CVE-2021-20305
HighAdvisory
Published 5 Apr 2021In the index since 6 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 8.1
- base score, highest
- EPSS
- 0.017
- 76th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 232
- of 17,781 indexed, latest versions
- Container images
- 145
- deployed by those charts
- Fix available
- 5 of 5
- affected packages
Red Hat Security Advisory: gnutls and nettle security update
Carried by container images the latest versions of 232 of 17,781 indexed charts deploy, on 145 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| nettledeb | 3.2-1ubuntu0.16.04.1, 3.4-1, 3.5.1+really3.5.1-2 | 3.2-1ubuntu0.16.04.2, 3.4-1ubuntu0.1, 3.5.1+really3.5.1-2ubuntu0.1 | 114 |
| gnutlsrpm | 3.6.5-2.el8, 3.6.8-8.el8, 3.6.8-10.el8_2, 3.6.8-11.el8_2+3 more | 0:3.6.14-8.el8_3 | 22 |
| nettlerpm | 3.4.1-1.el8, 3.4.1-2.el8, 3.4.1-2.el8_2 | 0:3.4.1-4.el8_3 | 22 |
| nettleapk | 3.7-r0 | 3.7.2-r0 | 1 |
| libnettlerpm | 3.4.1-4.12.1 | 3.4.1-4.15.1 | 8 |
- OSV records
- ALPINE-CVE-2021-20305RHSA-2021:1206UBUNTU-CVE-2021-20305SUSE-SU-2021:1412-1
- Also known as
- RHSA-2021:1245, RHSA-2021:1246, USN-4906-1
Charts affected
232 by stars
Container images carrying it
145 by charts deploying them
A fixed version is listed for 5 of the 5 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| elastictranscoder/ | 5b75d19e2733 | nettle | 3.4-1ubuntu0.1 | 1 |
| ethereumex/ | a7603aa8df4c | nettle | 3.2-1ubuntu0.16.04.2 | 1 |
| frankescobar/ | 8a4d7e9308de | nettle | 3.4-1ubuntu0.1 | 1 |
| frankescobar/ | cafa03b94dac | nettle | 3.4-1ubuntu0.1 | 1 |
| free5gmano/ | 36f806935519 | nettle | 3.2-1ubuntu0.16.04.2 | 1 |
| geoscienceaustralia/ | f4039b45572a | nettle | 3.4-1ubuntu0.1 | 1 |
| gotson/ | 9b15ea6bfc30 | nettle | 3.4-1ubuntu0.1 | 1 |
| haveagitgat/ | 1e3f9328327d | nettle | 3.5.1+really3.5.1-2ubuntu0.1 | 1 |
| huginn/ | c794eddc7b47 | nettle | 3.4-1ubuntu0.1 | 1 |
| hyperledger/ | c65891b6c237 | nettle | 3.2-1ubuntu0.16.04.2 | 1 |
| ibmcom/ | c796a4c693b4 | gnutls nettle | 0:3.6.14-8.el8_3 0:3.4.1-4.el8_3 | 1 |
| ibmcom/ | 9c73804b37a3 | gnutls nettle | 0:3.6.14-8.el8_3 0:3.4.1-4.el8_3 | 1 |
| ibmcom/ | d28bf361327a | gnutls nettle | 0:3.6.14-8.el8_3 0:3.4.1-4.el8_3 | 1 |
| ibmcom/ | 7e4dc1e27cdf | nettle | 3.2-1ubuntu0.16.04.2 | 1 |
| ibmcom/ | b5d8c6714dbc | nettle | 3.2-1ubuntu0.16.04.2 | 1 |
| ibmcom/ | e17bdccc5030 | nettle | 3.2-1ubuntu0.16.04.2 | 1 |
| ibmcom/ | cd5065df7304 | gnutls nettle | 0:3.6.14-8.el8_3 0:3.4.1-4.el8_3 | 1 |
| ibmcom/ | 395e60cc6e3d | nettle | 3.4-1ubuntu0.1 | 1 |
| iofog/ | 7260cf861479 | nettle | 3.4-1ubuntu0.1 | 1 |
| istio/ | 268ab879ea51 | nettle | 3.2-1ubuntu0.16.04.2 | 1 |
| istio/ | c09319753454 | nettle | 3.2-1ubuntu0.16.04.2 | 1 |
| istio/ | 0c78be035e98 | nettle | 3.2-1ubuntu0.16.04.2 | 1 |
| jacobalberty/ | c409924e2463 | nettle | 3.2-1ubuntu0.16.04.2 | 1 |
| jmferrer/ | 030f68ec6998 | nettle | 3.2-1ubuntu0.16.04.2 | 1 |
| jupyterhub/ | b6b4a1a34bf0 | nettle | 3.5.1+really3.5.1-2ubuntu0.1 | 1 |
| jupyterhub/ | e3e6f3051df8 | nettle | 3.5.1+really3.5.1-2ubuntu0.1 | 1 |
| kennethreitz/ | 599fe5e50731 | nettle | 3.4-1ubuntu0.1 | 1 |
| kubeoperator/ | be8f0d624640 | nettle | 3.4-1ubuntu0.1 | 1 |
| kudobuilder/ | 69072d979708 | nettle | 3.4-1ubuntu0.1 | 1 |
| library/ | 6ca49afbcb2b | nettle | 3.4-1ubuntu0.1 | 1 |
| library/ | b6dd45cc35b3 | nettle | 3.4-1ubuntu0.1 | 1 |
| lightbend/ | b0c9894ac8dd | nettle | 3.2-1ubuntu0.16.04.2 | 1 |
| linuxserver/ | b801bbcf6386 | nettle | 3.4-1ubuntu0.1 | 1 |
| linuxserver/ | 2fbb21fb4903 | nettle | 3.4-1ubuntu0.1 | 1 |
| litmuschaos/ | 99961210d467 | nettle | 3.4-1ubuntu0.1 | 1 |
| longhornio/ | ede61fe2a472 | nettle | 3.4-1ubuntu0.1 | 1 |
| minio/ | 2a374c124d44 | gnutls nettle | 0:3.6.14-8.el8_3 0:3.4.1-4.el8_3 | 1 |
| muluder/ | 43b597a93da7 | nettle | 3.2-1ubuntu0.16.04.2 | 1 |
| nvidia/ | 964847cc3fd8 | nettle | 3.2-1ubuntu0.16.04.2 | 1 |
| omecproject/ | b4ae7d0d6b74 | nettle | 3.4-1ubuntu0.1 | 1 |
| omecproject/ | b5ddd36ec20c | nettle | 3.4-1ubuntu0.1 | 1 |
| omecproject/ | bcc5f19fd676 | nettle | 3.4-1ubuntu0.1 | 1 |
| omecproject/ | 24a389a0a4fe | nettle | 3.4-1ubuntu0.1 | 1 |
| omecproject/ | 5715e5648aa0 | nettle | 3.2-1ubuntu0.16.04.2 | 1 |
| omecproject/ | 64776cb9edb3 | nettle | 3.2-1ubuntu0.16.04.2 | 1 |
| omecproject/ | d109a8e57e71 | nettle | 3.2-1ubuntu0.16.04.2 | 1 |
| onosproject/ | 44914a8d4b3f | nettle | 3.4-1ubuntu0.1 | 1 |
| opendatacube/ | 5d810e8504b8 | nettle | 3.4-1ubuntu0.1 | 1 |
| opendatacube/ | 91870111837c | nettle | 3.4-1ubuntu0.1 | 1 |
| opendatacube/ | 1b90cdf68831 | nettle | 3.4-1ubuntu0.1 | 1 |