CVE-2022-2509

High

Advisory

Published 1 Aug 2022In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.019; 78th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 609; of 17,781 indexed, latest versions
Container images: 577; deployed by those charts
Fix available: 3 of 3; affected packages

Red Hat Security Advisory: gnutls security update

Carried by container images the latest versions of 609 of 17,781 indexed charts deploy, on 577 images.

Affected package	Affected versions	Fixed in	Images
gnutls28deb	3.5.17-1ubuntu1, 3.5.18-1ubuntu1, 3.5.18-1ubuntu1.1, 3.5.18-1ubuntu1.2+9 more	3.5.18-1ubuntu1.6, 3.6.13-2ubuntu1.7, 3.7.1-5+deb11u2, 3.7.3-4ubuntu1.1	467
gnutlsrpm	3.6.5-2.el8, 3.6.7-14.4.1, 3.6.7-lp151.2.3.1, 3.6.8-8.el8+7 more	0:3.6.16-5.el8_6, 3.6.7-150200.14.19.2, 3.7.7-1.1	86
gnutlsapk	3.7.1-r0, 3.7.6-r0	3.7.1-r1, 3.7.7-r0	24

OSV records: ALPINE-CVE-2022-2509 RHSA-2022:7105 UBUNTU-CVE-2022-2509 DSA-5203-1 openSUSE-SU-2024:12233-1 SUSE-SU-2022:2882-1
Also known as: USN-5550-1

Charts affected

609 by stars

Chart

Latest

Affected images

Radar Score

emissary-ingresswenerme

8.12.2

1 of 2 See more

emissary-ingress wenerme 8.12.2

1 of the 2 container images this version deploys carry CVE-2022-2509.

Container image	Digest	Package	Fixed in
istio/kubectl :1.5.10	dbb7726d1bf0	gnutls28@3.5.18-1ubuntu1.4	3.5.18-1ubuntu1.6

Open the chart page →

10,843

longhornwenerme

1.2.3

1 of 2 See more

longhorn wenerme 1.2.3

1 of the 2 container images this version deploys carry CVE-2022-2509.

Container image	Digest	Package	Fixed in
longhornio/longhorn-manager :v1.2.3	dca34321452c	gnutls28@3.6.13-2ubuntu1.6	3.6.13-2ubuntu1.7

Open the chart page →

15,230

miniowenerme

8.0.10

1 of 1 See more

minio wenerme 8.0.10

1 of the 1 container images this version deploys carry CVE-2022-2509.

Container image	Digest	Package	Fixed in
minio/minio :RELEASE.2021-02-14T04-01-33Z	bd11edda91f3	gnutls@3.6.14-7.el8_3	0:3.6.16-5.el8_6

Open the chart page →

6,915

minio-standalonewenerme

1.0.2

1 of 1 See more

minio-standalone wenerme 1.0.2

1 of the 1 container images this version deploys carry CVE-2022-2509.

Container image	Digest	Package	Fixed in
minio/minio :RELEASE.2022-01-04T07-41-07Z	1484c87239ea	gnutls@3.6.16-4.el8	0:3.6.16-5.el8_6

Open the chart page →

6,138

sambawenerme

1.0.0

1 of 1 See more

samba wenerme 1.0.0

1 of the 1 container images this version deploys carry CVE-2022-2509.

Container image	Digest	Package	Fixed in
wener/samba :4.13.3	9a42bae466d4	gnutls@3.7.1-r0	3.7.1-r1

Open the chart page →

2,555

vaultwardenwitcom-gmbh

0.2.0

1 of 2 See more

vaultwarden witcom-gmbh 0.2.0

1 of the 2 container images this version deploys carry CVE-2022-2509.

Container image	Digest	Package	Fixed in
vaultwarden/server :1.25.2	39f34c5159a2	gnutls28@3.7.1-5+deb11u1	3.7.1-5+deb11u2

Open the chart page →

1,585

wp-gats-helmwordpress-gatsby

0.0.1

1 of 3 See more

wp-gats-helm wordpress-gatsby 0.0.1

1 of the 3 container images this version deploys carry CVE-2022-2509.

Container image	Digest	Package	Fixed in
library/wordpress :6.0.0-php8.0-apache	277c6c25980f	gnutls28@3.7.1-5	3.7.1-5+deb11u2

Open the chart page →

2,021

workshop-pipelinesworkshop-pipelines

0.1.6

1 of 2 See more

workshop-pipelines workshop-pipelines 0.1.6

1 of the 2 container images this version deploys carry CVE-2022-2509.

Container image	Digest	Package	Fixed in
quay.io/maximilianopizarro/workshop-pipelines :latest	e383ba3e0966	gnutls@3.6.16-4.el8	0:3.6.16-5.el8_6

Open the chart page →

11,577

clickhousezloi-space

1.2.0

2 of 3 See more

clickhouse zloi-space 1.2.0

2 of the 3 container images this version deploys carry CVE-2022-2509.

Container image	Digest	Package	Fixed in
yandex/clickhouse-client :21.3	863f94a0f607	gnutls28@3.5.18-1ubuntu1.5	3.5.18-1ubuntu1.6
yandex/clickhouse-server :21.3.20	4eccfffb01d7	gnutls28@3.6.13-2ubuntu1.6	3.6.13-2ubuntu1.7

Open the chart page →

9,207

Container images carrying it

577 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container image	Digest	Package	Fixed in	Used by
scorpiobroker/scorpio :eureka-server_2.1.0	3f05a113a4be	gnutls28@3.7.1-5	3.7.1-5+deb11u2	2
scorpiobroker/scorpio :AtContextServer_2.1.0	5073ceef2fa0	gnutls28@3.7.1-5	3.7.1-5+deb11u2	2
scorpiobroker/scorpio :gateway_2.1.0	62dae3dd0eeb	gnutls28@3.7.1-5	3.7.1-5+deb11u2	2
scorpiobroker/scorpio :RegistryManager_2.1.0	a2cfcf0947fd	gnutls28@3.7.1-5	3.7.1-5+deb11u2	2
scorpiobroker/scorpio :QueryManager_2.1.0	b742a53b2803	gnutls28@3.7.1-5	3.7.1-5+deb11u2	2
scorpiobroker/scorpio :HistoryManager_2.1.0	b7fe27a06ff5	gnutls28@3.7.1-5	3.7.1-5+deb11u2	2
scorpiobroker/scorpio :config-server_1.1.0	c46c1517e523	gnutls28@3.7.1-5	3.7.1-5+deb11u2	2
scorpiobroker/scorpio :SubscriptionManager_2.1.0	e08036670d66	gnutls28@3.7.1-5	3.7.1-5+deb11u2	2
scorpiobroker/scorpio :EntityManager_2.1.0	f02e8a429a08	gnutls28@3.7.1-5	3.7.1-5+deb11u2	2
stakater/stakater-nordmart-review :1.0.35	954d2be66e95	gnutls@3.6.16-4.el8	0:3.6.16-5.el8_6	2
svtechnmaa/svtech_debuger :v1.0.0	b2987abe57d3	gnutls28@3.7.3-4ubuntu1	3.7.3-4ubuntu1.1	2
vaultwarden/server :1.25.2	39f34c5159a2	gnutls28@3.7.1-5+deb11u1	3.7.1-5+deb11u2	2
ghcr.io/danbooru/danbooru :9cab67c0ac72a8c52289302c519715ceec2372d9	5f545698e907	gnutls28@3.7.3-4ubuntu1	3.7.3-4ubuntu1.1	2
ghcr.io/games-on-whales/pulseaudio :1.0.0	f34f98405c10	gnutls28@3.6.13-2ubuntu1.3	3.6.13-2ubuntu1.7	2
ghcr.io/games-on-whales/retroarch :1.0.0	103fbcec2314	gnutls28@3.6.13-2ubuntu1.3	3.6.13-2ubuntu1.7	2
ghcr.io/games-on-whales/steam :1.0.0	9b6105be7ad0	gnutls28@3.6.13-2ubuntu1.3	3.6.13-2ubuntu1.7	2
ghcr.io/linuxserver/openvpn-as :version-2.8.6-916f8e7d-ubuntu18	4ee0764310e7	gnutls28@3.5.18-1ubuntu1.4	3.5.18-1ubuntu1.6	2
ghcr.io/salaboy/fmtok8s-frontend :v0.1.1	03fd01b4f56e	gnutls28@3.7.3-4ubuntu1	3.7.3-4ubuntu1.1	2
quay.io/coreos/etcd :v3.5.6	28cb0630cb85	gnutls28@3.7.1-5	3.7.1-5+deb11u2	2
quay.io/keycloak/keycloak :17.0.1-legacy	68f9f38c8f30	gnutls@3.6.16-4.el8	0:3.6.16-5.el8_6	2
quay.io/opencloudio/ibm-mongodb :4.0.24	d8c631a6dc43	gnutls@3.6.14-8.el8_3	0:3.6.16-5.el8_6	2
quay.io/openshift/origin-cli :4.7	464a3af4dfe0	gnutls@3.6.14-8.el8_3	0:3.6.16-5.el8_6	2
quay.io/openshift/origin-cli :4.8	bb5e052770e5	gnutls@3.6.14-8.el8_3	0:3.6.16-5.el8_6	2
a10networks/acos-prometheus-exporter :latest	8dc58d434d71	gnutls28@3.5.18-1ubuntu1	3.5.18-1ubuntu1.6	1
adagber/planner :v1.0	e5c1ed097752	gnutls28@3.7.1-5	3.7.1-5+deb11u2	1
adityaprasadpathak/myapp :3.0	7e3b9777362c	gnutls28@3.7.1-5	3.7.1-5+deb11u2	1
adolfintel/speedtest :latest	1f828fe83374	gnutls28@3.7.1-5	3.7.1-5+deb11u2	1
adwerx/github-actions-runner :2.276.1-20.04-1	840d2b078682	gnutls28@3.6.13-2ubuntu1.3	3.6.13-2ubuntu1.7	1
aidasi/swpapi :v1-1-net6-k8s-test-beta	838b5e2080bc	gnutls28@3.7.1-5+deb11u1	3.7.1-5+deb11u2	1
aidasi/swpbom :v1-1-net6-k8s-test-beta	fee6857b9bc9	gnutls28@3.7.1-5+deb11u1	3.7.1-5+deb11u2	1
aidasi/swpgateway :v1-1-net6-k8s-test-beta	5ce8dbff7fdc	gnutls28@3.7.1-5+deb11u1	3.7.1-5+deb11u2	1
aidasi/swpidentity :v1-1-net6-k8s-test-beta	d433285c7d5a	gnutls28@3.7.1-5+deb11u1	3.7.1-5+deb11u2	1
airsonicadvanced/airsonic-advanced :latest	f7cbafac2806	gnutls28@3.6.13-2ubuntu1.3	3.6.13-2ubuntu1.7	1
allegroai/clearml-agent-k8s-base :1.24-21	772827a01bb5	gnutls28@3.5.18-1ubuntu1.5	3.5.18-1ubuntu1.6	1
anchore/anchore-engine :v0.10.0	bde9eedf639d	gnutls@3.6.14-8.el8_3	0:3.6.16-5.el8_6	1
anchore/anchore-engine :v0.7.1	ed9b3badd17c	gnutls@3.6.8-8.el8	0:3.6.16-5.el8_6	1
andrianrf/bpjstk-service :latest	46abe878d9d8	gnutls28@3.7.1-5+deb11u1	3.7.1-5+deb11u2	1
andrianrf/bpjstk-simulator :latest	b63fdb51d39d	gnutls28@3.7.1-5+deb11u1	3.7.1-5+deb11u2	1
andrianrf/iso-client :latest	ba560086ce15	gnutls28@3.7.1-5+deb11u1	3.7.1-5+deb11u2	1
anonaddy/anonaddy :0.12.3	957a95565166	gnutls@3.7.6-r0	3.7.7-r0	1
apache/drill :1.21.1	1f96558fd292	gnutls28@3.7.1-5+deb11u1	3.7.1-5+deb11u2	1
apachepinot/pinot :latest-jdk11	0018bb04ced7	gnutls28@3.7.1-5	3.7.1-5+deb11u2	1
apachepulsar/pulsar :2.10.0	3b262ab7a7d9	gnutls28@3.6.13-2ubuntu1.6	3.6.13-2ubuntu1.7	1
apachepulsar/pulsar :2.9.0	d056c89b7131	gnutls28@3.6.13-2ubuntu1.6	3.6.13-2ubuntu1.7	1
apachepulsar/pulsar :2.8.2	d538416d5afe	gnutls28@3.6.13-2ubuntu1.6	3.6.13-2ubuntu1.7	1
apache/skywalking-oap-server :9.2.0	133d35d2c263	gnutls28@3.7.3-4ubuntu1	3.7.3-4ubuntu1.1	1
apache/skywalking-oap-server :8.9.1	b4ec8c18d079	gnutls28@3.6.13-2ubuntu1.6	3.6.13-2ubuntu1.7	1
apache/skywalking-ui :9.2.0	295f1dc87d98	gnutls28@3.7.3-4ubuntu1	3.7.3-4ubuntu1.1	1
apache/skywalking-ui :8.9.1	80530f0308a5	gnutls28@3.6.13-2ubuntu1.6	3.6.13-2ubuntu1.7	1
apache/superset :9cdaa280429ec297db16d56c94fd77b5d2aff107	975ab033580d	gnutls28@3.7.1-5	3.7.1-5+deb11u2	1