StackRadar

CVE-2022-2509

High

Advisory

Published 1 Aug 2022In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.019
78th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
613
of 17,787 indexed, latest versions
Container images
581
deployed by those charts
Fix available
3 of 3
affected packages

Red Hat Security Advisory: gnutls security update

Carried by container images the latest versions of 613 of 17,787 indexed charts deploy, on 581 images.

Affected packageAffected versionsFixed inImages
gnutls28deb3.5.17-1ubuntu1, 3.5.18-1ubuntu1, 3.5.18-1ubuntu1.1, 3.5.18-1ubuntu1.2+9 more3.5.18-1ubuntu1.6, 3.6.13-2ubuntu1.7, 3.7.1-5+deb11u2, 3.7.3-4ubuntu1.1469
gnutlsrpm3.6.5-2.el8, 3.6.7-14.4.1, 3.6.7-lp151.2.3.1, 3.6.8-8.el8+7 more0:3.6.16-5.el8_6, 3.6.7-150200.14.19.2, 3.7.7-1.186
gnutlsapk3.7.1-r0, 3.7.6-r03.7.1-r1, 3.7.7-r026
OSV records
ALPINE-CVE-2022-2509RHSA-2022:7105UBUNTU-CVE-2022-2509DSA-5203-1openSUSE-SU-2024:12233-1SUSE-SU-2022:2882-1
Also known as
USN-5550-1

Charts affected

613 by stars
ChartLatestAffected imagesRadar Score
drillwearefrank1.3.61 of 3See more

drill wearefrank 1.3.6

1 of the 3 container images this version deploys carry CVE-2022-2509.

Container imageDigestPackageFixed in
apache/drill:1.21.11f96558fd292
gnutls28@3.7.1-5+deb11u1
3.7.1-5+deb11u2

Open the chart page →

9,399
webhookiewebhookie0.1.21 of 1See more

webhookie webhookie 0.1.2

1 of the 1 container images this version deploys carry CVE-2022-2509.

Container imageDigestPackageFixed in
hookiesolutions/webhookie:latest0629694246ba
gnutls28@3.6.13-2ubuntu1.6
3.6.13-2ubuntu1.7

Open the chart page →

14,420
webhookie-allwebhookie0.1.22 of 3See more

webhookie-all webhookie 0.1.2

2 of the 3 container images this version deploys carry CVE-2022-2509.

Container imageDigestPackageFixed in
hookiesolutions/webhookie:latest0629694246ba
gnutls28@3.6.13-2ubuntu1.6
3.6.13-2ubuntu1.7
quay.io/keycloak/keycloak:14.0.03029dc0f1d38
gnutls@3.6.14-8.el8_3
0:3.6.16-5.el8_6

Open the chart page →

28,699
webresourcecataloguswebresourcecatalogus1.1.01 of 4See more

webresourcecatalogus webresourcecatalogus 1.1.0

1 of the 4 container images this version deploys carry CVE-2022-2509.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/webresourcecatalogus-nginx:latest6de60c83128d
gnutls28@3.7.1-5
3.7.1-5+deb11u2

Open the chart page →

7,552
emissary-ingresswenerme8.12.21 of 2See more

emissary-ingress wenerme 8.12.2

1 of the 2 container images this version deploys carry CVE-2022-2509.

Container imageDigestPackageFixed in
istio/kubectl:1.5.10dbb7726d1bf0
gnutls28@3.5.18-1ubuntu1.4
3.5.18-1ubuntu1.6

Open the chart page →

10,857
longhornwenerme1.2.31 of 2See more

longhorn wenerme 1.2.3

1 of the 2 container images this version deploys carry CVE-2022-2509.

Container imageDigestPackageFixed in
longhornio/longhorn-manager:v1.2.3dca34321452c
gnutls28@3.6.13-2ubuntu1.6
3.6.13-2ubuntu1.7

Open the chart page →

15,287
miniowenerme8.0.101 of 1See more

minio wenerme 8.0.10

1 of the 1 container images this version deploys carry CVE-2022-2509.

Container imageDigestPackageFixed in
minio/minio:RELEASE.2021-02-14T04-01-33Zbd11edda91f3
gnutls@3.6.14-7.el8_3
0:3.6.16-5.el8_6

Open the chart page →

6,915
minio-standalonewenerme1.0.21 of 1See more

minio-standalone wenerme 1.0.2

1 of the 1 container images this version deploys carry CVE-2022-2509.

Container imageDigestPackageFixed in
minio/minio:RELEASE.2022-01-04T07-41-07Z1484c87239ea
gnutls@3.6.16-4.el8
0:3.6.16-5.el8_6

Open the chart page →

6,138
sambawenerme1.0.01 of 1See more

samba wenerme 1.0.0

1 of the 1 container images this version deploys carry CVE-2022-2509.

Container imageDigestPackageFixed in
wener/samba:4.13.39a42bae466d4
gnutls@3.7.1-r0
3.7.1-r1

Open the chart page →

2,555
vaultwardenwitcom-gmbh0.2.01 of 2See more

vaultwarden witcom-gmbh 0.2.0

1 of the 2 container images this version deploys carry CVE-2022-2509.

Container imageDigestPackageFixed in
vaultwarden/server:1.25.239f34c5159a2
gnutls28@3.7.1-5+deb11u1
3.7.1-5+deb11u2

Open the chart page →

1,585
wp-gats-helmwordpress-gatsby0.0.11 of 3See more

wp-gats-helm wordpress-gatsby 0.0.1

1 of the 3 container images this version deploys carry CVE-2022-2509.

Container imageDigestPackageFixed in
library/wordpress:6.0.0-php8.0-apache277c6c25980f
gnutls28@3.7.1-5
3.7.1-5+deb11u2

Open the chart page →

2,021
workshop-pipelinesworkshop-pipelines0.1.61 of 2See more

workshop-pipelines workshop-pipelines 0.1.6

1 of the 2 container images this version deploys carry CVE-2022-2509.

Container imageDigestPackageFixed in
quay.io/maximilianopizarro/workshop-pipelines:lateste383ba3e0966
gnutls@3.6.16-4.el8
0:3.6.16-5.el8_6

Open the chart page →

11,592
clickhousezloi-space1.2.02 of 3See more

clickhouse zloi-space 1.2.0

2 of the 3 container images this version deploys carry CVE-2022-2509.

Container imageDigestPackageFixed in
yandex/clickhouse-client:21.3863f94a0f607
gnutls28@3.5.18-1ubuntu1.5
3.5.18-1ubuntu1.6
yandex/clickhouse-server:21.3.204eccfffb01d7
gnutls28@3.6.13-2ubuntu1.6
3.6.13-2ubuntu1.7

Open the chart page →

9,250

Container images carrying it

581 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
quay.io/fiware/canis-major:1.5.15bb40472e4ff5
gnutls@3.6.16-4.el8
0:3.6.16-5.el8_6
1
quay.io/fiware/endpoint-configuration-service:0.4.30dc38a87b844
gnutls@3.6.16-4.el8
0:3.6.16-5.el8_6
1
quay.io/fiware/orion-ld:1.0.1ea838e5b4051
gnutls@3.6.14-8.el8_3
0:3.6.16-5.el8_6
1
quay.io/fiware/trusted-issuers-registry:0.11.1a8a9ec461034
gnutls@3.6.16-4.el8
0:3.6.16-5.el8_6
1
quay.io/ibmgaragecloud/developer-dashboard:v1.4.47a4b9fedc724
gnutls@3.6.8-11.el8_2
0:3.6.16-5.el8_6
1
quay.io/keycloak/keycloak:14.0.03029dc0f1d38
gnutls@3.6.14-8.el8_3
0:3.6.16-5.el8_6
1
quay.io/keycloak/keycloak-operator:19.0.3-legacy09d52508fee9
gnutls@3.6.16-4.el8
0:3.6.16-5.el8_6
1
quay.io/keycloak/keycloak-operator:19.0.2-legacy15fa0ed662b1
gnutls@3.6.16-4.el8
0:3.6.16-5.el8_6
1
quay.io/keycloak/keycloak-operator:18.0.0-legacy36ce77526145
gnutls@3.6.16-4.el8
0:3.6.16-5.el8_6
1
quay.io/maximilianopizarro/workshop-pipelines:lateste383ba3e0966
gnutls@3.6.16-4.el8
0:3.6.16-5.el8_6
1
quay.io/mcouliba/quarkus-serverless:1.0c2851757eca4
gnutls@3.6.8-8.el8
0:3.6.16-5.el8_6
1
quay.io/minio/mc:RELEASE.2022-10-20T23-26-33Z50ee58bc9770
gnutls@3.6.16-4.el8
0:3.6.16-5.el8_6
1
quay.io/minio/mc:RELEASE.2022-09-16T09-16-47Z546a8b52d7b0
gnutls@3.6.16-4.el8
0:3.6.16-5.el8_6
1
quay.io/minio/minio:RELEASE.2022-09-17T00-09-45Zc3d20bc2ea08
gnutls@3.6.16-4.el8
0:3.6.16-5.el8_6
1
quay.io/minio/minio:RELEASE.2022-10-24T18-35-07Zd853057f2800
gnutls@3.6.16-4.el8
0:3.6.16-5.el8_6
1
quay.io/mongodb/farm-intro-backend:0.11a9ce0b8fbd4
gnutls28@3.7.1-5
3.7.1-5+deb11u2
1
quay.io/mongodb/mongodb-kubernetes-operator:0.3.0107a7c73af59
gnutls@3.6.14-6.el8
0:3.6.16-5.el8_6
1
quay.io/openshift/origin-cli:4.66722d5041b47
gnutls@3.6.8-12.el8_2
0:3.6.16-5.el8_6
1
quay.io/openshift/origin-console:4.10.00bbe8b451fa3
gnutls@3.6.8-12.el8_2
0:3.6.16-5.el8_6
1
quay.io/opsmxpublic/ubi8-oes-db:v3.0.089ee6493af89
gnutls@3.6.14-8.el8_3
0:3.6.16-5.el8_6
1
quay.io/renokico/laravel-helm-demo:0.6.03207f957e80c
gnutls@3.7.1-r0
3.7.1-r1
1
quay.io/renokico/laravel-helm-demo:worker-0.6.04b188259267e
gnutls@3.7.1-r0
3.7.1-r1
1
quay.io/rht-labs/stack-do500:3.0.86ba82beff18e
gnutls@3.6.14-8.el8_3
0:3.6.16-5.el8_6
1
quay.io/snowdrop/spring-boot-rest-http-example:2.7b1a054613715
gnutls28@3.7.1-5+deb11u1
3.7.1-5+deb11u2
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/mongodb:4.4.5cf72810d33f5
gnutls@3.6.14-8.el8_3
0:3.6.16-5.el8_6
1
registry.gitlab.com/gitlab-org/cloud-native/gitlab-operator:0.5.136b19b72120e
gnutls@3.6.16-4.el8
0:3.6.16-5.el8_6
1
registry.gitlab.com/infinitydon/registry/open5gs-aio:v2.2.2f6385712935f
gnutls28@3.6.13-2ubuntu1.3
3.6.13-2ubuntu1.7
1
registry.gitlab.com/open-forms/forms-catalogue:latest4eaf9c911f33
gnutls28@3.7.1-5
3.7.1-5+deb11u2
1
registry.gitlab.com/open-forms/request-registry:latest0886cbbc5f95
gnutls28@3.7.1-5
3.7.1-5+deb11u2
1
registry.gitlab.com/purelb/purelb/allocator:v0.0.0-106-ipv6-lbip-052cedab9d1fcb78f529
gnutls@3.6.16-4.el8
0:3.6.16-5.el8_6
1
registry.gitlab.com/vicamo/docker-sshd/sshd:3.0-stable22c33d693fe2
gnutls28@3.7.1-5
3.7.1-5+deb11u2
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.