CVE-2022-2509
HighAdvisory
Published 1 Aug 2022In the index since 5 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 7.5
- base score, highest
- EPSS
- 0.019
- 78th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 609
- of 17,781 indexed, latest versions
- Container images
- 577
- deployed by those charts
- Fix available
- 3 of 3
- affected packages
Red Hat Security Advisory: gnutls security update
Carried by container images the latest versions of 609 of 17,781 indexed charts deploy, on 577 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| gnutls28deb | 3.5.17-1ubuntu1, 3.5.18-1ubuntu1, 3.5.18-1ubuntu1.1, 3.5.18-1ubuntu1.2+9 more | 3.5.18-1ubuntu1.6, 3.6.13-2ubuntu1.7, 3.7.1-5+deb11u2, 3.7.3-4ubuntu1.1 | 467 |
| gnutlsrpm | 3.6.5-2.el8, 3.6.7-14.4.1, 3.6.7-lp151.2.3.1, 3.6.8-8.el8+7 more | 0:3.6.16-5.el8_6, 3.6.7-150200.14.19.2, 3.7.7-1.1 | 86 |
| gnutlsapk | 3.7.1-r0, 3.7.6-r0 | 3.7.1-r1, 3.7.7-r0 | 24 |
- OSV records
- ALPINE-CVE-2022-2509RHSA-2022:7105UBUNTU-CVE-2022-2509DSA-5203-1openSUSE-SU-2024:12233-1SUSE-SU-2022:2882-1
- Also known as
- USN-5550-1
Charts affected
609 by stars
Container images carrying it
577 by charts deploying them
A fixed version is listed for 3 of the 3 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| scorpiobroker/ | 3f05a113a4be | gnutls28 | 3.7.1-5+deb11u2 | 2 |
| scorpiobroker/ | 5073ceef2fa0 | gnutls28 | 3.7.1-5+deb11u2 | 2 |
| scorpiobroker/ | 62dae3dd0eeb | gnutls28 | 3.7.1-5+deb11u2 | 2 |
| scorpiobroker/ | a2cfcf0947fd | gnutls28 | 3.7.1-5+deb11u2 | 2 |
| scorpiobroker/ | b742a53b2803 | gnutls28 | 3.7.1-5+deb11u2 | 2 |
| scorpiobroker/ | b7fe27a06ff5 | gnutls28 | 3.7.1-5+deb11u2 | 2 |
| scorpiobroker/ | c46c1517e523 | gnutls28 | 3.7.1-5+deb11u2 | 2 |
| scorpiobroker/ | e08036670d66 | gnutls28 | 3.7.1-5+deb11u2 | 2 |
| scorpiobroker/ | f02e8a429a08 | gnutls28 | 3.7.1-5+deb11u2 | 2 |
| stakater/ | 954d2be66e95 | gnutls | 0:3.6.16-5.el8_6 | 2 |
| svtechnmaa/ | b2987abe57d3 | gnutls28 | 3.7.3-4ubuntu1.1 | 2 |
| vaultwarden/ | 39f34c5159a2 | gnutls28 | 3.7.1-5+deb11u2 | 2 |
| ghcr.io/ | 5f545698e907 | gnutls28 | 3.7.3-4ubuntu1.1 | 2 |
| ghcr.io/ | f34f98405c10 | gnutls28 | 3.6.13-2ubuntu1.7 | 2 |
| ghcr.io/ | 103fbcec2314 | gnutls28 | 3.6.13-2ubuntu1.7 | 2 |
| ghcr.io/ | 9b6105be7ad0 | gnutls28 | 3.6.13-2ubuntu1.7 | 2 |
| ghcr.io/ | 4ee0764310e7 | gnutls28 | 3.5.18-1ubuntu1.6 | 2 |
| ghcr.io/ | 03fd01b4f56e | gnutls28 | 3.7.3-4ubuntu1.1 | 2 |
| quay.io/ | 28cb0630cb85 | gnutls28 | 3.7.1-5+deb11u2 | 2 |
| quay.io/ | 68f9f38c8f30 | gnutls | 0:3.6.16-5.el8_6 | 2 |
| quay.io/ | d8c631a6dc43 | gnutls | 0:3.6.16-5.el8_6 | 2 |
| quay.io/ | 464a3af4dfe0 | gnutls | 0:3.6.16-5.el8_6 | 2 |
| quay.io/ | bb5e052770e5 | gnutls | 0:3.6.16-5.el8_6 | 2 |
| a10networks/ | 8dc58d434d71 | gnutls28 | 3.5.18-1ubuntu1.6 | 1 |
| adagber/ | e5c1ed097752 | gnutls28 | 3.7.1-5+deb11u2 | 1 |
| adityaprasadpathak/ | 7e3b9777362c | gnutls28 | 3.7.1-5+deb11u2 | 1 |
| adolfintel/ | 1f828fe83374 | gnutls28 | 3.7.1-5+deb11u2 | 1 |
| adwerx/ | 840d2b078682 | gnutls28 | 3.6.13-2ubuntu1.7 | 1 |
| aidasi/ | 838b5e2080bc | gnutls28 | 3.7.1-5+deb11u2 | 1 |
| aidasi/ | fee6857b9bc9 | gnutls28 | 3.7.1-5+deb11u2 | 1 |
| aidasi/ | 5ce8dbff7fdc | gnutls28 | 3.7.1-5+deb11u2 | 1 |
| aidasi/ | d433285c7d5a | gnutls28 | 3.7.1-5+deb11u2 | 1 |
| airsonicadvanced/ | f7cbafac2806 | gnutls28 | 3.6.13-2ubuntu1.7 | 1 |
| allegroai/ | 772827a01bb5 | gnutls28 | 3.5.18-1ubuntu1.6 | 1 |
| anchore/ | bde9eedf639d | gnutls | 0:3.6.16-5.el8_6 | 1 |
| anchore/ | ed9b3badd17c | gnutls | 0:3.6.16-5.el8_6 | 1 |
| andrianrf/ | 46abe878d9d8 | gnutls28 | 3.7.1-5+deb11u2 | 1 |
| andrianrf/ | b63fdb51d39d | gnutls28 | 3.7.1-5+deb11u2 | 1 |
| andrianrf/ | ba560086ce15 | gnutls28 | 3.7.1-5+deb11u2 | 1 |
| anonaddy/ | 957a95565166 | gnutls | 3.7.7-r0 | 1 |
| apache/ | 1f96558fd292 | gnutls28 | 3.7.1-5+deb11u2 | 1 |
| apachepinot/ | 0018bb04ced7 | gnutls28 | 3.7.1-5+deb11u2 | 1 |
| apachepulsar/ | 3b262ab7a7d9 | gnutls28 | 3.6.13-2ubuntu1.7 | 1 |
| apachepulsar/ | d056c89b7131 | gnutls28 | 3.6.13-2ubuntu1.7 | 1 |
| apachepulsar/ | d538416d5afe | gnutls28 | 3.6.13-2ubuntu1.7 | 1 |
| apache/ | 133d35d2c263 | gnutls28 | 3.7.3-4ubuntu1.1 | 1 |
| apache/ | b4ec8c18d079 | gnutls28 | 3.6.13-2ubuntu1.7 | 1 |
| apache/ | 295f1dc87d98 | gnutls28 | 3.7.3-4ubuntu1.1 | 1 |
| apache/ | 80530f0308a5 | gnutls28 | 3.6.13-2ubuntu1.7 | 1 |
| apache/ | 975ab033580d | gnutls28 | 3.7.1-5+deb11u2 | 1 |