StackRadar

CVE-2022-23471

Medium

Advisory

Published 7 Dec 2022In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.7
base score, highest
EPSS
0.010
61st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
175
of 17,781 indexed, latest versions
Container images
156
deployed by those charts
Fix available
1 of 1
affected package

containerd CRI stream server vulnerable to host memory exhaustion via terminal

Carried by container images the latest versions of 175 of 17,781 indexed charts deploy, on 156 images.

Affected packageAffected versionsFixed inImages
github.com/containerd/containerdgolangv1.3.0, v1.3.2, v1.3.3, v1.3.4+27 more1.5.16, 1.6.12156
OSV records
GHSA-2qjp-425j-52j9
Also known as
GO-2022-1147

Charts affected

175 by stars
ChartLatestAffected imagesRadar Score
helm-controllerazureorkestra0.1.12 of 2See more

helm-controller azureorkestra 0.1.1

2 of the 2 container images this version deploys carry CVE-2022-23471.

Container imageDigestPackageFixed in
fluxcd/helm-controller:v0.9.092b891e495d8
github.com/containerd/containerd@v1.4.3
1.5.16
fluxcd/source-controller:v0.10.031a8c79a6803
github.com/containerd/containerd@v1.4.3
1.5.16

Open the chart page →

7,705
prometheusazureorkestra14.8.01 of 6See more

prometheus azureorkestra 14.8.0

1 of the 6 container images this version deploys carry CVE-2022-23471.

Container imageDigestPackageFixed in
quay.io/prometheus/prometheus:v2.26.038d40a760569
github.com/containerd/containerd@v1.4.3
1.5.16

Open the chart page →

9,661
balance-registrationbalance-registration0.1.01 of 4See more

balance-registration balance-registration 0.1.0

1 of the 4 container images this version deploys carry CVE-2022-23471.

Container imageDigestPackageFixed in
conduction/balance-registration-php:devc36094a41369
github.com/containerd/containerd@v1.3.2
1.5.16

Open the chart page →

8,408
berichtserviceberichtservice1.0.01 of 3See more

berichtservice berichtservice 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-23471.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/berichtservice-php:latestee6a21e66ff0
github.com/containerd/containerd@v1.3.2
1.5.16

Open the chart page →

7,342
checkin-componentcheckin-component0.1.01 of 4See more

checkin-component checkin-component 0.1.0

1 of the 4 container images this version deploys carry CVE-2022-23471.

Container imageDigestPackageFixed in
conduction/checkin-component-php:dev3423845692c1
github.com/containerd/containerd@v1.3.2
1.5.16

Open the chart page →

8,408
cp4d-deployercloud-native-toolkit1.0.01 of 1See more

cp4d-deployer cloud-native-toolkit 1.0.0

1 of the 1 container images this version deploys carry CVE-2022-23471.

Container imageDigestPackageFixed in
quay.io/cloudnativetoolkit/cloud-pak-deployer:latest13aaae779248
github.com/containerd/containerd@v1.5.1
1.5.16

Open the chart page →

25,151
ibm-toolkit-installcloud-native-toolkit0.3.01 of 1See more

ibm-toolkit-install cloud-native-toolkit 0.3.0

1 of the 1 container images this version deploys carry CVE-2022-23471.

Container imageDigestPackageFixed in
quay.io/ibmgaragecloud/cli-tools:v0.159663f06adcb1
github.com/containerd/containerd@v1.3.2
1.5.16

Open the chart page →

6,695
iteration-zerocloud-native-toolkit0.2.01 of 1See more

iteration-zero cloud-native-toolkit 0.2.0

1 of the 1 container images this version deploys carry CVE-2022-23471.

Container imageDigestPackageFixed in
quay.io/cloudnativetoolkit/cli-tools:v1.1-v1.8.2d6fd2a9e3273
github.com/containerd/containerd@v1.6.1
1.6.12

Open the chart page →

6,921
galaxykubemancloudve2.10.11 of 7See more

galaxykubeman cloudve 2.10.1

1 of the 7 container images this version deploys carry CVE-2022-23471.

Container imageDigestPackageFixed in
galaxy/cloudman-server:lateste5c265fe9fcd
github.com/containerd/containerd@v1.6.6
1.6.12

Open the chart page →

16,069
door-agentcnoVerified publisher3.0.151 of 15See more

door-agent cno 3.0.15

1 of the 15 container images this version deploys carry CVE-2022-23471.

Container imageDigestPackageFixed in
beopenit/door-helm:v3.0.1b4d9f9bee224
github.com/containerd/containerd@v1.4.11
1.5.16

Open the chart page →

19,338
cgrccommongroundregistratiecomponent0.1.01 of 3See more

cgrc commongroundregistratiecomponent 0.1.0

1 of the 3 container images this version deploys carry CVE-2022-23471.

Container imageDigestPackageFixed in
conduction/cgrc-php:dev25415534d245
github.com/containerd/containerd@v1.3.2
1.5.16

Open the chart page →

7,572
conduction-uiconduction-ui0.1.01 of 6See more

conduction-ui conduction-ui 0.1.0

1 of the 6 container images this version deploys carry CVE-2022-23471.

Container imageDigestPackageFixed in
conduction/conduction-ui-php:dev2744565516e8
github.com/containerd/containerd@v1.3.2
1.5.16

Open the chart page →

12,907
betaalservicecontacten-catalog1.0.01 of 3See more

betaalservice contacten-catalog 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-23471.

Container imageDigestPackageFixed in
conduction/betaalservice-php:latestece1ab544c57
github.com/containerd/containerd@v1.3.2
1.5.16

Open the chart page →

7,209
contactmoment-componentcontactmoment-component0.1.01 of 4See more

contactmoment-component contactmoment-component 0.1.0

1 of the 4 container images this version deploys carry CVE-2022-23471.

Container imageDigestPackageFixed in
conduction/contactmoment-component-php:deve1d4ad1e22a8
github.com/containerd/containerd@v1.3.2
1.5.16

Open the chart page →

8,408
wazuhcsic-charts0.1.01 of 4See more

wazuh csic-charts 0.1.0

1 of the 4 container images this version deploys carry CVE-2022-23471.

Container imageDigestPackageFixed in
wazuh/wazuh-manager:4.4.121994f40e0da
github.com/containerd/containerd@v1.3.3
1.5.16

Open the chart page →

13,852
grafana-agentdandydev-chartsVerified publisher0.19.21 of 1See more

grafana-agent dandydev-charts 0.19.2

1 of the 1 container images this version deploys carry CVE-2022-23471.

Container imageDigestPackageFixed in
grafana/agent:v0.20.0825c09373d27
github.com/containerd/containerd@v1.5.0-beta.4
1.5.16

Open the chart page →

3,238
cloudwatch-agent-prometheusdasmeta0.2.21 of 1See more

cloudwatch-agent-prometheus dasmeta 0.2.2

1 of the 1 container images this version deploys carry CVE-2022-23471.

Container imageDigestPackageFixed in
amazon/cloudwatch-agent:1.247350.0b251780e745d1783c93
github.com/containerd/containerd@v1.3.3
1.5.16

Open the chart page →

2,977
ambassador-operatordatawire0.3.01 of 1See more

ambassador-operator datawire 0.3.0

1 of the 1 container images this version deploys carry CVE-2022-23471.

Container imageDigestPackageFixed in
datawire/ambassador-operator:v1.3.0f95ae710d75c
github.com/containerd/containerd@v1.3.0
1.5.16

Open the chart page →

7,486
argocddevtron1.8.11 of 3See more

argocd devtron 1.8.1

1 of the 3 container images this version deploys carry CVE-2022-23471.

Container imageDigestPackageFixed in
argoproj/argocd:v1.8.1830e86cacefd
github.com/containerd/containerd@v1.3.4
1.5.16

Open the chart page →

10,466
argocd-certificate-refreshdevtron0.10.81 of 1See more

argocd-certificate-refresh devtron 0.10.8

1 of the 1 container images this version deploys carry CVE-2022-23471.

Container imageDigestPackageFixed in
quay.io/devtron/argocd-cert-refresh:v102b6db27eaf3d
github.com/containerd/containerd@v1.6.6
1.6.12

Open the chart page →

12,949
devtron-enterprisedevtron48.0.01 of 28See more

devtron-enterprise devtron 48.0.0

1 of the 28 container images this version deploys carry CVE-2022-23471.

Container imageDigestPackageFixed in
quay.io/devtron/kubectl:latest2ad610626658
github.com/containerd/containerd@v1.6.6
1.6.12

Open the chart page →

68,240
argocddevtron-labs1.8.11 of 3See more

argocd devtron-labs 1.8.1

1 of the 3 container images this version deploys carry CVE-2022-23471.

Container imageDigestPackageFixed in
argoproj/argocd:v1.8.1830e86cacefd
github.com/containerd/containerd@v1.3.4
1.5.16

Open the chart page →

10,466
argocd-certificate-refreshdevtron-labs0.10.81 of 1See more

argocd-certificate-refresh devtron-labs 0.10.8

1 of the 1 container images this version deploys carry CVE-2022-23471.

Container imageDigestPackageFixed in
quay.io/devtron/argocd-cert-refresh:v102b6db27eaf3d
github.com/containerd/containerd@v1.6.6
1.6.12

Open the chart page →

12,949
devtron-enterprisedevtron-labs48.0.01 of 28See more

devtron-enterprise devtron-labs 48.0.0

1 of the 28 container images this version deploys carry CVE-2022-23471.

Container imageDigestPackageFixed in
quay.io/devtron/kubectl:latest2ad610626658
github.com/containerd/containerd@v1.6.6
1.6.12

Open the chart page →

68,240
devtron-operatordevtron-labs0.23.31 of 11See more

devtron-operator devtron-labs 0.23.3

1 of the 11 container images this version deploys carry CVE-2022-23471.

Container imageDigestPackageFixed in
quay.io/devtron/kubectl:latest2ad610626658
github.com/containerd/containerd@v1.6.6
1.6.12

Open the chart page →

32,902
docparserdocparser0.1.01 of 4See more

docparser docparser 0.1.0

1 of the 4 container images this version deploys carry CVE-2022-23471.

Container imageDigestPackageFixed in
conduction/docparser-php:devb6f95c8ead7d
github.com/containerd/containerd@v1.3.2
1.5.16

Open the chart page →

8,408
furan2dollarshaveclubVerified publisher0.2.01 of 1See more

furan2 dollarshaveclub 0.2.0

1 of the 1 container images this version deploys carry CVE-2022-23471.

Container imageDigestPackageFixed in
dollarshaveclub/furan2:master14a257836529
github.com/containerd/containerd@v1.4.8
1.5.16

Open the chart page →

3,046
drogue-cloud-metricsdrogue-iotVerified publisher0.7.111 of 8See more

drogue-cloud-metrics drogue-iot 0.7.11

1 of the 8 container images this version deploys carry CVE-2022-23471.

Container imageDigestPackageFixed in
quay.io/prometheus/prometheus:v2.26.038d40a760569
github.com/containerd/containerd@v1.4.3
1.5.16

Open the chart page →

13,558
temporaldtrdnk-helm-chartsVerified publisher0.35.01 of 13See more

temporal dtrdnk-helm-charts 0.35.0

1 of the 13 container images this version deploys carry CVE-2022-23471.

Container imageDigestPackageFixed in
quay.io/prometheus/prometheus:v2.31.1a8779cfe553e
github.com/containerd/containerd@v1.5.4
1.5.16

Open the chart page →

20,205
eav-componenteav-component1.0.01 of 3See more

eav-component eav-component 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-23471.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/eav-component-php:latest24bbca4a52a8
github.com/containerd/containerd@v1.3.2
1.5.16

Open the chart page →

7,255
education-componenteducation-component1.0.01 of 3See more

education-component education-component 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-23471.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/education-component-php:latestda6b05a1a601
github.com/containerd/containerd@v1.3.2
1.5.16

Open the chart page →

7,327
eherkenning-uieherkenning-ui1.0.01 of 3See more

eherkenning-ui eherkenning-ui 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-23471.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/eherkenning-ui-php:latestdeed102b4255
github.com/containerd/containerd@v1.3.2
1.5.16

Open the chart page →

7,510
faasnetfaasnet0.0.41 of 5See more

faasnet faasnet 0.0.4

1 of the 5 container images this version deploys carry CVE-2022-23471.

Container imageDigestPackageFixed in
simpleidserver/faasprometheus:0.0.425e378d57d78
github.com/containerd/containerd@v1.5.4
1.5.16

Open the chart page →

7,617
activityrelayfedihost0.1.41 of 2See more

activityrelay fedihost 0.1.4

1 of the 2 container images this version deploys carry CVE-2022-23471.

Container imageDigestPackageFixed in
quay.io/argoproj/argocd:v2.4.115b6701d8fb31
github.com/containerd/containerd@v1.5.9
1.5.16

Open the chart page →

13,450
azure-pipelines-agentfermosit0.0.11 of 1See more

azure-pipelines-agent fermosit 0.0.1

1 of the 1 container images this version deploys carry CVE-2022-23471.

Container imageDigestPackageFixed in
jmferrer/azure-devops-agent:latest030f68ec6998
github.com/containerd/containerd@v1.3.0
1.5.16

Open the chart page →

14,673
kafkagengxiankun-charts0.2.01 of 1See more

kafka gengxiankun-charts 0.2.0

1 of the 1 container images this version deploys carry CVE-2022-23471.

Container imageDigestPackageFixed in
wurstmeister/kafka:latest2d4bbf9cc83d
github.com/containerd/containerd@v1.6.1
1.6.12

Open the chart page →

4,547
grafregistratiecomponentgrafregistratiecomponent1.0.01 of 3See more

grafregistratiecomponent grafregistratiecomponent 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-23471.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/grafregistratiecomponent-php:latest35225eaa87ab
github.com/containerd/containerd@v1.3.2
1.5.16

Open the chart page →

7,510
siembolgresearch0.1.61 of 4See more

siembol gresearch 0.1.6

1 of the 4 container images this version deploys carry CVE-2022-23471.

Container imageDigestPackageFixed in
alpine/k8s:1.18.16a41efe02a041
github.com/containerd/containerd@v1.4.4
1.5.16

Open the chart page →

14,312
helm-airportshelm-airports0.1.01 of 7See more

helm-airports helm-airports 0.1.0

1 of the 7 container images this version deploys carry CVE-2022-23471.

Container imageDigestPackageFixed in
wurstmeister/kafka:latest2d4bbf9cc83d
github.com/containerd/containerd@v1.6.1
1.6.12

Open the chart page →

12,696
airports-kafkahelm-airports-dan0.1.01 of 2See more

airports-kafka helm-airports-dan 0.1.0

1 of the 2 container images this version deploys carry CVE-2022-23471.

Container imageDigestPackageFixed in
wurstmeister/kafka:latest2d4bbf9cc83d
github.com/containerd/containerd@v1.6.1
1.6.12

Open the chart page →

4,547
helm-airportshelm-airports-dan0.1.01 of 7See more

helm-airports helm-airports-dan 0.1.0

1 of the 7 container images this version deploys carry CVE-2022-23471.

Container imageDigestPackageFixed in
wurstmeister/kafka:latest2d4bbf9cc83d
github.com/containerd/containerd@v1.6.1
1.6.12

Open the chart page →

5,573
airports-kafkahelm-airports-kafka0.1.01 of 2See more

airports-kafka helm-airports-kafka 0.1.0

1 of the 2 container images this version deploys carry CVE-2022-23471.

Container imageDigestPackageFixed in
wurstmeister/kafka:latest2d4bbf9cc83d
github.com/containerd/containerd@v1.6.1
1.6.12

Open the chart page →

4,547
dregsyhelm-charts-nr0.1.51 of 1See more

dregsy helm-charts-nr 0.1.5

1 of the 1 container images this version deploys carry CVE-2022-23471.

Container imageDigestPackageFixed in
xelalex/dregsy:0.4.3574054e1c417
github.com/containerd/containerd@v1.6.3
1.6.12

Open the chart page →

2,969
kore-boardimprowisedVerified publisher0.5.81 of 4See more

kore-board improwised 0.5.8

1 of the 4 container images this version deploys carry CVE-2022-23471.

Container imageDigestPackageFixed in
ghcr.io/kore3lab/kore-board.terminal:v0.5.5f52e66eff50b
github.com/containerd/containerd@v1.6.6
1.6.12

Open the chart page →

16,212
instemmingserviceinstemmingservice1.0.01 of 3See more

instemmingservice instemmingservice 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-23471.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/instemmingservice-php:latest4ffe222b3e3a
github.com/containerd/containerd@v1.3.2
1.5.16

Open the chart page →

7,510
missing-container-metricsjimdo-missing-container-metrics0.5.01 of 1See more

missing-container-metrics jimdo-missing-container-metrics 0.5.0

1 of the 1 container images this version deploys carry CVE-2022-23471.

Container imageDigestPackageFixed in
dmilhdef/missing-container-metrics:v0.21.0fada1a6e7638
github.com/containerd/containerd@v1.4.4
1.5.16

Open the chart page →

2,409
librephotosk8sonlabVerified publisher1.1.61 of 7See more

librephotos k8sonlab 1.1.6

1 of the 7 container images this version deploys carry CVE-2022-23471.

Container imageDigestPackageFixed in
alpine/k8s:1.22.600ac10bcb759
github.com/containerd/containerd@v1.5.9
1.5.16

Open the chart page →

14,801
kiaekiae0.1.61 of 9See more

kiae kiae 0.1.6

1 of the 9 container images this version deploys carry CVE-2022-23471.

Container imageDigestPackageFixed in
grafana/promtail:2.6.1072527b12cdf
github.com/containerd/containerd@v1.5.9
1.5.16

Open the chart page →

19,168
cadvisorkrakazyabraVerified publisher1.0.11 of 1See more

cadvisor krakazyabra 1.0.1

1 of the 1 container images this version deploys carry CVE-2022-23471.

Container imageDigestPackageFixed in
gcr.io/cadvisor/cadvisor:v0.40.0135327c978de
github.com/containerd/containerd@v1.5.2
1.5.16

Open the chart page →

3,176
kubebbkubebb0.0.11 of 1See more

kubebb kubebb 0.0.1

1 of the 1 container images this version deploys carry CVE-2022-23471.

Container imageDigestPackageFixed in
kubebb/core:lateste366c34a9b8d
github.com/containerd/containerd@v1.6.8
1.6.12

Open the chart page →

1,749

Container images carrying it

156 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
quay.io/prometheus/prometheus:v2.34.0b37103e03399
github.com/containerd/containerd@v1.6.1
1.6.12
1
quay.io/redhat-appstudio/appstudio-utils:dbbdd82734232e6289e8fbae5b4c858481a7c0577b4202c25b67
github.com/containerd/containerd@v1.5.1
1.5.16
1
quay.io/rht-labs/stack-do500:3.0.86ba82beff18e
github.com/containerd/containerd@v1.4.3
1.5.16
1
quay.io/solo-io/discovery:0.0.0-fork5b62aaade3c9
github.com/containerd/containerd@v1.4.13
1.5.16
1
quay.io/solo-io/gloo:0.0.0-fork9a6c84560d44
github.com/containerd/containerd@v1.4.13
1.5.16
1
registry.gitlab.com/gitlab-org/cloud-native/gitlab-operator:0.5.136b19b72120e
github.com/containerd/containerd@v1.5.7
1.5.16
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.