CVE-2021-21285
MediumAdvisory
Published 31 Jan 2024In the index since 6 Sept 2026
- Severity
- Medium
- worst across findings
- CVSS
- 6.5
- base score, highest
- EPSS
- 0.033
- 88th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 16
- of 17,781 indexed, latest versions
- Container images
- 17
- deployed by those charts
- Fix available
- 1 of 1
- affected package
moby docker daemon crash during image pull of malicious image
Carried by container images the latest versions of 16 of 17,781 indexed charts deploy, on 17 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| github.com/ | v0.7.3-0.20190826074503-38ab9da00309, v1.4.2-0.20170731201646-1009e6a40b29, v1.13.1, v17.12.0-ce-rc1.0.20200618181300-9dc6525e6118+incompatible | 19.3.15 | 17 |
- OSV records
- GHSA-6fj5-m822-rqx8
Charts affected
16 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| helm-exportersstarcher | 0.5.0 | 1 of 1See more | 4,154 |
| openshift-consoleav1o-chartsVerified publisher | 0.3.6 | 1 of 1See more | 9,052 |
| dapr-dashboarddapr | 0.15.0 | 1 of 1See more | 1,301 |
| jetic-operatorjetic-operatorVerified publisher | 2.0.2 | 1 of 1See more | 9,318 |
| traefik-forward-authmesosphere | 0.3.10 | 1 of 2See more | 5,308 |
| amorphieamorphie | 0.1.2 | 1 of 18See more | 28,131 |
| docker-machine-operatorappscodeVerified publisher | 2024.7.9 | 1 of 1See more | 2,220 |
| helm-controllerazureorkestra | 0.1.1 | 2 of 2See more | 7,705 |
| ambassador-operatordatawire | 0.3.0 | 1 of 1See more | 7,486 |
| azure-pipelines-agentfermosit | 0.0.1 | 1 of 1See more | 14,673 |
| kioskloftVerified publisher | 0.2.11 | 1 of 1See more | 3,086 |
| kommandermesosphere-stable | 0.39.2 | 1 of 29See more | 68,284 |
| opsportalmesosphere-stable | 0.9.5 | 1 of 3See more | 7,027 |
| istio-operatormetakube | 1.12.0 | 1 of 1See more | 8,902 |
| gitlab-runner-operatorpnnl-miscscripts | 0.1.6 | 1 of 1See more | 11,151 |
| stackrox-chartredhat-cop | 0.0.10 | 1 of 1See more | 29,227 |
Container images carrying it
17 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| apache/ | 3bb13d14f64a | github.com/ | 19.3.15 | 1 |
| daprio/ | 4be696707bd1 | github.com/ | 19.3.15 | 1 |
| daprio/ | 7ba5d51e5b97 | github.com/ | 19.3.15 | 1 |
| datawire/ | f95ae710d75c | github.com/ | 19.3.15 | 1 |
| fluxcd/ | 92b891e495d8 | github.com/ | 19.3.15 | 1 |
| fluxcd/ | 31a8c79a6803 | github.com/ | 19.3.15 | 1 |
| istio/ | 6cfce8a071b9 | github.com/ | 19.3.15 | 1 |
| jmferrer/ | 030f68ec6998 | github.com/ | 19.3.15 | 1 |
| kiosksh/ | 501725ba2025 | github.com/ | 19.3.15 | 1 |
| mesosphere/ | 5efa21defcbc | github.com/ | 19.3.15 | 1 |
| mesosphere/ | 9f863160127b | github.com/ | 19.3.15 | 1 |
| mesosphere/ | c10011f866f2 | github.com/ | 19.3.15 | 1 |
| pnnlmiscscripts/ | 155131891741 | github.com/ | 19.3.15 | 1 |
| sstarcher/ | 11769d01ba35 | github.com/ | 19.3.15 | 1 |
| ghcr.io/ | 81f6007abb4e | github.com/ | 19.3.15 | 1 |
| quay.io/ | 0bbe8b451fa3 | github.com/ | 19.3.15 | 1 |
| quay.io/ | 6ba82beff18e | github.com/ | 19.3.15 | 1 |