DSA-4136-1
UnscoredAdvisory
Published 14 Mar 2018In the index since 6 Sept 2026
- Severity
- Unscored
- worst across findings
- CVSS
- —
- base score, highest
- EPSS
- 0.116
- 96th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 51
- of 17,781 indexed, latest versions
- Container images
- 39
- deployed by those charts
- Fix available
- 1 of 1
- affected package
curl - security update
Carried by container images the latest versions of 51 of 17,781 indexed charts deploy, on 39 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| curldeb | 7.38.0-4+deb8u4, 7.38.0-4+deb8u5, 7.38.0-4+deb8u6, 7.38.0-4+deb8u7+5 more | 7.38.0-4+deb8u10, 7.52.1-5+deb9u5 | 39 |
- OSV records
- DSA-4136-1
Charts affected
51 by stars
Container images carrying it
39 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| bde2020/ | 620267768985 | curl | 7.38.0-4+deb8u10 | 4 |
| kodekloud/ | 741e3aaaa812 | curl | 7.52.1-5+deb9u5 | 4 |
| library/ | 6216f64ab88f | curl | 7.38.0-4+deb8u10 | 4 |
| osixia/ | 1ab629698ae0 | curl | 7.52.1-5+deb9u5 | 4 |
| danisla/ | 255ba2dd739b | curl | 7.38.0-4+deb8u10 | 2 |
| gradiant/ | aae4f8a21f8b | curl | 7.38.0-4+deb8u10 | 2 |
| migmartri/ | 486aacfd5aa9 | curl | 7.38.0-4+deb8u10 | 2 |
| neilpeterson/ | 84062718347c | curl | 7.52.1-5+deb9u5 | 2 |
| a5huynh/ | 0c7307d31ca8 | curl | 7.38.0-4+deb8u10 | 1 |
| apacherocketmq/ | 24799aff6cf8 | curl | 7.38.0-4+deb8u10 | 1 |
| billimek/ | 801bba1228ac | curl | 7.38.0-4+deb8u10 | 1 |
| bivas/ | 05545994f806 | curl | 7.52.1-5+deb9u5 | 1 |
| bryanalves/ | 95f73dce8b21 | curl | 7.52.1-5+deb9u5 | 1 |
| buoyantio/ | f4048edaca6f | curl | 7.38.0-4+deb8u10 | 1 |
| camptocamp/ | 9dec019e4c62 | curl | 7.38.0-4+deb8u10 | 1 |
| camptocamp/ | 5e55370dd292 | curl | 7.38.0-4+deb8u10 | 1 |
| codylundquist/ | 630ab586b8c1 | curl | 7.38.0-4+deb8u10 | 1 |
| dstacademy/ | 46487aa079b0 | curl | 7.52.1-5+deb9u5 | 1 |
| hickey/ | c1148a09ef20 | curl | 7.38.0-4+deb8u10 | 1 |
| ibmcom/ | 2dcde9774493 | curl | 7.38.0-4+deb8u10 | 1 |
| jenkinsci/ | a1f33f004659 | curl | 7.52.1-5+deb9u5 | 1 |
| library/ | d5d7f368de4a | curl | 7.38.0-4+deb8u10 | 1 |
| ncsapolyglot/ | c44b22eb58bb | curl | 7.52.1-5+deb9u5 | 1 |
| ncsapolyglot/ | 2ba4af461d51 | curl | 7.38.0-4+deb8u10 | 1 |
| neilpeterson/ | fb47732ef36b | curl | 7.52.1-5+deb9u5 | 1 |
| neilpeterson/ | 3a8877032972 | curl | 7.52.1-5+deb9u5 | 1 |
| neilpeterson/ | 64fd8dab075f | curl | 7.52.1-5+deb9u5 | 1 |
| neilpeterson/ | 6527b05d5d03 | curl | 7.38.0-4+deb8u10 | 1 |
| neilpeterson/ | f4940e84ed05 | curl | 7.38.0-4+deb8u10 | 1 |
| neilpeterson/ | 5859d68a6c9f | curl | 7.38.0-4+deb8u10 | 1 |
| neilpeterson/ | 29d229ab446e | curl | 7.38.0-4+deb8u10 | 1 |
| osixia/ | 58cce1b08592 | curl | 7.52.1-5+deb9u5 | 1 |
| percona/ | eaa3fcb7a5a2 | curl | 7.38.0-4+deb8u10 | 1 |
| polyakov/ | dbcef69146b8 | curl | 7.38.0-4+deb8u10 | 1 |
| raykrueger/ | c8baf3de57bb | curl | 7.52.1-5+deb9u5 | 1 |
| richardchesterwood/ | 0b540a28f5a6 | curl | 7.52.1-5+deb9u5 | 1 |
| richardchesterwood/ | 36c43961214c | curl | 7.52.1-5+deb9u5 | 1 |
| stakater/ | 4f8e409f30c2 | curl | 7.38.0-4+deb8u10 | 1 |
| timothyclarke/ | 40a80ced8031 | curl | 7.38.0-4+deb8u10 | 1 |