CVE-2022-2509

High

Advisory

Published 1 Aug 2022In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.019; 78th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 613; of 17,787 indexed, latest versions
Container images: 581; deployed by those charts
Fix available: 3 of 3; affected packages

Red Hat Security Advisory: gnutls security update

Carried by container images the latest versions of 613 of 17,787 indexed charts deploy, on 581 images.

Affected package	Affected versions	Fixed in	Images
gnutls28deb	3.5.17-1ubuntu1, 3.5.18-1ubuntu1, 3.5.18-1ubuntu1.1, 3.5.18-1ubuntu1.2+9 more	3.5.18-1ubuntu1.6, 3.6.13-2ubuntu1.7, 3.7.1-5+deb11u2, 3.7.3-4ubuntu1.1	469
gnutlsrpm	3.6.5-2.el8, 3.6.7-14.4.1, 3.6.7-lp151.2.3.1, 3.6.8-8.el8+7 more	0:3.6.16-5.el8_6, 3.6.7-150200.14.19.2, 3.7.7-1.1	86
gnutlsapk	3.7.1-r0, 3.7.6-r0	3.7.1-r1, 3.7.7-r0	26

OSV records: ALPINE-CVE-2022-2509 RHSA-2022:7105 UBUNTU-CVE-2022-2509 DSA-5203-1 openSUSE-SU-2024:12233-1 SUSE-SU-2022:2882-1
Also known as: USN-5550-1

Charts affected

613 by stars

Chart

Latest

Affected images

Radar Score

drillwearefrank

1.3.6

1 of 3 See more

drill wearefrank 1.3.6

1 of the 3 container images this version deploys carry CVE-2022-2509.

Container image	Digest	Package	Fixed in
apache/drill :1.21.1	1f96558fd292	gnutls28@3.7.1-5+deb11u1	3.7.1-5+deb11u2

Open the chart page →

9,399

webhookiewebhookie

0.1.2

1 of 1 See more

webhookie webhookie 0.1.2

1 of the 1 container images this version deploys carry CVE-2022-2509.

Container image	Digest	Package	Fixed in
hookiesolutions/webhookie :latest	0629694246ba	gnutls28@3.6.13-2ubuntu1.6	3.6.13-2ubuntu1.7

Open the chart page →

14,420

webhookie-allwebhookie

0.1.2

2 of 3 See more

webhookie-all webhookie 0.1.2

2 of the 3 container images this version deploys carry CVE-2022-2509.

Container image	Digest	Package	Fixed in
hookiesolutions/webhookie :latest	0629694246ba	gnutls28@3.6.13-2ubuntu1.6	3.6.13-2ubuntu1.7
quay.io/keycloak/keycloak :14.0.0	3029dc0f1d38	gnutls@3.6.14-8.el8_3	0:3.6.16-5.el8_6

Open the chart page →

28,699

webresourcecataloguswebresourcecatalogus

1.1.0

1 of 4 See more

webresourcecatalogus webresourcecatalogus 1.1.0

1 of the 4 container images this version deploys carry CVE-2022-2509.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/webresourcecatalogus-nginx :latest	6de60c83128d	gnutls28@3.7.1-5	3.7.1-5+deb11u2

Open the chart page →

7,552

emissary-ingresswenerme

8.12.2

1 of 2 See more

emissary-ingress wenerme 8.12.2

1 of the 2 container images this version deploys carry CVE-2022-2509.

Container image	Digest	Package	Fixed in
istio/kubectl :1.5.10	dbb7726d1bf0	gnutls28@3.5.18-1ubuntu1.4	3.5.18-1ubuntu1.6

Open the chart page →

10,857

longhornwenerme

1.2.3

1 of 2 See more

longhorn wenerme 1.2.3

1 of the 2 container images this version deploys carry CVE-2022-2509.

Container image	Digest	Package	Fixed in
longhornio/longhorn-manager :v1.2.3	dca34321452c	gnutls28@3.6.13-2ubuntu1.6	3.6.13-2ubuntu1.7

Open the chart page →

15,287

miniowenerme

8.0.10

1 of 1 See more

minio wenerme 8.0.10

1 of the 1 container images this version deploys carry CVE-2022-2509.

Container image	Digest	Package	Fixed in
minio/minio :RELEASE.2021-02-14T04-01-33Z	bd11edda91f3	gnutls@3.6.14-7.el8_3	0:3.6.16-5.el8_6

Open the chart page →

6,915

minio-standalonewenerme

1.0.2

1 of 1 See more

minio-standalone wenerme 1.0.2

1 of the 1 container images this version deploys carry CVE-2022-2509.

Container image	Digest	Package	Fixed in
minio/minio :RELEASE.2022-01-04T07-41-07Z	1484c87239ea	gnutls@3.6.16-4.el8	0:3.6.16-5.el8_6

Open the chart page →

6,138

sambawenerme

1.0.0

1 of 1 See more

samba wenerme 1.0.0

1 of the 1 container images this version deploys carry CVE-2022-2509.

Container image	Digest	Package	Fixed in
wener/samba :4.13.3	9a42bae466d4	gnutls@3.7.1-r0	3.7.1-r1

Open the chart page →

2,555

vaultwardenwitcom-gmbh

0.2.0

1 of 2 See more

vaultwarden witcom-gmbh 0.2.0

1 of the 2 container images this version deploys carry CVE-2022-2509.

Container image	Digest	Package	Fixed in
vaultwarden/server :1.25.2	39f34c5159a2	gnutls28@3.7.1-5+deb11u1	3.7.1-5+deb11u2

Open the chart page →

1,585

wp-gats-helmwordpress-gatsby

0.0.1

1 of 3 See more

wp-gats-helm wordpress-gatsby 0.0.1

1 of the 3 container images this version deploys carry CVE-2022-2509.

Container image	Digest	Package	Fixed in
library/wordpress :6.0.0-php8.0-apache	277c6c25980f	gnutls28@3.7.1-5	3.7.1-5+deb11u2

Open the chart page →

2,021

workshop-pipelinesworkshop-pipelines

0.1.6

1 of 2 See more

workshop-pipelines workshop-pipelines 0.1.6

1 of the 2 container images this version deploys carry CVE-2022-2509.

Container image	Digest	Package	Fixed in
quay.io/maximilianopizarro/workshop-pipelines :latest	e383ba3e0966	gnutls@3.6.16-4.el8	0:3.6.16-5.el8_6

Open the chart page →

11,592

clickhousezloi-space

1.2.0

2 of 3 See more

clickhouse zloi-space 1.2.0

2 of the 3 container images this version deploys carry CVE-2022-2509.

Container image	Digest	Package	Fixed in
yandex/clickhouse-client :21.3	863f94a0f607	gnutls28@3.5.18-1ubuntu1.5	3.5.18-1ubuntu1.6
yandex/clickhouse-server :21.3.20	4eccfffb01d7	gnutls28@3.6.13-2ubuntu1.6	3.6.13-2ubuntu1.7

Open the chart page →

9,250

Container images carrying it

581 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container image	Digest	Package	Fixed in	Used by
gcr.io/tfx-oss-public/ml_metadata_store_server :1.5.0	db8691752b4c	gnutls28@3.5.18-1ubuntu1.5	3.5.18-1ubuntu1.6	1
ghcr.io/advplyr/audiobookshelf :2.0.3	140aed2752c3	gnutls@3.7.1-r0	3.7.1-r1	1
ghcr.io/alexanderbabel/database-s3-backup :1.3.3	3191b771a6f2	gnutls@3.7.1-r0	3.7.1-r1	1
ghcr.io/appuio/cloud-portal :v0.2.1	8c7e08d32d70	gnutls28@3.7.1-5	3.7.1-5+deb11u2	1
ghcr.io/cfcontainerizationbot/kubecf-kubectl :v1.19.2	61daa1bba5cb	gnutls@3.6.7-14.4.1	3.6.7-150200.14.19.2	1
ghcr.io/chatwoot/pgvector :14.4.0-debian-11-r0	f759f1510d09	gnutls28@3.7.1-5	3.7.1-5+deb11u2	1
ghcr.io/conductionnl/berichtservice-nginx :latest	833d26df3840	gnutls28@3.7.1-5	3.7.1-5+deb11u2	1
ghcr.io/conductionnl/contactcatalogus-nginx :latest	480c84fa9e63	gnutls28@3.7.1-5	3.7.1-5+deb11u2	1
ghcr.io/conductionnl/digispoof-interface-nginx :latest	8fa4597217a4	gnutls28@3.7.1-5	3.7.1-5+deb11u2	1
ghcr.io/conductionnl/eav-component-nginx :latest	d785c893096c	gnutls28@3.7.1-5	3.7.1-5+deb11u2	1
ghcr.io/conductionnl/education-component-nginx :latest	38900bc76ee0	gnutls28@3.7.1-5	3.7.1-5+deb11u2	1
ghcr.io/conductionnl/medewerkercatalogus-nginx :latest	06c3b27462e6	gnutls28@3.7.1-5	3.7.1-5+deb11u2	1
ghcr.io/conductionnl/skeleton-pip :dev	ce1ebe9387a2	gnutls28@3.7.1-5	3.7.1-5+deb11u2	1
ghcr.io/conductionnl/user-component-nginx :latest	b721579df8c3	gnutls28@3.7.1-5	3.7.1-5+deb11u2	1
ghcr.io/conductionnl/waardepapieren-nginx :latest	af31cf6cd59f	gnutls28@3.7.1-5	3.7.1-5+deb11u2	1
ghcr.io/conductionnl/webresourcecatalogus-nginx :latest	6de60c83128d	gnutls28@3.7.1-5	3.7.1-5+deb11u2	1
ghcr.io/crazy-max/samba :4.15.5	bed6f4ec2e82	gnutls@3.7.1-r0	3.7.1-r1	1
ghcr.io/ctron/ditto-operator :0.4.0	61a9bb81b85c	gnutls@3.6.16-4.el8	0:3.6.16-5.el8_6	1
ghcr.io/ctron/streamsheets-base :2.4.0	0cf25ed621e2	gnutls@3.6.14-8.el8_3	0:3.6.16-5.el8_6	1
ghcr.io/ctron/streamsheets-gateway :2.4.0	0635f17c9d2c	gnutls@3.6.14-8.el8_3	0:3.6.16-5.el8_6	1
ghcr.io/ctron/streamsheets-service-graphs :2.4.0	e34964e336c1	gnutls@3.6.14-8.el8_3	0:3.6.16-5.el8_6	1
ghcr.io/ctron/streamsheets-service-machines :2.4.0	0c5a3398d1e4	gnutls@3.6.14-8.el8_3	0:3.6.16-5.el8_6	1
ghcr.io/ctron/streamsheets-service-streams :2.4.0	8ba040e79ca0	gnutls@3.6.14-8.el8_3	0:3.6.16-5.el8_6	1
ghcr.io/data-fair/elasticsearch :7.17.1	aa45adaf59a7	gnutls28@3.6.13-2ubuntu1.6	3.6.13-2ubuntu1.7	1
ghcr.io/dgtlmoon/changedetection.io :0.39.4	f1ce4c56ccaa	gnutls28@3.7.1-5	3.7.1-5+deb11u2	1
ghcr.io/dodevops/azure-app-exporter/azure-app-exporter :0.1.38	b472877847f5	gnutls28@3.7.1-5	3.7.1-5+deb11u2	1
ghcr.io/drogue-iot/drogue-event-source :0.2.1	e2e812a4cf8e	gnutls@3.6.16-4.el8	0:3.6.16-5.el8_6	1
ghcr.io/drogue-iot/postgresql-pusher :0.2.1	c6bb121ced90	gnutls@3.6.16-4.el8	0:3.6.16-5.el8_6	1
ghcr.io/ducksify/pgdump-to-s3 :latest	c42c0946bd0f	gnutls28@3.7.1-5	3.7.1-5+deb11u2	1
ghcr.io/edgelesssys/coordinator :v0.5.0	bcd5b8d4c45c	gnutls28@3.5.18-1ubuntu1.4	3.5.18-1ubuntu1.6	1
ghcr.io/eshepelyuk/dckr/cmak-3.0.0.6 :1.2.0	90a34412c6b5	gnutls28@3.7.1-5+deb11u1	3.7.1-5+deb11u2	1
ghcr.io/ferama/vipien :v0.5.3	923a3f704b21	gnutls28@3.6.13-2ubuntu1.6	3.6.13-2ubuntu1.7	1
ghcr.io/fleeksoft/hbase/hdfs :3.3.3.2	ac62269785ac	gnutls28@3.7.1-5+deb11u1	3.7.1-5+deb11u2	1
ghcr.io/g0dscookie/aptly :latest	edd095d3c0ee	gnutls28@3.7.1-5	3.7.1-5+deb11u2	1
ghcr.io/haveagitgat/tdarr :2.00.18.2	3fbe4c29d14c	gnutls28@3.6.13-2ubuntu1.6	3.6.13-2ubuntu1.7	1
ghcr.io/helm/chartmuseum :v0.14.0	878ef6a31fa0	gnutls@3.7.1-r0	3.7.1-r1	1
ghcr.io/helm/chartmuseum :v0.15.0	c298183a5208	gnutls@3.7.6-r0	3.7.7-r0	1
ghcr.io/home-assistant/home-assistant :2022.5.4	ec6d67fbedfa	gnutls@3.7.1-r0	3.7.1-r1	1
ghcr.io/jenkins-x/nexus :0.1.37	8caf5289fe73	gnutls@3.6.8-11.el8_2	0:3.6.16-5.el8_6	1
ghcr.io/jr0dd/puppeteer :v13.3.2	6047599cd78e	gnutls28@3.6.13-2ubuntu1.6	3.6.13-2ubuntu1.7	1
ghcr.io/justarchinet/archisteamfarm :5.2.5.4	c7c0a52303cb	gnutls28@3.7.1-5	3.7.1-5+deb11u2	1
ghcr.io/k8s-at-home/apache-musicindex :v1.4.1-2	c9bd82dc5fda	gnutls28@3.6.13-2ubuntu1.6	3.6.13-2ubuntu1.7	1
ghcr.io/k8s-at-home/bazarr :v1.0.3	fdb5501cdfb9	gnutls28@3.6.13-2ubuntu1.6	3.6.13-2ubuntu1.7	1
ghcr.io/k8s-at-home/emby :v4.6.1.0	5c6b8f91f1c4	gnutls28@3.6.13-2ubuntu1.3	3.6.13-2ubuntu1.7	1
ghcr.io/k8s-at-home/haste-server :latest	827aa2f2389d	gnutls28@3.6.13-2ubuntu1.3	3.6.13-2ubuntu1.7	1
ghcr.io/k8s-at-home/jackett :v0.20.1316	3a4715b46aa2	gnutls28@3.6.13-2ubuntu1.6	3.6.13-2ubuntu1.7	1
ghcr.io/k8s-at-home/lidarr :v1.0.0.2255	54ebc1f90963	gnutls28@3.6.13-2ubuntu1.3	3.6.13-2ubuntu1.7	1
ghcr.io/k8s-at-home/network-ups-tools :v2.7.4-2479-g86a32237	cbd5d4cc1245	gnutls28@3.6.13-2ubuntu1.3	3.6.13-2ubuntu1.7	1
ghcr.io/k8s-at-home/nzbget :v21.1	e5571acd10ce	gnutls28@3.7.3-4ubuntu1	3.7.3-4ubuntu1.1	1
ghcr.io/k8s-at-home/nzbhydra2 :v3.14.2	ef3670f7e0a8	gnutls28@3.6.13-2ubuntu1.3	3.6.13-2ubuntu1.7	1