CVE-2021-38185
HighAdvisory
Published 8 Aug 2021In the index since 8 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 7.8
- base score, highest
- EPSS
- 0.042
- 90th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 11
- of 17,781 indexed, latest versions
- Container images
- 15
- deployed by those charts
- Fix available
- 2 of 2
- affected packages
Recommended update for cpio
Carried by container images the latest versions of 11 of 17,781 indexed charts deploy, on 15 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| cpiodeb | 2.11+dfsg-1ubuntu1, 2.11+dfsg-1ubuntu1.1, 2.11+dfsg-1ubuntu1.2 | 2.11+dfsg-1ubuntu1.2+esm2 | 7 |
| cpiorpm | 2.12-3.3.1 | 2.12-3.9.1 | 8 |
- OSV records
- UBUNTU-CVE-2021-38185SUSE-RU-2021:2780-1
- Also known as
- USN-5064-3
Charts affected
11 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| kafka-devwikimedia | 0.2.0 | 1 of 1See more | 41,427 |
| opensipschetan-opensips | 0.1.0 | 1 of 1See more | 30,140 |
| guestbookcloudnativeapp | 0.2.0 | 1 of 3See more | 36,839 |
| galaxy-stablecloudve | 2.0.0 | 2 of 5See more | 70,895 |
| zookeeper-helm-chartnotesprojectchart | 0.1.0 | 1 of 1See more | 41,427 |
| sebaopencord | 1.0.0 | 1 of 17See more | 93,855 |
| issuegenopsmxVerified publisher | 1.0.2 | 1 of 1See more | 26,339 |
| quarksquarks | 7.0.1+0.g5396b11 | 5 of 5See more | 18,197 |
| quarks-jobquarks | 0.0.124-g03faac8 | 1 of 1See more | 1,804 |
| quarks-secretquarks | 0.0.677-ga060bb6 | 1 of 1See more | 1,814 |
| quarks-statefulsetquarks | 0.0.1304-g4b4f2ac5 | 1 of 1See more | 4,010 |
Container images carrying it
15 by charts deploying them
A fixed version is listed for 2 of the 2 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| wurstmeister/ | 7a7fd44a7210 | cpio | 2.11+dfsg-1ubuntu1.2+esm2 | 2 |
| cfcontainerization/ | 7366b11c5fa5 | cpio | 2.12-3.9.1 | 1 |
| cfcontainerization/ | 43131dbc0c8f | cpio | 2.12-3.9.1 | 1 |
| chetangautamm/ | b4b94155ff5a | cpio | 2.11+dfsg-1ubuntu1.2+esm2 | 1 |
| galaxy/ | 0267bad550e6 | cpio | 2.11+dfsg-1ubuntu1.2+esm2 | 1 |
| galaxy/ | 8e577a626dfd | cpio | 2.11+dfsg-1ubuntu1.2+esm2 | 1 |
| opsmx11/ | 5c50ca123d88 | cpio | 2.11+dfsg-1ubuntu1.2+esm2 | 1 |
| resouer/ | e2f198b49ba7 | cpio | 2.11+dfsg-1ubuntu1.2+esm2 | 1 |
| voltha/ | 59ab2a00f712 | cpio | 2.11+dfsg-1ubuntu1.2+esm2 | 1 |
| ghcr.io/ | 61daa1bba5cb | cpio | 2.12-3.9.1 | 1 |
| ghcr.io/ | 760eee87f839 | cpio | 2.12-3.9.1 | 1 |
| ghcr.io/ | 6a1432b0d503 | cpio | 2.12-3.9.1 | 1 |
| ghcr.io/ | f059af4de8ed | cpio | 2.12-3.9.1 | 1 |
| ghcr.io/ | c7c70b527255 | cpio | 2.12-3.9.1 | 1 |
| ghcr.io/ | e24a9e0a21b6 | cpio | 2.12-3.9.1 | 1 |