CVE-2022-1664
CriticalAdvisory
Published 25 May 2022In the index since 5 Sept 2026
- Severity
- Critical
- worst across findings
- CVSS
- 9.8
- base score, highest
- EPSS
- 0.032
- 88th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 1,047
- of 17,787 indexed, latest versions
- Container images
- 900
- deployed by those charts
- Fix available
- 3 of 3
- affected packages
dpkg - security update
Carried by container images the latest versions of 1,047 of 17,787 indexed charts deploy, on 900 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| dpkgdeb | 1.17.5ubuntu5.3, 1.17.5ubuntu5.7, 1.17.5ubuntu5.8, 1.18.4ubuntu1.1+17 more | 1.18.4ubuntu1.7+esm1, 1.18.26, 1.19.0.5ubuntu2.4, 1.19.7ubuntu3.2+3 more | 886 |
| dpkgapk | 1.20.9-r0 | 1.20.10-r0 | 7 |
| update-alternativesrpm | 1.19.0.4-2.48 | 1.19.0.4-150000.4.4.1 | 7 |
- OSV records
- ALPINE-CVE-2022-1664UBUNTU-CVE-2022-1664DLA-3022-1DSA-5147-1SUSE-SU-2022:4081-1
- Also known as
- USN-5446-1, USN-5446-2
Charts affected
1,047 by stars
Container images carrying it
900 by charts deploying them
A fixed version is listed for 3 of the 3 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| library/ | 3e373fd5b8d4 | dpkg | 1.18.26 | 86 |
| dellcloud/ | 6ba7b22caacd | dpkg | 1.19.7ubuntu3.2 | 79 |
| flyway/ | 22d97ceb0c47 | dpkg | 1.19.0.5ubuntu2.4 | 79 |
| ghcr.io/ | ae2268dcc930 | dpkg | 1.19.8 | 33 |
| library/ | 20575ecebe62 | dpkg | 1.18.26 | 11 |
| library/ | fc77d54cacef | dpkg | 1.19.8 | 11 |
| oomk8s/ | 875814cc853d | dpkg | 1.18.4ubuntu1.7+esm1 | 11 |
| library/ | 8e70544b6c76 | dpkg | 1.19.7ubuntu3.2 | 10 |
| gradiant/ | 3b28784ba41f | dpkg | 1.19.8 | 7 |
| library/ | ce85468c5bad | dpkg | 1.18.26 | 7 |
| osixia/ | 18742e9c449c | dpkg | 1.19.8 | 7 |
| library/ | b7a76ec06f68 | dpkg | 1.19.8 | 6 |
| oomk8s/ | 7daa08b81954 | dpkg | 1.18.4ubuntu1.7+esm1 | 6 |
| library/ | 0fd2898dc1c9 | dpkg | 1.19.8 | 5 |
| library/ | df13abe416e3 | dpkg | 1.19.8 | 5 |
| osixia/ | d112b82be133 | dpkg | 1.19.8 | 5 |
| ghcr.io/ | 205961b09a80 | dpkg | 1.19.8 | 5 |
| grafana/ | ab415470454b | dpkg | 1.18.26 | 4 |
| hyperledger/ | 28f50c6aa4f4 | dpkg | 1.19.8 | 4 |
| hyperledger/ | 4ce6f43ded2e | dpkg | 1.18.4ubuntu1.7+esm1 | 4 |
| hyperledger/ | f6c724592abf | dpkg | 1.18.4ubuntu1.7+esm1 | 4 |
| kodekloud/ | 741e3aaaa812 | dpkg | 1.18.26 | 4 |
| library/ | 2f561d372672 | dpkg | 1.19.8 | 4 |
| library/ | 628741415fc9 | dpkg | 1.19.0.5ubuntu2.4 | 4 |
| library/ | 6efa05203990 | dpkg | 1.19.0.5ubuntu2.4 | 4 |
| library/ | 19f4621c085c | dpkg | 1.18.26 | 4 |
| oscarsotosanchez/ | 6e2e1279126b | dpkg | 1.18.26 | 4 |
| oscarsotosanchez/ | 911ec961d10b | dpkg | 1.19.0.5ubuntu2.4 | 4 |
| osixia/ | 1ab629698ae0 | dpkg | 1.18.26 | 4 |
| argoproj/ | 830e86cacefd | dpkg | 1.19.8 | 3 |
| bitnamilegacy/ | 804725facf91 | dpkg | 1.19.8 | 3 |
| cloudve/ | 4a3d7fae90bb | dpkg | 1.19.7ubuntu3.2 | 3 |
| conduction/ | ee2121b569ac | dpkg | 1.19.8 | 3 |
| dgraph/ | 3b55ea83fffe | dpkg | 1.19.7ubuntu3.2 | 3 |
| frankescobar/ | 4ebd8b4ef340 | dpkg | 1.19.8 | 3 |
| grafana/ | 626900031c4e | dpkg | 1.20.10 | 3 |
| library/ | e1b0fd480a11 | dpkg | 1.18.26 | 3 |
| library/ | 3162a6ead070 | dpkg | 1.20.10 | 3 |
| library/ | 2dfa64327446 | dpkg | 1.18.26 | 3 |
| lmenezes/ | 7d9e2b77e459 | dpkg | 1.19.8 | 3 |
| omecproject/ | d59ccb138ffb | dpkg | 1.18.4ubuntu1.7+esm1 | 3 |
| phpmyadmin/ | ae6dadd9cf3c | dpkg | 1.20.10 | 3 |
| selenium/ | 02f251d48d5f | dpkg | 1.19.7ubuntu3.2 | 3 |
| xenondb/ | 0e26872a2b67 | dpkg | 1.19.7ubuntu3.2 | 3 |
| ghcr.io/ | 279eb855e6c7 | dpkg | 1.19.8 | 3 |
| quay.io/ | 39f2c6e0af38 | dpkg | 1.19.7ubuntu3.2 | 3 |
| quay.io/ | 4c3b91bebd3d | dpkg | 1.18.4ubuntu1.7+esm1 | 3 |
| quay.io/ | ef035ac10498 | dpkg | 1.18.26 | 3 |
| 1password/ | 29d0c6cb67eb | dpkg | 1.20.10 | 2 |
| amancevice/ | 12a0a9e66550 | dpkg | 1.19.8 | 2 |