CVE-2022-2097
MediumAdvisory
Published 5 Jul 2022In the index since 5 Sept 2026
- Severity
- Medium
- worst across findings
- CVSS
- 5.3
- base score, highest
- EPSS
- 0.047
- 91st percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 862
- of 17,787 indexed, latest versions
- Container images
- 849
- deployed by those charts
- Fix available
- 3 of 3
- affected packages
libopenssl-1_1-devel-1.1.1q-1.1 on GA media
Carried by container images the latest versions of 862 of 17,787 indexed charts deploy, on 849 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| opensslapk | 1.1.1i-r0, 1.1.1j-r0, 1.1.1k-r0, 1.1.1l-r0+6 more | 1.1.1q-r0 | 457 |
| openssldeb | 1.1.0g-2ubuntu4.1, 1.1.0g-2ubuntu4.3, 1.1.1-1ubuntu2.1~18.04.4, 1.1.1-1ubuntu2.1~18.04.5+36 more | 1.1.1-1ubuntu2.1~18.04.20, 1.1.1-1ubuntu2.fips.2.1~18.04.20, 1.1.1f-1ubuntu2.16, 1.1.1f-1ubuntu2.fips.16+1 more | 382 |
| openssl-1_1rpm | 1.1.0i-14.6.1, 1.1.0i-lp151.8.3.1, 1.1.1d-11.6.1 | 1.1.0i-150100.14.36.1, 1.1.1d-150200.11.51.1, 1.1.1q-1.1 | 10 |
- OSV records
- ALPINE-CVE-2022-2097UBUNTU-CVE-2022-2097openSUSE-SU-2024:12179-1SUSE-SU-2022:2311-1SUSE-SU-2022:2328-1
- Also known as
- USN-5502-1
Charts affected
862 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| kibanawiremindVerified publisher | 8.5.23 | 1 of 2See more | 6,323 |
| kafka-connect-uiwitcom-gmbh | 0.5.0 | 1 of 2See more | 2,506 |
| mrtg-backendwitcom-gmbh | 0.7.0 | 1 of 2See more | 2,616 |
| powerdnsadminwitcom-gmbh | 0.3.4 | 1 of 1See more | 2,643 |
| workadventureworkadventure | 1.1.0 | 2 of 9See more | 16,083 |
| default-backendwyrihaximusnetVerified publisher | 1.1.0 | 1 of 1See more | 2,535 |
| skoonerxdVerified publisher | 1.1.0 | 1 of 1See more | 1,752 |
| rawfile-csiymatrixVerified publisher | 0.2.1 | 1 of 4See more | 7,972 |
| zahori-schedulerzahoriVerified publisher | 1.0.1 | 1 of 1See more | 2,464 |
| posthogzeet | 0.23.2 | 1 of 9See more | 3,697 |
| alertmanager-matrix-forwarderzloi-space | 1.0.1 | 1 of 2See more | 3,118 |
| clickhousezloi-space | 1.2.0 | 2 of 3See more | 9,250 |
Container images carrying it
849 by charts deploying them
A fixed version is listed for 3 of the 3 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| cfcontainerization/ | 82fa261c18a8 | openssl-1_1 | 1.1.1q-1.1 | 1 |
| cfcontainerization/ | 58fb1c173a46 | openssl-1_1 | 1.1.1q-1.1 | 1 |
| cfcontainerization/ | 7366b11c5fa5 | openssl-1_1 | 1.1.0i-150100.14.36.1 | 1 |
| cfcontainerization/ | 43131dbc0c8f | openssl-1_1 | 1.1.0i-150100.14.36.1 | 1 |
| chaosnative/ | 07b82a82a702 | openssl | 1.1.1q-r0 | 1 |
| chetangautamm/ | e7f7049e1544 | openssl | 1.1.1f-1ubuntu2.16 | 1 |
| chirpstack/ | e0b23dfd24d6 | openssl | 1.1.1q-r0 | 1 |
| chirpstack/ | ce3f2cdca8a9 | openssl | 1.1.1q-r0 | 1 |
| chirpstack/ | c98d7fe06bce | openssl | 1.1.1q-r0 | 1 |
| circleci/ | 9bdc62f02162 | openssl | 1.1.1f-1ubuntu2.fips.16 | 1 |
| clastix/ | 87fabaccb3a6 | openssl | 1.1.1q-r0 | 1 |
| clastix/ | d0376d87ac6b | openssl | 1.1.1q-r0 | 1 |
| clickhouse/ | 1ffa82edee00 | openssl | 1.1.1f-1ubuntu2.fips.16 | 1 |
| clickhouse/ | 2e6587b81a26 | openssl | 1.1.1f-1ubuntu2.fips.16 | 1 |
| clickhouse/ | 512bb8a21483 | openssl | 1.1.1f-1ubuntu2.fips.16 | 1 |
| cloudecho/ | f76ede067ab9 | openssl | 1.1.1q-r0 | 1 |
| cloudentity/ | 9402ec4b5016 | openssl | 1.1.1q-r0 | 1 |
| cloudentity/ | 8a1890eb8265 | openssl | 1.1.1q-r0 | 1 |
| cloudentity/ | ee83cdd45b7b | openssl | 1.1.1q-r0 | 1 |
| cloudentity/ | 5728654cecb7 | openssl | 1.1.1q-r0 | 1 |
| cloudentity/ | 8ca94ae6acf4 | openssl | 1.1.1q-r0 | 1 |
| cloudentity/ | c04eb10c77b7 | openssl | 1.1.1q-r0 | 1 |
| cloudve/ | af56e77ca587 | openssl | 1.1.1-1ubuntu2.1~18.04.20 | 1 |
| cloudve/ | d79c1c5881c0 | openssl | 1.1.1-1ubuntu2.1~18.04.20 | 1 |
| contribsys/ | 5f9a23ee4e86 | openssl | 1.1.1q-r0 | 1 |
| cortezaproject/ | 8eb7a26605c9 | openssl | 1.1.1f-1ubuntu2.fips.16 | 1 |
| countly/ | e3c238248f99 | openssl | 1.1.1f-1ubuntu2.16 | 1 |
| cradlepoint/ | 8f5720b0cd03 | openssl | 1.1.1-1ubuntu2.1~18.04.20 | 1 |
| crazymax/ | 042536a06596 | openssl | 1.1.1q-r0 | 1 |
| cribl/ | 762747cb6796 | openssl | 1.1.1-1ubuntu2.1~18.04.20 | 1 |
| curlimages/ | a37d88a5b626 | openssl | 1.1.1q-r0 | 1 |
| curlimages/ | e83fef2d5a03 | openssl | 1.1.1q-r0 | 1 |
| daskdev/ | 052630f5ca04 | openssl | 1.1.1-1ubuntu2.1~18.04.20 | 1 |
| dasmeta/ | fa657960dfec | openssl | 1.1.1-1ubuntu2.fips.2.1~18.04.20 | 1 |
| datalust/ | 3de34aed5642 | openssl | 1.1.1f-1ubuntu2.fips.16 | 1 |
| datasaker/ | 2542ee73be51 | openssl | 1.1.1q-r0 | 1 |
| datasaker/ | d6d2eb48589d | openssl | 1.1.1q-r0 | 1 |
| datasaker/ | 1b95913b6729 | openssl | 1.1.1q-r0 | 1 |
| datasaker/ | 2f38720a637d | openssl | 1.1.1q-r0 | 1 |
| dchesterton/ | cc70f2238aa9 | openssl | 1.1.1q-r0 | 1 |
| ddosify/ | 181965edb12e | openssl | 1.1.1q-r0 | 1 |
| ddosify/ | a97a1b8a66af | openssl | 1.1.1q-r0 | 1 |
| deepflowce/ | bc1882f75c18 | openssl | 1.1.1f-1ubuntu2.fips.16 | 1 |
| dellcloud/ | 02fc234353a9 | openssl | 1.1.1f-1ubuntu2.16 | 1 |
| dellcloud/ | 4d2eb25b9225 | openssl | 1.1.1f-1ubuntu2.16 | 1 |
| deluan/ | 4e9ae3bff6aa | openssl | 1.1.1q-r0 | 1 |
| denisshav/ | b97cc69fbac6 | openssl | 1.1.1q-r0 | 1 |
| devopstales/ | 42c40a0e9f1b | openssl | 1.1.1q-r0 | 1 |
| deyaeddin/ | 797b0d06210a | openssl | 1.1.1q-r0 | 1 |
| dgraziotin/ | 38f2de42bed0 | openssl | 1.1.1f-1ubuntu2.fips.16 | 1 |