CVE-2022-1664
CriticalAdvisory
Published 25 May 2022In the index since 5 Sept 2026
- Severity
- Critical
- worst across findings
- CVSS
- 9.8
- base score, highest
- EPSS
- 0.032
- 88th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 1,047
- of 17,787 indexed, latest versions
- Container images
- 900
- deployed by those charts
- Fix available
- 3 of 3
- affected packages
dpkg - security update
Carried by container images the latest versions of 1,047 of 17,787 indexed charts deploy, on 900 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| dpkgdeb | 1.17.5ubuntu5.3, 1.17.5ubuntu5.7, 1.17.5ubuntu5.8, 1.18.4ubuntu1.1+17 more | 1.18.4ubuntu1.7+esm1, 1.18.26, 1.19.0.5ubuntu2.4, 1.19.7ubuntu3.2+3 more | 886 |
| dpkgapk | 1.20.9-r0 | 1.20.10-r0 | 7 |
| update-alternativesrpm | 1.19.0.4-2.48 | 1.19.0.4-150000.4.4.1 | 7 |
- OSV records
- ALPINE-CVE-2022-1664UBUNTU-CVE-2022-1664DLA-3022-1DSA-5147-1SUSE-SU-2022:4081-1
- Also known as
- USN-5446-1, USN-5446-2
Charts affected
1,047 by stars
Container images carrying it
900 by charts deploying them
A fixed version is listed for 3 of the 3 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| robotshop/ | 774b52c6180d | dpkg | 1.20.10 | 1 |
| robotshop/ | 4899c686c249 | dpkg | 1.20.10 | 1 |
| robotshop/ | 89753ab48919 | dpkg | 1.20.10 | 1 |
| robotshop/ | ea509182c180 | dpkg | 1.18.26 | 1 |
| robotshop/ | b3c20d4a22f2 | dpkg | 1.19.8 | 1 |
| rodolpheche/ | 2328a9fce2bf | dpkg | 1.19.8 | 1 |
| royalwang/ | df99e2499f91 | dpkg | 1.18.26 | 1 |
| rundeck/ | 4d64fe56f767 | dpkg | 1.18.4ubuntu1.7+esm1 | 1 |
| rundeck/ | b13e8059ad72 | dpkg | 1.18.4ubuntu1.7+esm1 | 1 |
| runx1/ | 0ca3867d3200 | dpkg | 1.20.10 | 1 |
| salaboy/ | f225568e6d03 | dpkg | 1.19.8 | 1 |
| samajh/ | ea742b4372ad | dpkg | 1.19.8 | 1 |
| samajh/ | 05ef4fddbb75 | dpkg | 1.19.8 | 1 |
| samueldg/ | 3987195edbe6 | dpkg | 1.19.8 | 1 |
| savepointsam/ | 9b9e0c057d23 | dpkg | 1.20.10 | 1 |
| scorpiobroker/ | db55012043df | dpkg | 1.20.10 | 1 |
| scrapinghub/ | a5f89bc84606 | dpkg | 1.19.0.5ubuntu2.4 | 1 |
| seafileltd/ | 6693911bcc40 | dpkg | 1.19.7ubuntu3.2 | 1 |
| seafileltd/ | 7ac833196f60 | dpkg | 1.19.7ubuntu3.2 | 1 |
| seafileltd/ | ed0fcda5e6a9 | dpkg | 1.19.7ubuntu3.2 | 1 |
| seldonio/ | 1d0da98a2d76 | dpkg | 1.18.4ubuntu1.7+esm1 | 1 |
| shadow228/ | 8fcea5b71906 | dpkg | 1.19.8 | 1 |
| shenxn/ | acf31af7c111 | dpkg | 1.19.0.5ubuntu2.4 | 1 |
| shinobisystems/ | 3ca746937856 | dpkg | 1.19.8 | 1 |
| shinobisystems/ | c2f5ce2e1067 | dpkg | 1.19.8 | 1 |
| signald/ | 0ffad7ccc2eb | dpkg | 1.20.10 | 1 |
| sigp/ | ad501f02cfef | dpkg | 1.19.7ubuntu3.2 | 1 |
| sikalabs/ | fdc0c6711add | dpkg | 1.19.8 | 1 |
| simpleidserver/ | 53c159ea49ca | dpkg | 1.19.8 | 1 |
| simpleidserver/ | 9007e742dd48 | dpkg | 1.19.8 | 1 |
| simpleidserver/ | 367218ae760f | dpkg | 1.20.10 | 1 |
| sinusbot/ | c7a4f3cc4393 | dpkg | 1.19.8 | 1 |
| sirfragalot/ | 34577843cb7b | dpkg | 1.19.8 | 1 |
| siscc/ | bb1e9a45b6fa | dpkg | 1.19.8 | 1 |
| siscc/ | 00d73f06edcf | dpkg | 1.19.8 | 1 |
| sismics/ | f4b0ef019cf1 | dpkg | 1.19.0.5ubuntu2.4 | 1 |
| slagattollas/ | cecd95e31486 | dpkg | 1.19.8 | 1 |
| slagattollas/ | 6dd8ead8e2b1 | dpkg | 1.18.26 | 1 |
| slagattollas/ | 68e7f56393fc | dpkg | 1.19.0.5ubuntu2.4 | 1 |
| snowplow/ | 41d318841516 | dpkg | 1.19.8 | 1 |
| softonic/ | d9c57e76e669 | dpkg | 1.18.26 | 1 |
| softonic/ | f0d3dcecce5e | dpkg | 1.18.26 | 1 |
| softonic/ | ab6098c04a53 | dpkg | 1.19.8 | 1 |
| softonic/ | 72017aed5902 | dpkg | 1.19.8 | 1 |
| softonic/ | 94b87f1fb362 | dpkg | 1.19.8 | 1 |
| solidnerd/ | 762ffd5c51d3 | dpkg | 1.19.8 | 1 |
| someblackmagic/ | 6eca64b6b440 | dpkg | 1.19.7ubuntu3.2 | 1 |
| someblackmagic/ | 0d63ba37a560 | dpkg | 1.19.8 | 1 |
| sorintlab/ | 36b45c0f97fc | dpkg | 1.19.8 | 1 |
| stacksimplify/ | ead648280067 | dpkg | 1.19.8 | 1 |