CVE-2021-33560
HighAdvisory
Published 8 Jun 2021In the index since 5 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 7.5
- base score, highest
- EPSS
- 0.023
- 83rd percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 568
- of 17,787 indexed, latest versions
- Container images
- 526
- deployed by those charts
- Fix available
- 3 of 3
- affected packages
Red Hat Security Advisory: libgcrypt security and bug fix update
Carried by container images the latest versions of 568 of 17,787 indexed charts deploy, on 526 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| libgcrypt20deb | 1.6.5-2ubuntu0.2, 1.6.5-2ubuntu0.3, 1.6.5-2ubuntu0.4, 1.6.5-2ubuntu0.5+7 more | 1.6.5-2ubuntu0.6+esm1, 1.8.1-4ubuntu1.3, 1.8.1-4ubuntu1.fips.3, 1.8.5-5ubuntu1.1+1 more | 466 |
| libgcryptrpm | 1.8.2-8.36.1, 1.8.3-2.el8, 1.8.3-4.el8, 1.8.5-4.el8 | 0:1.8.5-6.el8, 1.8.2-8.39.1 | 54 |
| libgcryptapk | 1.9.3-r0 | 1.9.4-r0 | 6 |
- OSV records
- ALPINE-CVE-2021-33560RHSA-2021:4409UBUNTU-CVE-2021-33560SUSE-SU-2021:2157-1
- Also known as
- USN-5080-1, USN-5080-2
Charts affected
568 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| simple-mongodbtyk-helm | 0.1.1 | 1 of 1See more | 4,087 |
| lightstepupdater-lightstep-satellite | 1.2.2 | 1 of 1See more | 15,330 |
| pagesvictor-pages | 1.0.0 | 2 of 3See more | 20,190 |
| kube-monitoring-telegram-botviento-repository | 1.0.0 | 1 of 1See more | 7,885 |
| vulcanvulcan | 0.2.2 | 1 of 2See more | 1,516 |
| kongwallarmVerified publisher | 4.6.3 | 1 of 7See more | 11,405 |
| pageswalter | 1.0.0 | 2 of 3See more | 20,190 |
| wazuh-manager-filebeatwazuh-manager-filebeat | 0.1.0-gamma | 1 of 1See more | 11,119 |
| wbaas-backupwbstack | 0.1.0 | 1 of 1See more | 9,743 |
| myweatherhelmwebapp1 | 1.3.50 | 1 of 8See more | 9,130 |
| myweatherhelm-schedulingwebapp1 | 1.3.92 | 1 of 9See more | 9,130 |
| webhookiewebhookie | 0.1.2 | 1 of 1See more | 14,364 |
| webhookie-allwebhookie | 0.1.2 | 3 of 3See more | 28,605 |
| emissary-ingresswenerme | 8.12.2 | 1 of 2See more | 10,843 |
| longhornwenerme | 1.2.3 | 1 of 2See more | 15,230 |
| miniowenerme | 8.0.10 | 1 of 1See more | 6,915 |
| kibanawiremindVerified publisher | 8.5.23 | 1 of 2See more | 6,285 |
| clickhousezloi-space | 1.2.0 | 2 of 3See more | 9,207 |
Container images carrying it
526 by charts deploying them
A fixed version is listed for 3 of the 3 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| istio/ | 2232f365aed6 | libgcrypt20 | 1.8.1-4ubuntu1.3 | 1 |
| istio/ | 268ab879ea51 | libgcrypt20 | 1.6.5-2ubuntu0.6+esm1 | 1 |
| istio/ | 655eefa11c84 | libgcrypt20 | 1.8.1-4ubuntu1.3 | 1 |
| istio/ | 6cfce8a071b9 | libgcrypt20 | 1.8.5-5ubuntu1.fips.1.1 | 1 |
| istio/ | 294ca55bd1cc | libgcrypt20 | 1.8.1-4ubuntu1.3 | 1 |
| istio/ | c09319753454 | libgcrypt20 | 1.6.5-2ubuntu0.6+esm1 | 1 |
| istio/ | e7e110a421c2 | libgcrypt20 | 1.8.1-4ubuntu1.3 | 1 |
| istio/ | 0c78be035e98 | libgcrypt20 | 1.6.5-2ubuntu0.6+esm1 | 1 |
| istio/ | 87a9db561d2e | libgcrypt20 | 1.8.1-4ubuntu1.3 | 1 |
| istio/ | 88c6c693e67a | libgcrypt20 | 1.8.1-4ubuntu1.3 | 1 |
| istio/ | df69c1a7af7c | libgcrypt20 | 1.8.5-5ubuntu1.fips.1.1 | 1 |
| jacobalberty/ | 4a3616625dda | libgcrypt20 | 1.8.1-4ubuntu1.fips.3 | 1 |
| jacobalberty/ | b3edc809a3ff | libgcrypt20 | 1.8.1-4ubuntu1.fips.3 | 1 |
| jacobalberty/ | c409924e2463 | libgcrypt20 | 1.6.5-2ubuntu0.6+esm1 | 1 |
| jakowenko/ | b858bac9e32a | libgcrypt20 | 1.8.5-5ubuntu1.fips.1.1 | 1 |
| jedi132000/ | dc2a81e92f23 | libgcrypt20 | 1.8.5-5ubuntu1.fips.1.1 | 1 |
| jhipster/ | 7184525acd4d | libgcrypt20 | 1.8.5-5ubuntu1.fips.1.1 | 1 |
| jingking/ | 43e74ab234e1 | libgcrypt20 | 1.8.5-5ubuntu1.fips.1.1 | 1 |
| jmferrer/ | 030f68ec6998 | libgcrypt20 | 1.6.5-2ubuntu0.6+esm1 | 1 |
| jupyterhub/ | b6b4a1a34bf0 | libgcrypt20 | 1.8.5-5ubuntu1.1 | 1 |
| jupyterhub/ | e4770285aaf7 | libgcrypt20 | 1.8.5-5ubuntu1.fips.1.1 | 1 |
| jupyterhub/ | e3e6f3051df8 | libgcrypt20 | 1.8.5-5ubuntu1.1 | 1 |
| kennethreitz/ | 599fe5e50731 | libgcrypt20 | 1.8.1-4ubuntu1.3 | 1 |
| kfirfer/ | 2efb4a5d74a3 | libgcrypt20 | 1.8.5-5ubuntu1.fips.1.1 | 1 |
| krontechnology/ | 7feef7d2ab42 | libgcrypt20 | 1.8.5-5ubuntu1.fips.1.1 | 1 |
| kubeoperator/ | be8f0d624640 | libgcrypt20 | 1.8.1-4ubuntu1.3 | 1 |
| kubesphere/ | 6d93129beb32 | libgcrypt20 | 1.6.5-2ubuntu0.6+esm1 | 1 |
| kudobuilder/ | 69072d979708 | libgcrypt20 | 1.8.1-4ubuntu1.3 | 1 |
| kusionstack/ | 65e3c32b64d7 | libgcrypt20 | 1.8.5-5ubuntu1.fips.1.1 | 1 |
| lavandadelpatio/ | ccfc0cd77803 | libgcrypt | 1.9.4-r0 | 1 |
| library/ | b095ff3248c6 | libgcrypt20 | 1.8.5-5ubuntu1.1 | 1 |
| library/ | 2cc40b15dff8 | libgcrypt20 | 1.8.5-5ubuntu1.fips.1.1 | 1 |
| library/ | 310b9fc03b06 | libgcrypt20 | 1.8.5-5ubuntu1.fips.1.1 | 1 |
| library/ | 332c6d416808 | libgcrypt20 | 1.8.5-5ubuntu1.fips.1.1 | 1 |
| library/ | 88c2ec10c7f2 | libgcrypt20 | 1.8.5-5ubuntu1.fips.1.1 | 1 |
| library/ | fdc73b3249c1 | libgcrypt20 | 1.8.5-5ubuntu1.fips.1.1 | 1 |
| library/ | 0172f1c538e7 | libgcrypt20 | 1.8.5-5ubuntu1.fips.1.1 | 1 |
| library/ | 04c0fc150f3a | libgcrypt20 | 1.8.5-5ubuntu1.fips.1.1 | 1 |
| library/ | c5781ba340ef | libgcrypt20 | 1.8.5-5ubuntu1.fips.1.1 | 1 |
| library/ | e2e2031c15be | libgcrypt20 | 1.8.5-5ubuntu1.fips.1.1 | 1 |
| library/ | 17a4f64e9cf5 | libgcrypt20 | 1.8.5-5ubuntu1.fips.1.1 | 1 |
| library/ | 07e06f2e7ae9 | libgcrypt20 | 1.8.5-5ubuntu1.fips.1.1 | 1 |
| library/ | 22edfe1c7834 | libgcrypt20 | 1.8.5-5ubuntu1.fips.1.1 | 1 |
| library/ | 490f01279be1 | libgcrypt20 | 1.8.5-5ubuntu1.fips.1.1 | 1 |
| library/ | 8a16204dc96c | libgcrypt20 | 1.8.5-5ubuntu1.fips.1.1 | 1 |
| library/ | 9a48ac9f196f | libgcrypt20 | 1.8.5-5ubuntu1.fips.1.1 | 1 |
| library/ | e22328f4d714 | libgcrypt20 | 1.8.5-5ubuntu1.fips.1.1 | 1 |
| library/ | 05678ae4e5e1 | libgcrypt20 | 1.8.5-5ubuntu1.fips.1.1 | 1 |
| library/ | 146c1fd999a6 | libgcrypt20 | 1.6.5-2ubuntu0.6+esm1 | 1 |
| library/ | 3b6c281e1c08 | libgcrypt20 | 1.8.5-5ubuntu1.fips.1.1 | 1 |