CVE-2021-3737
HighAdvisory
Published 31 Aug 2021In the index since 6 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 7.5
- base score, highest
- EPSS
- 0.116
- 96th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 112
- of 17,781 indexed, latest versions
- Container images
- 91
- deployed by those charts
- Fix available
- 4 of 4
- affected packages
The matching OSV records carry no description.
Carried by container images the latest versions of 112 of 17,781 indexed charts deploy, on 91 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| python3.6deb | 3.6.6-1~18.04, 3.6.7-1~18.04, 3.6.9-1~18.04, 3.6.9-1~18.04ubuntu1+2 more | 3.6.9-1~18.04ubuntu1.6 | 31 |
| python3.8deb | 3.8.5-1~20.04, 3.8.5-1~20.04.2, 3.8.5-1~20.04.3, 3.8.10-0ubuntu1~20.04+1 more | 3.8.10-0ubuntu1~20.04.2 | 28 |
| python3.5deb | 3.5.2-2ubuntu0~16.04.1, 3.5.2-2ubuntu0~16.04.4, 3.5.2-2ubuntu0~16.04.5, 3.5.2-2ubuntu0~16.04.9 | 3.5.2-2ubuntu0~16.04.13+esm1 | 25 |
| python3.4deb | 3.4.0-2ubuntu1, 3.4.3-1ubuntu1~14.04.5, 3.4.3-1ubuntu1~14.04.6, 3.4.3-1ubuntu1~14.04.7 | 3.4.3-1ubuntu1~14.04.7+esm11 | 7 |
- OSV records
- UBUNTU-CVE-2021-3737
- Also known as
- USN-5083-1, USN-5199-1, USN-5201-1, USN-6891-1
Charts affected
112 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| sdcsmo-helm-chart | 6.0.0 | 1 of 14See more | 25,769 |
| sdnc-ansible-serversmo-helm-chart | 6.0.0 | 1 of 3See more | 25,769 |
| sdnc-portalsmo-helm-chart | 6.0.0 | 1 of 3See more | 25,769 |
| sdnc-promsmo-helm-chart | 6.0.0 | 1 of 2See more | 24,776 |
| sdnc-websmo-helm-chart | 6.0.0 | 1 of 3See more | 24,776 |
| ueb-listenersmo-helm-chart | 6.0.0 | 1 of 3See more | 25,769 |
| istio-discoverytemp-charts | 0.3.3 | 1 of 1See more | 10,568 |
| istio-ingresstemp-charts | 0.3.3 | 1 of 1See more | 10,514 |
| lightstepupdater-lightstep-satellite | 1.2.2 | 1 of 1See more | 15,330 |
| webhookiewebhookie | 0.1.2 | 1 of 1See more | 14,364 |
| webhookie-allwebhookie | 0.1.2 | 1 of 3See more | 28,605 |
| emissary-ingresswenerme | 8.12.2 | 1 of 2See more | 10,843 |
Container images carrying it
91 by charts deploying them
A fixed version is listed for 4 of the 4 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| oomk8s/ | 875814cc853d | python3.5 | 3.5.2-2ubuntu0~16.04.13+esm1 | 11 |
| oomk8s/ | 7daa08b81954 | python3.5 | 3.5.2-2ubuntu0~16.04.13+esm1 | 6 |
| hyperledger/ | 4ce6f43ded2e | python3.5 | 3.5.2-2ubuntu0~16.04.13+esm1 | 4 |
| hyperledger/ | f6c724592abf | python3.5 | 3.5.2-2ubuntu0~16.04.13+esm1 | 4 |
| cloudve/ | 4a3d7fae90bb | python3.8 | 3.8.10-0ubuntu1~20.04.2 | 3 |
| dgraph/ | 3b55ea83fffe | python3.8 | 3.8.10-0ubuntu1~20.04.2 | 3 |
| selenium/ | 02f251d48d5f | python3.8 | 3.8.10-0ubuntu1~20.04.2 | 3 |
| hookiesolutions/ | 0629694246ba | python3.8 | 3.8.10-0ubuntu1~20.04.2 | 2 |
| istio/ | dbb7726d1bf0 | python3.6 | 3.6.9-1~18.04ubuntu1.6 | 2 |
| istio/ | a78b7a165744 | python3.6 | 3.6.9-1~18.04ubuntu1.6 | 2 |
| lightstep/ | 11c5569aaf3b | python3.5 | 3.5.2-2ubuntu0~16.04.13+esm1 | 2 |
| omecproject/ | cfdb566dd949 | python3.5 | 3.5.2-2ubuntu0~16.04.13+esm1 | 2 |
| wurstmeister/ | 7a7fd44a7210 | python3.4 | 3.4.3-1ubuntu1~14.04.7+esm11 | 2 |
| ghcr.io/ | 103fbcec2314 | python3.8 | 3.8.10-0ubuntu1~20.04.2 | 2 |
| a10networks/ | 8dc58d434d71 | python3.6 | 3.6.9-1~18.04ubuntu1.6 | 1 |
| adwerx/ | 840d2b078682 | python3.8 | 3.8.10-0ubuntu1~20.04.2 | 1 |
| airsonicadvanced/ | f7cbafac2806 | python3.8 | 3.8.10-0ubuntu1~20.04.2 | 1 |
| apachepulsar/ | d056c89b7131 | python3.8 | 3.8.10-0ubuntu1~20.04.2 | 1 |
| browserless/ | c81ae5585b47 | python3.8 | 3.8.10-0ubuntu1~20.04.2 | 1 |
| chetangautamm/ | b4b94155ff5a | python3.4 | 3.4.3-1ubuntu1~14.04.7+esm11 | 1 |
| chetangautamm/ | e7f7049e1544 | python3.8 | 3.8.10-0ubuntu1~20.04.2 | 1 |
| cheyang/ | 46cc34755493 | python3.5 | 3.5.2-2ubuntu0~16.04.13+esm1 | 1 |
| citizenstig/ | b81c818ccb86 | python3.5 | 3.5.2-2ubuntu0~16.04.13+esm1 | 1 |
| cloudve/ | af56e77ca587 | python3.6 | 3.6.9-1~18.04ubuntu1.6 | 1 |
| cloudve/ | d79c1c5881c0 | python3.6 | 3.6.9-1~18.04ubuntu1.6 | 1 |
| daskdev/ | 052630f5ca04 | python3.6 | 3.6.9-1~18.04ubuntu1.6 | 1 |
| elastictranscoder/ | b4a0327029e6 | python3.6 | 3.6.9-1~18.04ubuntu1.6 | 1 |
| elastictranscoder/ | 5b75d19e2733 | python3.6 | 3.6.9-1~18.04ubuntu1.6 | 1 |
| galaxy/ | 0267bad550e6 | python3.4 | 3.4.3-1ubuntu1~14.04.7+esm11 | 1 |
| galaxy/ | 8e577a626dfd | python3.4 | 3.4.3-1ubuntu1~14.04.7+esm11 | 1 |
| geoscienceaustralia/ | f4039b45572a | python3.6 | 3.6.9-1~18.04ubuntu1.6 | 1 |
| gethue/ | 5702b2c37ff9 | python3.6 | 3.6.9-1~18.04ubuntu1.6 | 1 |
| haugene/ | 059216cfae4b | python3.8 | 3.8.10-0ubuntu1~20.04.2 | 1 |
| haveagitgat/ | 1e3f9328327d | python3.8 | 3.8.10-0ubuntu1~20.04.2 | 1 |
| hyperledger/ | c65891b6c237 | python3.5 | 3.5.2-2ubuntu0~16.04.13+esm1 | 1 |
| ibmcom/ | 7e4dc1e27cdf | python3.5 | 3.5.2-2ubuntu0~16.04.13+esm1 | 1 |
| ibmcom/ | b5d8c6714dbc | python3.5 | 3.5.2-2ubuntu0~16.04.13+esm1 | 1 |
| istio/ | 2232f365aed6 | python3.6 | 3.6.9-1~18.04ubuntu1.6 | 1 |
| istio/ | 268ab879ea51 | python3.5 | 3.5.2-2ubuntu0~16.04.13+esm1 | 1 |
| istio/ | 655eefa11c84 | python3.6 | 3.6.9-1~18.04ubuntu1.6 | 1 |
| istio/ | 294ca55bd1cc | python3.6 | 3.6.9-1~18.04ubuntu1.6 | 1 |
| istio/ | c09319753454 | python3.5 | 3.5.2-2ubuntu0~16.04.13+esm1 | 1 |
| istio/ | e7e110a421c2 | python3.6 | 3.6.9-1~18.04ubuntu1.6 | 1 |
| istio/ | 0c78be035e98 | python3.5 | 3.5.2-2ubuntu0~16.04.13+esm1 | 1 |
| istio/ | 87a9db561d2e | python3.6 | 3.6.9-1~18.04ubuntu1.6 | 1 |
| istio/ | 88c6c693e67a | python3.6 | 3.6.9-1~18.04ubuntu1.6 | 1 |
| jakowenko/ | b858bac9e32a | python3.8 | 3.8.10-0ubuntu1~20.04.2 | 1 |
| jmferrer/ | 030f68ec6998 | python3.5 | 3.5.2-2ubuntu0~16.04.13+esm1 | 1 |
| jupyterhub/ | b6b4a1a34bf0 | python3.8 | 3.8.10-0ubuntu1~20.04.2 | 1 |
| jupyterhub/ | e4770285aaf7 | python3.8 | 3.8.10-0ubuntu1~20.04.2 | 1 |