CVE catalog

CVE-2018-16873

UBUNTU-CVE-2018-16873

[CVE catalog]

Severity
High · CVSS 7.5CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Published
Updated
Source
[NVD] · [CVE record]
EPSS
66.25% · Oct 25, 2026

This update for helm-mirror to version 0.2.1 fixes the following issues: Security issues fixed: - CVE-2018-16873: Fixed a remote command execution (bsc#1118897) - CVE-2018-16874: Fixed a directory traversal in 'go get' via curly braces in import path (bsc#1118898) - CVE-2018-16875: Fixed a CPU denial of service (bsc#1118899) Non-security issue fixed: - Update to v0.2.1 (bsc#1120762) - Include helm-mirror into the containers module (bsc#1116182)

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Susehelm-mirrorlinux enterprise module for containers 150.2.1-1.7.1fixed
Susecontainerdlinux enterprise module for containers 151.2.5-5.13.1fixed
Susedockerlinux enterprise module for containers 1518.09.6_ce-6.17.1fixed
Susedocker-runclinux enterprise module for containers 151.0.0rc6+gitr3804_2b18fe1d885e-6.18.1fixed
Susegolang-github-docker-libnetworklinux enterprise module for containers 150.7.0.1+gitr2726_872f0a83c98a-4.12.1fixed
Susecontainerdlinux enterprise module for containers 151.1.2-5.3.4fixed
Susedockerlinux enterprise module for containers 1518.06.1_ce-6.8.2fixed
Susedocker-runclinux enterprise module for containers 151.0.0rc5+gitr3562_69663f0bd4b6-6.3.4fixed
Susegolang-github-docker-libnetworklinux enterprise module for containers 150.7.0.1+gitr2664_3ac297bc7fd0-4.3.5fixed
Opensuseflanneltumbleweed0.14.0-1.2fixed
Opensusecontainerdleap 15.11.2.5-lp151.2.3.1fixed
Opensusedockerleap 15.118.09.6_ce-lp151.2.3.1fixed
Opensusedocker-runcleap 15.11.0.0rc6+gitr3804_2b18fe1d885e-lp151.3.3.1fixed
Opensusegoleap 15.11.12-lp151.2.3.1fixed
Opensusego1.11leap 15.11.11.9-lp151.2.3.1fixed
Opensusego1.12leap 15.11.12.4-lp151.2.3.1fixed
Opensusegolang-github-docker-libnetworkleap 15.10.7.0.1+gitr2726_872f0a83c98a-lp151.2.3.1fixed
Opensusecontainerdleap 15.01.2.5-lp150.4.14.3fixed
Opensusedockerleap 15.018.09.6_ce-lp150.5.17.2fixed
Opensusedocker-runcleap 15.01.0.0rc6+gitr3804_2b18fe1d885e-lp150.5.21.2fixed
Opensusegoleap 15.01.12-lp150.2.11.1fixed
Opensusego1.11leap 15.01.11.9-lp150.9.3fixed
Opensusego1.12leap 15.01.12.4-lp150.2.2fixed
Opensusegolang-github-docker-libnetworkleap 15.00.7.0.1+gitr2726_872f0a83c98a-lp150.3.14.1fixed
Susehelmpackage hub 12 sp32.13.1-5.1fixed
Susecontainerdlinux enterprise module for containers 151.2.2-5.9.1fixed
Susedockerlinux enterprise module for containers 1518.09.1_ce-6.14.1fixed
Susedocker-runclinux enterprise module for containers 151.0.0rc6+gitr3748_96ec2177ae84-6.12.1fixed
Susegolang-github-docker-libnetworklinux enterprise module for containers 150.7.0.1+gitr2711_2cfbf9b1f981-4.9.1fixed
Opensusehelm-mirrortumbleweed0.3.1-1.9fixed
Susecontainerdlinux enterprise module for containers 121.2.5-16.17.2fixed
Susedockerlinux enterprise module for containers 1218.09.6_ce-98.37.1fixed
Susedocker-runclinux enterprise module for containers 121.0.0rc6+gitr3804_2b18fe1d885e-1.23.1fixed
Susegolang-github-docker-libnetworklinux enterprise module for containers 120.7.0.1+gitr2726_872f0a83c98a-19.1fixed
Opensuseetcdtumbleweed3.4.16-3.1fixed
Susehelm-mirrorlinux enterprise module for containers 15 sp10.2.1-1.7.1fixed
Opensusecri-otumbleweed1.22.0-1.2fixed
Opensusehelm3tumbleweed3.19.2-1.1fixed
Susecontainerdlinux enterprise module for containers 15 sp11.2.5-5.13.1fixed
Susedockerlinux enterprise module for containers 15 sp118.09.6_ce-6.17.1fixed
Susedocker-runclinux enterprise module for containers 15 sp11.0.0rc6+gitr3804_2b18fe1d885e-6.18.1fixed
Susegolang-github-docker-libnetworklinux enterprise module for containers 15 sp10.7.0.1+gitr2726_872f0a83c98a-4.12.1fixed
Opensusehelmtumbleweed3.6.3-1.1fixed
Suseruncpackage hub 151.0.0~rc6-bp150.2.3.1fixed
Opensuseetcdleap 15.53.5.12-150000.7.6.1fixed
Opensuseetcdleap 15.63.5.12-150000.7.6.1fixed
Susegopackage hub 151.12-bp150.2.6.1fixed
Susecontainerdlinux enterprise module for containers 151.1.2-5.6.1fixed
Susedockerlinux enterprise module for containers 1518.09.0_ce-6.11.2fixed
Susedocker-runclinux enterprise module for containers 151.0.0rc5+gitr3562_69663f0bd4b6-6.6.1fixed
Susegolang-github-docker-libnetworklinux enterprise module for containers 150.7.0.1+gitr2704_6da50d197830-4.6.1fixed
Susecontainerdlinux enterprise module for containers 121.4.4-16.38.1fixed
Susedockerlinux enterprise module for containers 1220.10.6_ce-98.66.1fixed
Suserunclinux enterprise module for containers 121.0.0~rc93-16.8.1fixed
Ubuntugolang-1.1014.041.10.4-2ubuntu1~14.04.1vulnerable
Ubuntugolang-1.1016.041.10.4-2ubuntu1~16.04.1vulnerable
Ubuntugolang-1.1016.041.10.4-2ubuntu1~16.04.2vulnerable
Ubuntugolang-1.616.041.6-0ubuntu1vulnerable
Ubuntugolang-1.616.041.6-0ubuntu2vulnerable
Ubuntugolang-1.616.041.6-0ubuntu3vulnerable
Ubuntugolang-1.616.041.6-0ubuntu4vulnerable
Ubuntugolang-1.616.041.6-0ubuntu5vulnerable
Ubuntugolang-1.616.041.6.1-0ubuntu1vulnerable
Ubuntugolang-1.616.041.6.2-0ubuntu5~16.04vulnerable
Ubuntugolang-1.616.041.6.2-0ubuntu5~16.04.2vulnerable
Ubuntugolang-1.616.041.6.2-0ubuntu5~16.04.3vulnerable
Ubuntugolang-1.616.041.6.2-0ubuntu5~16.04.4vulnerable
Ubuntugolang-1.1018.041.10~rc1-1vulnerable
Ubuntugolang-1.1018.041.10~rc1-1ubuntu1vulnerable
Ubuntugolang-1.1018.041.10~rc1-2ubuntu1vulnerable
Ubuntugolang-1.1018.041.10~rc2-1ubuntu1vulnerable
Ubuntugolang-1.1018.041.10-1ubuntu1vulnerable
Ubuntugolang-1.1018.041.10.1-1ubuntu2vulnerable
Ubuntugolang-1.1018.041.10.4-2ubuntu1~18.04.1vulnerable
Ubuntugolang-1.1018.041.10.4-2ubuntu1~18.04.2vulnerable
Ubuntugolang-1.818.041.8.3-2ubuntu1vulnerable
Ubuntugolang-1.818.041.8.3-2ubuntu1.18.04.1vulnerable
Ubuntugolang-1.918.041.9.1-2ubuntu1vulnerable
Ubuntugolang-1.918.041.9.2-1ubuntu1vulnerable
Ubuntugolang-1.918.041.9.2-3ubuntu1vulnerable
Ubuntugolang-1.918.041.9.3-1ubuntu1vulnerable
Ubuntugolang-1.918.041.9.4-1ubuntu1vulnerable

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Susehelm-mirrorrpmlinux enterprise module for containers 150.2.1-1.7.1Not reportedSUSE-SU-2019:0048-1Not reported
Susecontainerdrpmlinux enterprise module for containers 151.2.5-5.13.1Not reportedSUSE-SU-2019:1234-1Not reported
Susedockerrpmlinux enterprise module for containers 1518.09.6_ce-6.17.1Not reportedSUSE-SU-2019:1234-1Not reported
Susedocker-runcrpmlinux enterprise module for containers 151.0.0rc6+gitr3804_2b18fe1d885e-6.18.1Not reportedSUSE-SU-2019:1234-1Not reported
Susegolang-github-docker-libnetworkrpmlinux enterprise module for containers 150.7.0.1+gitr2726_872f0a83c98a-4.12.1Not reportedSUSE-SU-2019:1234-1Not reported
Susecontainerdrpmlinux enterprise module for containers 151.1.2-5.3.4Not reportedSUSE-SU-2018:4297-1Not reported
Susedockerrpmlinux enterprise module for containers 1518.06.1_ce-6.8.2Not reportedSUSE-SU-2018:4297-1Not reported
Susedocker-runcrpmlinux enterprise module for containers 151.0.0rc5+gitr3562_69663f0bd4b6-6.3.4Not reportedSUSE-SU-2018:4297-1Not reported
Susegolang-github-docker-libnetworkrpmlinux enterprise module for containers 150.7.0.1+gitr2664_3ac297bc7fd0-4.3.5Not reportedSUSE-SU-2018:4297-1Not reported
Opensuseflannelrpmtumbleweed0.14.0-1.2Not reportedOPENSUSE-SU-2024:10761-1Not reported
Opensusecontainerdrpmleap 15.11.2.5-lp151.2.3.1Not reportedOPENSUSE-SU-2019:1444-1Not reported
Opensusedockerrpmleap 15.118.09.6_ce-lp151.2.3.1Not reportedOPENSUSE-SU-2019:1444-1Not reported
Opensusedocker-runcrpmleap 15.11.0.0rc6+gitr3804_2b18fe1d885e-lp151.3.3.1Not reportedOPENSUSE-SU-2019:1444-1Not reported
Opensusegorpmleap 15.11.12-lp151.2.3.1Not reportedOPENSUSE-SU-2019:1444-1Not reported
Opensusego1.11rpmleap 15.11.11.9-lp151.2.3.1Not reportedOPENSUSE-SU-2019:1444-1Not reported
Opensusego1.12rpmleap 15.11.12.4-lp151.2.3.1Not reportedOPENSUSE-SU-2019:1444-1Not reported
Opensusegolang-github-docker-libnetworkrpmleap 15.10.7.0.1+gitr2726_872f0a83c98a-lp151.2.3.1Not reportedOPENSUSE-SU-2019:1444-1Not reported
Opensusecontainerdrpmleap 15.01.2.5-lp150.4.14.3Not reportedOPENSUSE-SU-2019:1499-1Not reported
Opensusedockerrpmleap 15.018.09.6_ce-lp150.5.17.2Not reportedOPENSUSE-SU-2019:1499-1Not reported
Opensusedocker-runcrpmleap 15.01.0.0rc6+gitr3804_2b18fe1d885e-lp150.5.21.2Not reportedOPENSUSE-SU-2019:1499-1Not reported
Opensusegorpmleap 15.01.12-lp150.2.11.1Not reportedOPENSUSE-SU-2019:1499-1Not reported
Opensusego1.11rpmleap 15.01.11.9-lp150.9.3Not reportedOPENSUSE-SU-2019:1499-1Not reported
Opensusego1.12rpmleap 15.01.12.4-lp150.2.2Not reportedOPENSUSE-SU-2019:1499-1Not reported
Opensusegolang-github-docker-libnetworkrpmleap 15.00.7.0.1+gitr2726_872f0a83c98a-lp150.3.14.1Not reportedOPENSUSE-SU-2019:1499-1Not reported
Susehelmrpmpackage hub 12 sp32.13.1-5.1Not reportedOPENSUSE-SU-2019:1703-1Not reported
Susecontainerdrpmlinux enterprise module for containers 151.2.2-5.9.1Not reportedSUSE-SU-2019:0495-1Not reported
Susedockerrpmlinux enterprise module for containers 1518.09.1_ce-6.14.1Not reportedSUSE-SU-2019:0495-1Not reported
Susedocker-runcrpmlinux enterprise module for containers 151.0.0rc6+gitr3748_96ec2177ae84-6.12.1Not reportedSUSE-SU-2019:0495-1Not reported
Susegolang-github-docker-libnetworkrpmlinux enterprise module for containers 150.7.0.1+gitr2711_2cfbf9b1f981-4.9.1Not reportedSUSE-SU-2019:0495-1Not reported
Opensusehelm-mirrorrpmtumbleweed0.3.1-1.9Not reportedOPENSUSE-SU-2024:10842-1Not reported
Susecontainerdrpmlinux enterprise module for containers 121.2.5-16.17.2Not reportedSUSE-SU-2019:1264-1Not reported
Susedockerrpmlinux enterprise module for containers 1218.09.6_ce-98.37.1Not reportedSUSE-SU-2019:1264-1Not reported
Susedocker-runcrpmlinux enterprise module for containers 121.0.0rc6+gitr3804_2b18fe1d885e-1.23.1Not reportedSUSE-SU-2019:1264-1Not reported
Susegolang-github-docker-libnetworkrpmlinux enterprise module for containers 120.7.0.1+gitr2726_872f0a83c98a-19.1Not reportedSUSE-SU-2019:1264-1Not reported
Opensuseetcdrpmtumbleweed3.4.16-3.1Not reportedOPENSUSE-SU-2024:10741-1Not reported
Susehelm-mirrorrpmlinux enterprise module for containers 15 sp10.2.1-1.7.1Not reportedSUSE-SU-2019:0048-2Not reported
Opensusecri-orpmtumbleweed1.22.0-1.2Not reportedOPENSUSE-SU-2024:10699-1Not reported
Opensusehelm3rpmtumbleweed3.19.2-1.1Not reportedOPENSUSE-SU-2025:15779-1Not reported
Susecontainerdrpmlinux enterprise module for containers 15 sp11.2.5-5.13.1Not reportedSUSE-SU-2019:1234-2Not reported
Susedockerrpmlinux enterprise module for containers 15 sp118.09.6_ce-6.17.1Not reportedSUSE-SU-2019:1234-2Not reported
Susedocker-runcrpmlinux enterprise module for containers 15 sp11.0.0rc6+gitr3804_2b18fe1d885e-6.18.1Not reportedSUSE-SU-2019:1234-2Not reported
Susegolang-github-docker-libnetworkrpmlinux enterprise module for containers 15 sp10.7.0.1+gitr2726_872f0a83c98a-4.12.1Not reportedSUSE-SU-2019:1234-2Not reported
Opensusehelmrpmtumbleweed3.6.3-1.1Not reportedOPENSUSE-SU-2024:10841-1Not reported
Suseruncrpmpackage hub 151.0.0~rc6-bp150.2.3.1Not reportedOPENSUSE-SU-2019:0170-1Not reported
Opensuseetcdrpmleap 15.53.5.12-150000.7.6.1Not reportedSUSE-SU-2024:3656-1Not reported
Opensuseetcdrpmleap 15.63.5.12-150000.7.6.1Not reportedSUSE-SU-2024:3656-1Not reported
Susegorpmpackage hub 151.12-bp150.2.6.1Not reportedOPENSUSE-SU-2019:1506-1Not reported
Susecontainerdrpmlinux enterprise module for containers 151.1.2-5.6.1Not reportedSUSE-SU-2019:0286-1Not reported
Susedockerrpmlinux enterprise module for containers 1518.09.0_ce-6.11.2Not reportedSUSE-SU-2019:0286-1Not reported
Susedocker-runcrpmlinux enterprise module for containers 151.0.0rc5+gitr3562_69663f0bd4b6-6.6.1Not reportedSUSE-SU-2019:0286-1Not reported
Susegolang-github-docker-libnetworkrpmlinux enterprise module for containers 150.7.0.1+gitr2704_6da50d197830-4.6.1Not reportedSUSE-SU-2019:0286-1Not reported
Susecontainerdrpmlinux enterprise module for containers 121.4.4-16.38.1Not reportedSUSE-SU-2021:1458-1Not reported
Susedockerrpmlinux enterprise module for containers 1220.10.6_ce-98.66.1Not reportedSUSE-SU-2021:1458-1Not reported
Suseruncrpmlinux enterprise module for containers 121.0.0~rc93-16.8.1Not reportedSUSE-SU-2021:1458-1Not reported

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

[openSUSE Tumbleweed]

  • [cri-o]Unknown

    Source package: [cri-o]

    Details (1)

    • 1.24.3-2.12 · x86_64 · tumbleweed

      Fixed · Fixed: 1.22.0-1.2

      pypi · cri-o · opensuse · tumbleweed

  • [cri-o-kubeadm-criconfig]Unknown

    Source package: [cri-o]

    Details (1)

    • 1.24.3-2.12 · x86_64 · tumbleweed

      Unknown · Fixed: 1.22.0-1.2

      Version impact unknown

      pypi · cri-o · opensuse · tumbleweed

  • [etcd]Unknown

    Source package: [etcd]

    Details (1)

    • 3.7.1-1.2 · x86_64 · tumbleweed

      Fixed · Fixed: 3.4.16-3.1

      pypi · etcd · opensuse · tumbleweed

  • [etcdctl]Unknown

    Source package: [etcd]

    Details (1)

    • 3.7.1-1.2 · x86_64 · tumbleweed

      Unknown · Fixed: 3.4.16-3.1

      Version impact unknown

      pypi · etcd · opensuse · tumbleweed

  • [etcdutl]Unknown

    Source package: [etcd]

    Details (1)

    • 3.7.1-1.2 · x86_64 · tumbleweed

      Unknown · Fixed: 3.4.16-3.1

      Version impact unknown

      pypi · etcd · opensuse · tumbleweed

  • [flannel]Unknown

    Source package: [flannel]

    Details (1)

    • 0.28.7-1.2 · x86_64 · tumbleweed

      Fixed · Fixed: 0.14.0-1.2

      pypi · flannel · opensuse · tumbleweed

  • [flannel-k8s-yaml]Unknown

    Source package: [flannel]

    Details (1)

    • 0.28.7-1.2 · noarch · tumbleweed

      Unknown · Fixed: 0.14.0-1.2

      Version impact unknown

      pypi · flannel · opensuse · tumbleweed

  • [helm]Unknown

    Source package: [helm]

    Details (1)

    • 4.2.4-1.1 · x86_64 · tumbleweed

      Fixed · Fixed: 3.6.3-1.1

      pypi · helm · opensuse · tumbleweed

  • [helm3]Unknown

    Source package: [helm3]

    Details (1)

    • 3.21.3-6.1 · x86_64 · tumbleweed

      Fixed · Fixed: 3.19.2-1.1

      pypi · helm3 · opensuse · tumbleweed

  • [helm3-bash-completion]Unknown

    Source package: [helm3]

    Details (1)

    • 3.21.3-6.1 · noarch · tumbleweed

      Unknown · Fixed: 3.19.2-1.1

      Version impact unknown

      pypi · helm3 · opensuse · tumbleweed

  • [helm3-fish-completion]Unknown

    Source package: [helm3]

    Details (1)

    • 3.21.3-6.1 · noarch · tumbleweed

      Unknown · Fixed: 3.19.2-1.1

      Version impact unknown

      pypi · helm3 · opensuse · tumbleweed

  • [helm3-zsh-completion]Unknown

    Source package: [helm3]

    Details (1)

    • 3.21.3-6.1 · noarch · tumbleweed

      Unknown · Fixed: 3.19.2-1.1

      Version impact unknown

      pypi · helm3 · opensuse · tumbleweed

  • [helm-bash-completion]Unknown

    Source package: [helm]

    Details (1)

    • 4.2.4-1.1 · noarch · tumbleweed

      Unknown · Fixed: 3.6.3-1.1

      Version impact unknown

      pypi · helm · opensuse · tumbleweed

  • [helm-fish-completion]Unknown

    Source package: [helm]

    Details (1)

    • 4.2.4-1.1 · noarch · tumbleweed

      Unknown · Fixed: 3.6.3-1.1

      Version impact unknown

      pypi · helm · opensuse · tumbleweed

  • [helm-zsh-completion]Unknown

    Source package: [helm]

    Details (1)

    • 4.2.4-1.1 · noarch · tumbleweed

      Unknown · Fixed: 3.6.3-1.1

      Version impact unknown

      pypi · helm · opensuse · tumbleweed

Observed:

References

[FIRST EPSS] · [OSV Package Vulnerability Database] · [SUSE security advisories and VEX]