01-26_23-02-36Z11c5569aaf3b
curl@7.47.0-1ubuntu2.12
7.47.0-1ubuntu2.15

Open the chart page →

15,330
verhuis-serviceverhuis-service1.0.01 of 3See more

verhuis-service verhuis-service 1.0.0

1 of the 3 container images this version deploys carry CVE-2020-8177.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/verhuis-service-php:latest66bbaf95a123
curl@7.69.1-r0
7.69.1-r1

Open the chart page →

7,510
verzoekconversieserviceverzoekconversieservice1.0.01 of 3See more

verzoekconversieservice verzoekconversieservice 1.0.0

1 of the 3 container images this version deploys carry CVE-2020-8177.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/verzoekconversieservice-php:lateste918014fb8d3
curl@7.69.1-r0
7.69.1-r1

Open the chart page →

7,528
verzoekregistratiecomponentverzoekregistratiecomponent1.1.01 of 4See more

verzoekregistratiecomponent verzoekregistratiecomponent 1.1.0

1 of the 4 container images this version deploys carry CVE-2020-8177.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/verzoekregistratiecomponent-php:latestc4f6c03af5d3
curl@7.69.1-r0
7.69.1-r1

Open the chart page →

7,429
verzoektypecatalogusverzoektypecatalogus1.1.01 of 4See more

verzoektypecatalogus verzoektypecatalogus 1.1.0

1 of the 4 container images this version deploys carry CVE-2020-8177.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/verzoektypecatalogus-php:latest64f5eb7a398b
curl@7.69.1-r0
7.69.1-r1

Open the chart page →

7,429
pagesvictor-pages1.0.01 of 3See more

pages victor-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2020-8177.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
curl@7.58.0-2ubuntu3.8
7.58.0-2ubuntu3.9

Open the chart page →

20,190
voteappvoting-app-helm-charts-repoVerified publisher1.0.01 of 5See more

voteapp voting-app-helm-charts-repo 1.0.0

1 of the 5 container images this version deploys carry CVE-2020-8177.

Container imageDigestPackageFixed in
kodekloud/examplevotingapp_worker:v1741e3aaaa812
curl@7.52.1-5+deb9u1
7.52.1-5+deb9u11

Open the chart page →

8,262
workerappvoting-app-helm-charts-repoVerified publisher1.0.01 of 1See more

workerapp voting-app-helm-charts-repo 1.0.0

1 of the 1 container images this version deploys carry CVE-2020-8177.

Container imageDigestPackageFixed in
kodekloud/examplevotingapp_worker:v1741e3aaaa812
curl@7.52.1-5+deb9u1
7.52.1-5+deb9u11

Open the chart page →

3,329
voteappvoting-app-helm-charts-repo-cloudVerified publisher1.0.01 of 5See more

voteapp voting-app-helm-charts-repo-cloud 1.0.0

1 of the 5 container images this version deploys carry CVE-2020-8177.

Container imageDigestPackageFixed in
kodekloud/examplevotingapp_worker:v1741e3aaaa812
curl@7.52.1-5+deb9u1
7.52.1-5+deb9u11

Open the chart page →

8,262
workerappvoting-app-helm-charts-repo-cloudVerified publisher1.0.01 of 1See more

workerapp voting-app-helm-charts-repo-cloud 1.0.0

1 of the 1 container images this version deploys carry CVE-2020-8177.

Container imageDigestPackageFixed in
kodekloud/examplevotingapp_worker:v1741e3aaaa812
curl@7.52.1-5+deb9u1
7.52.1-5+deb9u11

Open the chart page →

3,329
pageswalter1.0.01 of 3See more

pages walter 1.0.0

1 of the 3 container images this version deploys carry CVE-2020-8177.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
curl@7.58.0-2ubuntu3.8
7.58.0-2ubuntu3.9

Open the chart page →

20,190
webencryptorwebencryptor1.1.01 of 1See more

webencryptor webencryptor 1.1.0

1 of the 1 container images this version deploys carry CVE-2020-8177.

Container imageDigestPackageFixed in
beubi/webencryptor:latesta02c2e200920
curl@7.52.1-5+deb9u9
7.52.1-5+deb9u11

Open the chart page →

1,968
alpinewenerme1.0.01 of 1See more

alpine wenerme 1.0.0

1 of the 1 container images this version deploys carry CVE-2020-8177.

Container imageDigestPackageFixed in
wener/base:3.12.0ef3bd19da190
curl@7.69.1-r0
7.69.1-r1

Open the chart page →

1,263
apicurio-registry-sqlwitcom-gmbh0.1.01 of 1See more

apicurio-registry-sql witcom-gmbh 0.1.0

1 of the 1 container images this version deploys carry CVE-2020-8177.

Container imageDigestPackageFixed in
apicurio/apicurio-registry-jpa:1.3.2.Final44eeddd3562c
curl@7.67.0-r0
7.67.0-r1

Open the chart page →

3,424
rcloneymrs0.1.41 of 2See more

rclone ymrs 0.1.4

1 of the 2 container images this version deploys carry CVE-2020-8177.

Container imageDigestPackageFixed in
quay.io/simplyzee/kube-rclone:v1.52.389a0c23d5ad3
curl@7.69.1-r0
7.69.1-r1

Open the chart page →

1,198

Container images carrying it

265 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
flyway/flyway:6.4.422d97ceb0c47
curl@7.58.0-2ubuntu3.8
7.58.0-2ubuntu3.9
79
oomk8s/readiness-check:2.0.2875814cc853d
curl@7.47.0-1ubuntu2.12
7.47.0-1ubuntu2.15
11
oomk8s/readiness-check:2.0.07daa08b81954
curl@7.47.0-1ubuntu2.7
7.47.0-1ubuntu2.15
6
grafana/grafana:6.2.5ab415470454b
curl@7.52.1-5+deb9u9
7.52.1-5+deb9u11
4
hyperledger/fabric-ca-tools:latest4ce6f43ded2e
curl@7.47.0-1ubuntu2.8
7.47.0-1ubuntu2.15
4
hyperledger/fabric-couchdb:0.4.15f6c724592abf
curl@7.47.0-1ubuntu2.12
7.47.0-1ubuntu2.15
4
kodekloud/examplevotingapp_worker:v1741e3aaaa812
curl@7.52.1-5+deb9u1
7.52.1-5+deb9u11
4
osixia/phpldapadmin:0.7.11ab629698ae0
curl@7.52.1-5
7.52.1-5+deb9u11
4
buddy/repman:1.4.0097c897f8b54
curl@7.67.0-r0
7.67.0-r1
3
library/consul:1.6.194cdbd83f24e
curl@7.64.0-r2
7.64.0-r4
3
architectminds/aws-kubectl:1.19735e59a1085
curl@7.65.1-r0
7.66.0-r1
2
fjvela/urjc-fjvela-external-service:1.0.1a8ebe5ca13fc
curl@7.52.1-5+deb9u10
7.52.1-5+deb9u11
2
fjvela/urjc-fjvela-server:1.0.53c840aebce22
curl@7.52.1-5+deb9u10
7.52.1-5+deb9u11
2
freeradius/freeradius-server:3.0.2121c8bfa904d8
curl@7.58.0-2ubuntu3.8
7.58.0-2ubuntu3.9
2
giantswarm/docker-kubectl:1.18.858a9d175cdb7
curl@7.69.1-r0
7.69.1-r1
2
grafana/grafana:6.1.6d66b41cf7e05
curl@7.52.1-5+deb9u9
7.52.1-5+deb9u11
2
istio/examples-bookinfo-ratings-v1:1.15.009b9d6958a13
curl@7.52.1-5+deb9u9
7.52.1-5+deb9u11
2
istio/examples-bookinfo-ratings-v1:1.14.0eb0f1a725ca8
curl@7.52.1-5+deb9u9
7.52.1-5+deb9u11
2
library/mongo:4.2.358b25d51baa1
curl@7.58.0-2ubuntu3.8
7.58.0-2ubuntu3.9
2
lightstep/collector:2021-01-26_23-02-36Z11c5569aaf3b
curl@7.47.0-1ubuntu2.12
7.47.0-1ubuntu2.15
2
nachomillangarcia/prometheus_aws_cost_exporter:lateste4ce056f2d6d
curl@7.52.1-5+deb9u6
7.52.1-5+deb9u11
2
neilpeterson/azure-vote-front:v384062718347c
curl@7.52.1-5+deb9u3
7.52.1-5+deb9u11
2
omecproject/kubernetes-synchronizer:comac-1.0.07c17a7b1d1ef
curl@7.64.0-r2
7.64.0-r4
2
omecproject/mcord-synchronizer:comac-1.0.0cfdb566dd949
curl@7.47.0-1ubuntu2.12
7.47.0-1ubuntu2.15
2
osixia/openldap:1.2.4d212a12aa728
curl@7.52.1-5+deb9u9
7.52.1-5+deb9u11
2
rodolpheche/wiremock:2.26.03be08a386092
curl@7.52.1-5+deb9u9
7.52.1-5+deb9u11
2
squareup/ghostunnel:v1.5.270f4cf270425
curl@7.66.0-r0
7.66.0-r1
2
statsd/statsd:v0.8.6dab129e74c25
curl@7.52.1-5+deb9u9
7.52.1-5+deb9u11
2
wurstmeister/zookeeper:latest7a7fd44a7210
curl@7.35.0-1ubuntu2.1
7.35.0-1ubuntu2.20+esm4
2
gcr.io/google_containers/kubernetes-dashboard-init-amd64:v1.0.0fbe12aa24de6
curl@7.47.0-1ubuntu2.2
7.47.0-1ubuntu2.15
2
quay.io/ibmgaragecloud/alpine-curl:latestead845a9d8e2
curl@7.66.0-r0
7.66.0-r1
2
aaionap/haproxy:1.4.089c1078a1b23
curl@7.52.1-5+deb9u9
7.52.1-5+deb9u11
1
alphayax/phpmemcachedadmin:latestc284977f027a
curl@7.52.1-5+deb9u6
7.52.1-5+deb9u11
1
amancevice/superset:0.28.1c8c04bfe3d66
curl@7.52.1-5+deb9u9
7.52.1-5+deb9u11
1
anapsix/get-cloudflare-logs:0.6.07cf7deb20399
curl@7.67.0-r0
7.67.0-r1
1
anchore/anchore-engine:v0.7.1ed9b3badd17c
curl@7.61.1-11.el8
0:7.61.1-14.el8
1
apache/apisix:1.5-alpine228eb0edf44b
curl@7.67.0-r0
7.67.0-r1
1
apache/couchdb:2.39f895c8ae371
curl@7.52.1-5+deb9u10
7.52.1-5+deb9u11
1
apicurio/apicurio-registry-jpa:1.3.2.Final44eeddd3562c
curl@7.67.0-r0
7.67.0-r1
1
argoproj/argocd:v1.2.1b0230853357d
curl@7.52.1-5+deb9u9
7.52.1-5+deb9u11
1
beubi/webencryptor:latesta02c2e200920
curl@7.52.1-5+deb9u9
7.52.1-5+deb9u11
1
billimek/prometheus-uptimerobot-exporter:0.0.1f14ccd7aad0e
curl@7.69.1-r0
7.69.1-r1
1
binford2k/showoff:0.20.2a64937052ce7
curl@7.64.0-r3
7.64.0-r4
1
bivas/presto:0.19605545994f806
curl@7.52.1-5+deb9u4
7.52.1-5+deb9u11
1
bootc/puppetboard:1.1.0f1383295e7be
curl@7.66.0-r0
7.66.0-r1
1
bryanalves/honeywell_exporter:0.0.1195f73dce8b21
curl@7.52.1-5+deb9u4
7.52.1-5+deb9u11
1
bryanalves/smart_exporter:0.2af47dfbb9413
curl@7.52.1-5+deb9u7
7.52.1-5+deb9u11
1
camptocamp/pghoard:10bff736b15623
curl@7.52.1-5+deb9u8
7.52.1-5+deb9u11
1
cfcontainerization/cf-operator:v2.3.0-0.g27a91cdf82fa261c18a8
curl@7.60.0-lp151.5.6.1
7.60.0-lp151.5.12.1
1
cfcontainerization/quarks-job:v0.0.0-0.g70ae34b58fb1c173a46
curl@7.60.0-lp151.5.6.1
7.60.0-lp151.5.12.1
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.