StackRadar

CVE-2021-3156

HighKEV

Advisory

Published 26 Jan 2021In the index since 6 Sept 2026
Severity
High
worst across findings
CVSS
7.8
base score, highest
EPSS
1.000
100th percentile
CISA KEV
Listed
since 6 Apr 2022
Charts affected
28
of 17,781 indexed, latest versions
Container images
32
deployed by those charts
Fix available
2 of 2
affected packages

sudo - security update

Carried by container images the latest versions of 28 of 17,781 indexed charts deploy, on 32 images.

Affected packageAffected versionsFixed inImages
sudodeb1.8.9p5-1ubuntu1, 1.8.9p5-1ubuntu1.4, 1.8.16-0ubuntu1.5, 1.8.16-0ubuntu1.7+7 more1.8.9p5-1ubuntu1.5+esm6, 1.8.16-0ubuntu1.10, 1.8.19p1-2.1+deb9u3, 1.8.21p2-3ubuntu1.4+2 more31
sudoapk1.8.31-r01.8.31-r11
OSV records
ALPINE-CVE-2021-3156UBUNTU-CVE-2021-3156DLA-2534-1DSA-4839-1
Also known as
USN-4705-1, USN-4705-2

Charts affected

28 by stars
ChartLatestAffected imagesRadar Score
istiocloudposse1.1.02 of 8See more

istio cloudposse 1.1.0

2 of the 8 container images this version deploys carry CVE-2021-3156.

Container imageDigestPackageFixed in
gcr.io/istio-release/pilot:release-1.0-latest-daily5ea7b7f3632a
sudo@1.8.16-0ubuntu1.7
1.8.16-0ubuntu1.10
gcr.io/istio-release/proxyv2:release-1.0-latest-daily8f9ff98fdbef
sudo@1.8.16-0ubuntu1.7
1.8.16-0ubuntu1.10

Open the chart page →

23,964
fadicetic0.3.11 of 25See more

fadi cetic 0.3.1

1 of the 25 container images this version deploys carry CVE-2021-3156.

Container imageDigestPackageFixed in
jupyterhub/k8s-singleuser-sample:0.11.1e3e6f3051df8
sudo@1.8.31-1ubuntu1.1
1.8.31-1ubuntu1.2

Open the chart page →

52,919
oesopsmxVerified publisher4.0.321 of 25See more

oes opsmx 4.0.32

1 of the 25 container images this version deploys carry CVE-2021-3156.

Container imageDigestPackageFixed in
quay.io/opsmxpublic/bitnami-redis:5.0.7-debian-10-r09a8d95ca0bd9
sudo@1.8.27-1+deb10u1
1.8.27-1+deb10u3

Open the chart page →

107,811
dltbrokerassist-iot-distributed-broker0.2.02 of 9See more

dltbroker assist-iot-distributed-broker 0.2.0

2 of the 9 container images this version deploys carry CVE-2021-3156.

Container imageDigestPackageFixed in
hyperledger/fabric-ca-tools:latest4ce6f43ded2e
sudo@1.8.16-0ubuntu1.5
1.8.16-0ubuntu1.10
hyperledger/fabric-couchdb:0.4.15f6c724592abf
sudo@1.8.16-0ubuntu1.5
1.8.16-0ubuntu1.10

Open the chart page →

77,706
dltloggingassist-iot-logging-auditing0.2.02 of 9See more

dltlogging assist-iot-logging-auditing 0.2.0

2 of the 9 container images this version deploys carry CVE-2021-3156.

Container imageDigestPackageFixed in
hyperledger/fabric-ca-tools:latest4ce6f43ded2e
sudo@1.8.16-0ubuntu1.5
1.8.16-0ubuntu1.10
hyperledger/fabric-couchdb:0.4.15f6c724592abf
sudo@1.8.16-0ubuntu1.5
1.8.16-0ubuntu1.10

Open the chart page →

77,687
pgadmin4folio-org1.2.301 of 1See more

pgadmin4 folio-org 1.2.30

1 of the 1 container images this version deploys carry CVE-2021-3156.

Container imageDigestPackageFixed in
dpage/pgadmin4:4.22b1f00b8163cf
sudo@1.8.31-r0
1.8.31-r1

Open the chart page →

2,034
wavefront-adapter-for-istiowavefront0.1.41 of 2See more

wavefront-adapter-for-istio wavefront 0.1.4

1 of the 2 container images this version deploys carry CVE-2021-3156.

Container imageDigestPackageFixed in
wavefronthq/proxy:9.2d1064d28f6eb
sudo@1.8.21p2-3ubuntu1.2
1.8.21p2-3ubuntu1.4

Open the chart page →

15,970
kafka-devwikimedia0.2.01 of 1See more

kafka-dev wikimedia 0.2.0

1 of the 1 container images this version deploys carry CVE-2021-3156.

Container imageDigestPackageFixed in
wurstmeister/zookeeper:latest7a7fd44a7210
sudo@1.8.9p5-1ubuntu1
1.8.9p5-1ubuntu1.5+esm6

Open the chart page →

41,427
dltkvassist-iot-data-integrity-verification0.2.02 of 9See more

dltkv assist-iot-data-integrity-verification 0.2.0

2 of the 9 container images this version deploys carry CVE-2021-3156.

Container imageDigestPackageFixed in
hyperledger/fabric-ca-tools:latest4ce6f43ded2e
sudo@1.8.16-0ubuntu1.5
1.8.16-0ubuntu1.10
hyperledger/fabric-couchdb:0.4.15f6c724592abf
sudo@1.8.16-0ubuntu1.5
1.8.16-0ubuntu1.10

Open the chart page →

77,706
dltflassist-iot-dlt-based-fl0.2.02 of 9See more

dltfl assist-iot-dlt-based-fl 0.2.0

2 of the 9 container images this version deploys carry CVE-2021-3156.

Container imageDigestPackageFixed in
hyperledger/fabric-ca-tools:latest4ce6f43ded2e
sudo@1.8.16-0ubuntu1.5
1.8.16-0ubuntu1.10
hyperledger/fabric-couchdb:0.4.15f6c724592abf
sudo@1.8.16-0ubuntu1.5
1.8.16-0ubuntu1.10

Open the chart page →

77,706
puppet-catalog-diff-viewercamptocamp30.5.11 of 1See more

puppet-catalog-diff-viewer camptocamp3 0.5.1

1 of the 1 container images this version deploys carry CVE-2021-3156.

Container imageDigestPackageFixed in
camptocamp/puppet-catalog-diff-viewer:0.6.078b77c838569
sudo@1.8.27-1+deb10u2
1.8.27-1+deb10u3

Open the chart page →

1,270
opensipschetan-opensips0.1.01 of 1See more

opensips chetan-opensips 0.1.0

1 of the 1 container images this version deploys carry CVE-2021-3156.

Container imageDigestPackageFixed in
chetangautamm/repo:Opensips_Buildb4b94155ff5a
sudo@1.8.9p5-1ubuntu1.4
1.8.9p5-1ubuntu1.5+esm6

Open the chart page →

30,140
daskcloudnativeapp2.2.11 of 2See more

dask cloudnativeapp 2.2.1

1 of the 2 container images this version deploys carry CVE-2021-3156.

Container imageDigestPackageFixed in
daskdev/dask-notebook:1.1.0052630f5ca04
sudo@1.8.21p2-3ubuntu1
1.8.21p2-3ubuntu1.4

Open the chart page →

29,901
guestbookcloudnativeapp0.2.01 of 3See more

guestbook cloudnativeapp 0.2.0

1 of the 3 container images this version deploys carry CVE-2021-3156.

Container imageDigestPackageFixed in
resouer/redis-slave:v2e2f198b49ba7
sudo@1.8.9p5-1ubuntu1
1.8.9p5-1ubuntu1.5+esm6

Open the chart page →

36,839
hlf-couchdbcloudnativeapp1.0.61 of 1See more

hlf-couchdb cloudnativeapp 1.0.6

1 of the 1 container images this version deploys carry CVE-2021-3156.

Container imageDigestPackageFixed in
hyperledger/fabric-couchdb:0.4.10c65891b6c237
sudo@1.8.16-0ubuntu1.5
1.8.16-0ubuntu1.10

Open the chart page →

33,963
rundeckcloudnativeapp0.1.01 of 2See more

rundeck cloudnativeapp 0.1.0

1 of the 2 container images this version deploys carry CVE-2021-3156.

Container imageDigestPackageFixed in
rundeck/rundeck:3.0.16b13e8059ad72
sudo@1.8.16-0ubuntu1.5
1.8.16-0ubuntu1.10

Open the chart page →

23,665
webpagetest-agentcloudnativeapp0.2.01 of 1See more

webpagetest-agent cloudnativeapp 0.2.0

1 of the 1 container images this version deploys carry CVE-2021-3156.

Container imageDigestPackageFixed in
timothyclarke/wptagent:2018-01-2322c41e5ca7e2
sudo@1.8.16-0ubuntu1.5
1.8.16-0ubuntu1.10

Open the chart page →

77,758
setup-jobcloud-native-toolkit0.3.01 of 2See more

setup-job cloud-native-toolkit 0.3.0

1 of the 2 container images this version deploys carry CVE-2021-3156.

Container imageDigestPackageFixed in
quay.io/ibmgaragecloud/nodejs:latest01c3b7acb301
sudo@1.8.19p1-2.1+deb9u2
1.8.19p1-2.1+deb9u3

Open the chart page →

2,792
galaxy-stablecloudve2.0.02 of 5See more

galaxy-stable cloudve 2.0.0

2 of the 5 container images this version deploys carry CVE-2021-3156.

Container imageDigestPackageFixed in
galaxy/galaxy-init:v18.010267bad550e6
sudo@1.8.9p5-1ubuntu1.4
1.8.9p5-1ubuntu1.5+esm6
galaxy/galaxy-stable:v18.018e577a626dfd
sudo@1.8.9p5-1ubuntu1.4
1.8.9p5-1ubuntu1.5+esm6

Open the chart page →

70,895
eg-edge-stackdatawire0.0.11 of 7See more

eg-edge-stack datawire 0.0.1

1 of the 7 container images this version deploys carry CVE-2021-3156.

Container imageDigestPackageFixed in
istio/kubectl:1.5.10dbb7726d1bf0
sudo@1.8.21p2-3ubuntu1.2
1.8.21p2-3ubuntu1.4

Open the chart page →

10,666
rundeckdwardu-helm-charts0.3.41 of 2See more

rundeck dwardu-helm-charts 0.3.4

1 of the 2 container images this version deploys carry CVE-2021-3156.

Container imageDigestPackageFixed in
rundeck/rundeck:3.2.74d64fe56f767
sudo@1.8.16-0ubuntu1.9
1.8.16-0ubuntu1.10

Open the chart page →

19,802
knativegitlabVerified publisher0.10.03 of 10See more

knative gitlab 0.10.0

3 of the 10 container images this version deploys carry CVE-2021-3156.

Container imageDigestPackageFixed in
istio/node-agent-k8s:1.2.9268ab879ea51
sudo@1.8.16-0ubuntu1.7
1.8.16-0ubuntu1.10
istio/pilot:1.2.9c09319753454
sudo@1.8.16-0ubuntu1.7
1.8.16-0ubuntu1.10
istio/proxyv2:1.2.90c78be035e98
sudo@1.8.16-0ubuntu1.7
1.8.16-0ubuntu1.10

Open the chart page →

36,102
gitlabkubesphereVerified publisher4.2.35 of 17See more

gitlab kubesphere 4.2.3

5 of the 17 container images this version deploys carry CVE-2021-3156.

Container imageDigestPackageFixed in
mirrorgitlabcontainers/gitaly:v13.2.283599461ef8b
sudo@1.8.19p1-2.1+deb9u2
1.8.19p1-2.1+deb9u3
mirrorgitlabcontainers/gitlab-shell:v13.3.09f3654f1eafc
sudo@1.8.19p1-2.1+deb9u2
1.8.19p1-2.1+deb9u3
mirrorgitlabcontainers/gitlab-sidekiq-ce:v13.2.294d1431683fa
sudo@1.8.19p1-2.1+deb9u2
1.8.19p1-2.1+deb9u3
mirrorgitlabcontainers/gitlab-task-runner-ce:v13.2.29efd73993c34
sudo@1.8.19p1-2.1+deb9u2
1.8.19p1-2.1+deb9u3
mirrorgitlabcontainers/gitlab-webservice-ce:v13.2.230393f990f5c
sudo@1.8.19p1-2.1+deb9u2
1.8.19p1-2.1+deb9u3

Open the chart page →

38,133
zookeeper-helm-chartnotesprojectchart0.1.01 of 1See more

zookeeper-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2021-3156.

Container imageDigestPackageFixed in
wurstmeister/zookeeper:latest7a7fd44a7210
sudo@1.8.9p5-1ubuntu1
1.8.9p5-1ubuntu1.5+esm6

Open the chart page →

41,427
sebaopencord1.0.01 of 17See more

seba opencord 1.0.0

1 of the 17 container images this version deploys carry CVE-2021-3156.

Container imageDigestPackageFixed in
voltha/voltha-envoy:1.6.059ab2a00f712
sudo@1.8.9p5-1ubuntu1.4
1.8.9p5-1ubuntu1.5+esm6

Open the chart page →

93,855
issuegenopsmxVerified publisher1.0.21 of 1See more

issuegen opsmx 1.0.2

1 of the 1 container images this version deploys carry CVE-2021-3156.

Container imageDigestPackageFixed in
opsmx11/issuegen:v2.1.05c50ca123d88
sudo@1.8.9p5-1ubuntu1.4
1.8.9p5-1ubuntu1.5+esm6

Open the chart page →

26,339
pi-holet3n1.0.01 of 1See more

pi-hole t3n 1.0.0

1 of the 1 container images this version deploys carry CVE-2021-3156.

Container imageDigestPackageFixed in
pihole/pihole:v4.48c172c4cf344
sudo@1.8.19p1-2.1+deb9u2
1.8.19p1-2.1+deb9u3

Open the chart page →

1,373
emissary-ingresswenerme8.12.21 of 2See more

emissary-ingress wenerme 8.12.2

1 of the 2 container images this version deploys carry CVE-2021-3156.

Container imageDigestPackageFixed in
istio/kubectl:1.5.10dbb7726d1bf0
sudo@1.8.21p2-3ubuntu1.2
1.8.21p2-3ubuntu1.4

Open the chart page →

10,843

Container images carrying it

32 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
hyperledger/fabric-ca-tools:latest4ce6f43ded2e
sudo@1.8.16-0ubuntu1.5
1.8.16-0ubuntu1.10
4
hyperledger/fabric-couchdb:0.4.15f6c724592abf
sudo@1.8.16-0ubuntu1.5
1.8.16-0ubuntu1.10
4
istio/kubectl:1.5.10dbb7726d1bf0
sudo@1.8.21p2-3ubuntu1.2
1.8.21p2-3ubuntu1.4
2
wurstmeister/zookeeper:latest7a7fd44a7210
sudo@1.8.9p5-1ubuntu1
1.8.9p5-1ubuntu1.5+esm6
2
camptocamp/puppet-catalog-diff-viewer:0.6.078b77c838569
sudo@1.8.27-1+deb10u2
1.8.27-1+deb10u3
1
chetangautamm/repo:Opensips_Buildb4b94155ff5a
sudo@1.8.9p5-1ubuntu1.4
1.8.9p5-1ubuntu1.5+esm6
1
daskdev/dask-notebook:1.1.0052630f5ca04
sudo@1.8.21p2-3ubuntu1
1.8.21p2-3ubuntu1.4
1
dpage/pgadmin4:4.22b1f00b8163cf
sudo@1.8.31-r0
1.8.31-r1
1
galaxy/galaxy-init:v18.010267bad550e6
sudo@1.8.9p5-1ubuntu1.4
1.8.9p5-1ubuntu1.5+esm6
1
galaxy/galaxy-stable:v18.018e577a626dfd
sudo@1.8.9p5-1ubuntu1.4
1.8.9p5-1ubuntu1.5+esm6
1
hyperledger/fabric-couchdb:0.4.10c65891b6c237
sudo@1.8.16-0ubuntu1.5
1.8.16-0ubuntu1.10
1
istio/node-agent-k8s:1.2.9268ab879ea51
sudo@1.8.16-0ubuntu1.7
1.8.16-0ubuntu1.10
1
istio/pilot:1.2.9c09319753454
sudo@1.8.16-0ubuntu1.7
1.8.16-0ubuntu1.10
1
istio/proxyv2:1.2.90c78be035e98
sudo@1.8.16-0ubuntu1.7
1.8.16-0ubuntu1.10
1
jupyterhub/k8s-singleuser-sample:0.11.1e3e6f3051df8
sudo@1.8.31-1ubuntu1.1
1.8.31-1ubuntu1.2
1
mirrorgitlabcontainers/gitaly:v13.2.283599461ef8b
sudo@1.8.19p1-2.1+deb9u2
1.8.19p1-2.1+deb9u3
1
mirrorgitlabcontainers/gitlab-shell:v13.3.09f3654f1eafc
sudo@1.8.19p1-2.1+deb9u2
1.8.19p1-2.1+deb9u3
1
mirrorgitlabcontainers/gitlab-sidekiq-ce:v13.2.294d1431683fa
sudo@1.8.19p1-2.1+deb9u2
1.8.19p1-2.1+deb9u3
1
mirrorgitlabcontainers/gitlab-task-runner-ce:v13.2.29efd73993c34
sudo@1.8.19p1-2.1+deb9u2
1.8.19p1-2.1+deb9u3
1
mirrorgitlabcontainers/gitlab-webservice-ce:v13.2.230393f990f5c
sudo@1.8.19p1-2.1+deb9u2
1.8.19p1-2.1+deb9u3
1
opsmx11/issuegen:v2.1.05c50ca123d88
sudo@1.8.9p5-1ubuntu1.4
1.8.9p5-1ubuntu1.5+esm6
1
pihole/pihole:v4.48c172c4cf344
sudo@1.8.19p1-2.1+deb9u2
1.8.19p1-2.1+deb9u3
1
resouer/redis-slave:v2e2f198b49ba7
sudo@1.8.9p5-1ubuntu1
1.8.9p5-1ubuntu1.5+esm6
1
rundeck/rundeck:3.2.74d64fe56f767
sudo@1.8.16-0ubuntu1.9
1.8.16-0ubuntu1.10
1
rundeck/rundeck:3.0.16b13e8059ad72
sudo@1.8.16-0ubuntu1.5
1.8.16-0ubuntu1.10
1
timothyclarke/wptagent:2018-01-2322c41e5ca7e2
sudo@1.8.16-0ubuntu1.5
1.8.16-0ubuntu1.10
1
voltha/voltha-envoy:1.6.059ab2a00f712
sudo@1.8.9p5-1ubuntu1.4
1.8.9p5-1ubuntu1.5+esm6
1
wavefronthq/proxy:9.2d1064d28f6eb
sudo@1.8.21p2-3ubuntu1.2
1.8.21p2-3ubuntu1.4
1
gcr.io/istio-release/pilot:release-1.0-latest-daily5ea7b7f3632a
sudo@1.8.16-0ubuntu1.7
1.8.16-0ubuntu1.10
1
gcr.io/istio-release/proxyv2:release-1.0-latest-daily8f9ff98fdbef
sudo@1.8.16-0ubuntu1.7
1.8.16-0ubuntu1.10
1
quay.io/ibmgaragecloud/nodejs:latest01c3b7acb301
sudo@1.8.19p1-2.1+deb9u2
1.8.19p1-2.1+deb9u3
1
quay.io/opsmxpublic/bitnami-redis:5.0.7-debian-10-r09a8d95ca0bd9
sudo@1.8.27-1+deb10u1
1.8.27-1+deb10u3
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.