CVE-2021-20305
HighAdvisory
Published 5 Apr 2021In the index since 6 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 8.1
- base score, highest
- EPSS
- 0.017
- 76th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 232
- of 17,781 indexed, latest versions
- Container images
- 145
- deployed by those charts
- Fix available
- 5 of 5
- affected packages
Red Hat Security Advisory: gnutls and nettle security update
Carried by container images the latest versions of 232 of 17,781 indexed charts deploy, on 145 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| nettledeb | 3.2-1ubuntu0.16.04.1, 3.4-1, 3.5.1+really3.5.1-2 | 3.2-1ubuntu0.16.04.2, 3.4-1ubuntu0.1, 3.5.1+really3.5.1-2ubuntu0.1 | 114 |
| gnutlsrpm | 3.6.5-2.el8, 3.6.8-8.el8, 3.6.8-10.el8_2, 3.6.8-11.el8_2+3 more | 0:3.6.14-8.el8_3 | 22 |
| nettlerpm | 3.4.1-1.el8, 3.4.1-2.el8, 3.4.1-2.el8_2 | 0:3.4.1-4.el8_3 | 22 |
| nettleapk | 3.7-r0 | 3.7.2-r0 | 1 |
| libnettlerpm | 3.4.1-4.12.1 | 3.4.1-4.15.1 | 8 |
- OSV records
- ALPINE-CVE-2021-20305RHSA-2021:1206UBUNTU-CVE-2021-20305SUSE-SU-2021:1412-1
- Also known as
- RHSA-2021:1245, RHSA-2021:1246, USN-4906-1
Charts affected
232 by stars
Container images carrying it
145 by charts deploying them
A fixed version is listed for 5 of the 5 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| openwhisk/ | c80dba0de3aa | nettle | 3.4-1ubuntu0.1 | 1 |
| plexinc/ | b598abb134ad | nettle | 3.2-1ubuntu0.16.04.2 | 1 |
| pnnlmiscscripts/ | 155131891741 | gnutls nettle | 0:3.6.14-8.el8_3 0:3.4.1-4.el8_3 | 1 |
| pozetroninc/ | 53ae64f29da8 | nettle | 3.4-1ubuntu0.1 | 1 |
| rancher/ | e66f32d19eb9 | nettle | 3.2-1ubuntu0.16.04.2 | 1 |
| rundeck/ | 4d64fe56f767 | nettle | 3.2-1ubuntu0.16.04.2 | 1 |
| rundeck/ | b13e8059ad72 | nettle | 3.2-1ubuntu0.16.04.2 | 1 |
| scrapinghub/ | a5f89bc84606 | nettle | 3.4-1ubuntu0.1 | 1 |
| seldonio/ | 1d0da98a2d76 | nettle | 3.2-1ubuntu0.16.04.2 | 1 |
| sismics/ | f4b0ef019cf1 | nettle | 3.4-1ubuntu0.1 | 1 |
| slagattollas/ | 68e7f56393fc | nettle | 3.4-1ubuntu0.1 | 1 |
| stashapp/ | 24dbd7607174 | nettle | 3.5.1+really3.5.1-2ubuntu0.1 | 1 |
| tensorflow/ | 1e3172090703 | nettle | 3.2-1ubuntu0.16.04.2 | 1 |
| timothyclarke/ | 22c41e5ca7e2 | nettle | 3.2-1ubuntu0.16.04.2 | 1 |
| tpdock/ | 3da600c95a49 | nettle | 3.2-1ubuntu0.16.04.2 | 1 |
| vexorian/ | 7e2b99844a5c | nettle | 3.4-1ubuntu0.1 | 1 |
| voltha/ | e038acb950d3 | nettle | 3.4-1ubuntu0.1 | 1 |
| voltha/ | 655c3048a602 | nettle | 3.2-1ubuntu0.16.04.2 | 1 |
| wavefronthq/ | d1064d28f6eb | nettle | 3.4-1ubuntu0.1 | 1 |
| wekanteam/ | 68a51f0327df | nettle | 3.5.1+really3.5.1-2ubuntu0.1 | 1 |
| wener/ | 9a42bae466d4 | nettle | 3.7.2-r0 | 1 |
| woojoong/ | ec230db19652 | nettle | 3.4-1ubuntu0.1 | 1 |
| yandex/ | ab1738a64b70 | nettle | 3.4-1ubuntu0.1 | 1 |
| yandex/ | ccf9c2b5e3f2 | nettle | 3.4-1ubuntu0.1 | 1 |
| yandex/ | d210dc69321e | nettle | 3.4-1ubuntu0.1 | 1 |
| gcr.io/ | 809338a69bd5 | nettle | 3.4-1ubuntu0.1 | 1 |
| gcr.io/ | 10f4dbc8eeeb | nettle | 3.2-1ubuntu0.16.04.2 | 1 |
| gcr.io/ | cb5c1bddd1b5 | nettle | 3.2-1ubuntu0.16.04.2 | 1 |
| gcr.io/ | 5ea7b7f3632a | nettle | 3.2-1ubuntu0.16.04.2 | 1 |
| gcr.io/ | 8f9ff98fdbef | nettle | 3.2-1ubuntu0.16.04.2 | 1 |
| ghcr.io/ | 61daa1bba5cb | libnettle | 3.4.1-4.15.1 | 1 |
| ghcr.io/ | 760eee87f839 | libnettle | 3.4.1-4.15.1 | 1 |
| ghcr.io/ | 6a1432b0d503 | libnettle | 3.4.1-4.15.1 | 1 |
| ghcr.io/ | f059af4de8ed | libnettle | 3.4.1-4.15.1 | 1 |
| ghcr.io/ | c7c70b527255 | libnettle | 3.4.1-4.15.1 | 1 |
| ghcr.io/ | e24a9e0a21b6 | libnettle | 3.4.1-4.15.1 | 1 |
| ghcr.io/ | 8caf5289fe73 | gnutls nettle | 0:3.6.14-8.el8_3 0:3.4.1-4.el8_3 | 1 |
| quay.io/ | 7a4b9fedc724 | gnutls nettle | 0:3.6.14-8.el8_3 0:3.4.1-4.el8_3 | 1 |
| quay.io/ | c2851757eca4 | gnutls nettle | 0:3.6.14-8.el8_3 0:3.4.1-4.el8_3 | 1 |
| quay.io/ | a1c3843b03bc | nettle | 3.2-1ubuntu0.16.04.2 | 1 |
| quay.io/ | 107a7c73af59 | gnutls nettle | 0:3.6.14-8.el8_3 0:3.4.1-4.el8_3 | 1 |
| quay.io/ | 6722d5041b47 | gnutls nettle | 0:3.6.14-8.el8_3 0:3.4.1-4.el8_3 | 1 |
| quay.io/ | 0bbe8b451fa3 | gnutls nettle | 0:3.6.14-8.el8_3 0:3.4.1-4.el8_3 | 1 |
| quay.io/ | c6a934439421 | nettle | 3.2-1ubuntu0.16.04.2 | 1 |
| registry.gitlab.com/ | f6385712935f | nettle | 3.5.1+really3.5.1-2ubuntu0.1 | 1 |