CVE-2021-20254

Medium

Advisory

Published 29 Apr 2021In the index since 8 Sept 2026

Severity: Medium; worst across findings
CVSS: 6.8; base score, highest
EPSS: 0.016; 75th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 7; of 17,781 indexed, latest versions
Container images: 4; deployed by those charts
Fix available: 2 of 2; affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 7 of 17,781 indexed charts deploy, on 4 images.

Affected package	Affected versions	Fixed in	Images
sambaapk	4.12.2-r1, 4.13.3-r1	4.12.15-r0, 4.13.8-r0	2
sambadeb	2:4.3.11+dfsg-0ubuntu0.16.04.18, 2:4.7.6+dfsg~ubuntu-0ubuntu2.15	2:4.3.11+dfsg-0ubuntu0.16.04.34, 2:4.7.6+dfsg~ubuntu-0ubuntu2.23	2

OSV records: ALPINE-CVE-2021-20254 UBUNTU-CVE-2021-20254
Also known as: USN-4930-1

Charts affected

7 by stars

Chart

Latest

Affected images

Radar Score

backuppcfermosit

0.0.2

1 of 2 See more

backuppc fermosit 0.0.2

1 of the 2 container images this version deploys carry CVE-2021-20254.

Container image	Digest	Package	Fixed in
adferrand/backuppc :4.4.0	6fea97b02758	samba@4.12.2-r1	4.12.15-r0

Open the chart page →

4,622

cdn-remoteopencord

0.2.4

1 of 3 See more

cdn-remote opencord 0.2.4

1 of the 3 container images this version deploys carry CVE-2021-20254.

Container image	Digest	Package	Fixed in
omecproject/cdn-video-repo :1.0.0	d59ccb138ffb	samba@2:4.3.11+dfsg-0ubuntu0.16.04.18	2:4.3.11+dfsg-0ubuntu0.16.04.34

Open the chart page →

63,223

freeradiusopencord

1.0.4

1 of 1 See more

freeradius opencord 1.0.4

1 of the 1 container images this version deploys carry CVE-2021-20254.

Container image	Digest	Package	Fixed in
freeradius/freeradius-server :3.0.21	21c8bfa904d8	samba@2:4.7.6+dfsg~ubuntu-0ubuntu2.15	2:4.7.6+dfsg~ubuntu-0ubuntu2.23

Open the chart page →

15,702

mcord-cdn-remoteopencord

0.1.6

1 of 2 See more

mcord-cdn-remote opencord 0.1.6

1 of the 2 container images this version deploys carry CVE-2021-20254.

Container image	Digest	Package	Fixed in
omecproject/cdn-video-repo :remote-v3	d59ccb138ffb	samba@2:4.3.11+dfsg-0ubuntu0.16.04.18	2:4.3.11+dfsg-0ubuntu0.16.04.34

Open the chart page →

42,614

mcord-cdn-remote-freeopencord

0.1.3

1 of 1 See more

mcord-cdn-remote-free opencord 0.1.3

1 of the 1 container images this version deploys carry CVE-2021-20254.

Container image	Digest	Package	Fixed in
omecproject/cdn-video-repo :remote-v3	d59ccb138ffb	samba@2:4.3.11+dfsg-0ubuntu0.16.04.18	2:4.3.11+dfsg-0ubuntu0.16.04.34

Open the chart page →

29,124

voltha-infraopencord

2.14.0

1 of 10 See more

voltha-infra opencord 2.14.0

1 of the 10 container images this version deploys carry CVE-2021-20254.

Container image	Digest	Package	Fixed in
freeradius/freeradius-server :3.0.21	21c8bfa904d8	samba@2:4.7.6+dfsg~ubuntu-0ubuntu2.15	2:4.7.6+dfsg~ubuntu-0ubuntu2.23

Open the chart page →

41,044

sambawenerme

1.0.0

1 of 1 See more

samba wenerme 1.0.0

1 of the 1 container images this version deploys carry CVE-2021-20254.

Container image	Digest	Package	Fixed in
wener/samba :4.13.3	9a42bae466d4	samba@4.13.3-r1	4.13.8-r0

Open the chart page →

2,555

Container images carrying it

4 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
omecproject/cdn-video-repo :1.0.0 :remote-v3	d59ccb138ffb	samba@2:4.3.11+dfsg-0ubuntu0.16.04.18	2:4.3.11+dfsg-0ubuntu0.16.04.34	3
freeradius/freeradius-server :3.0.21	21c8bfa904d8	samba@2:4.7.6+dfsg~ubuntu-0ubuntu2.15	2:4.7.6+dfsg~ubuntu-0ubuntu2.23	2
adferrand/backuppc :4.4.0	6fea97b02758	samba@4.12.2-r1	4.12.15-r0	1
wener/samba :4.13.3	9a42bae466d4	samba@4.13.3-r1	4.13.8-r0	1