CVE-2022-2509

High

Advisory

Published 1 Aug 2022In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.019; 78th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 609; of 17,781 indexed, latest versions
Container images: 577; deployed by those charts
Fix available: 3 of 3; affected packages

Red Hat Security Advisory: gnutls security update

Carried by container images the latest versions of 609 of 17,781 indexed charts deploy, on 577 images.

Affected package	Affected versions	Fixed in	Images
gnutls28deb	3.5.17-1ubuntu1, 3.5.18-1ubuntu1, 3.5.18-1ubuntu1.1, 3.5.18-1ubuntu1.2+9 more	3.5.18-1ubuntu1.6, 3.6.13-2ubuntu1.7, 3.7.1-5+deb11u2, 3.7.3-4ubuntu1.1	467
gnutlsrpm	3.6.5-2.el8, 3.6.7-14.4.1, 3.6.7-lp151.2.3.1, 3.6.8-8.el8+7 more	0:3.6.16-5.el8_6, 3.6.7-150200.14.19.2, 3.7.7-1.1	86
gnutlsapk	3.7.1-r0, 3.7.6-r0	3.7.1-r1, 3.7.7-r0	24

OSV records: ALPINE-CVE-2022-2509 RHSA-2022:7105 UBUNTU-CVE-2022-2509 DSA-5203-1 openSUSE-SU-2024:12233-1 SUSE-SU-2022:2882-1
Also known as: USN-5550-1

Charts affected

609 by stars

Chart

Latest

Affected images

Radar Score

emissary-ingresswenerme

8.12.2

1 of 2 See more

emissary-ingress wenerme 8.12.2

1 of the 2 container images this version deploys carry CVE-2022-2509.

Container image	Digest	Package	Fixed in
istio/kubectl :1.5.10	dbb7726d1bf0	gnutls28@3.5.18-1ubuntu1.4	3.5.18-1ubuntu1.6

Open the chart page →

10,843

longhornwenerme

1.2.3

1 of 2 See more

longhorn wenerme 1.2.3

1 of the 2 container images this version deploys carry CVE-2022-2509.

Container image	Digest	Package	Fixed in
longhornio/longhorn-manager :v1.2.3	dca34321452c	gnutls28@3.6.13-2ubuntu1.6	3.6.13-2ubuntu1.7

Open the chart page →

15,230

miniowenerme

8.0.10

1 of 1 See more

minio wenerme 8.0.10

1 of the 1 container images this version deploys carry CVE-2022-2509.

Container image	Digest	Package	Fixed in
minio/minio :RELEASE.2021-02-14T04-01-33Z	bd11edda91f3	gnutls@3.6.14-7.el8_3	0:3.6.16-5.el8_6

Open the chart page →

6,915

minio-standalonewenerme

1.0.2

1 of 1 See more

minio-standalone wenerme 1.0.2

1 of the 1 container images this version deploys carry CVE-2022-2509.

Container image	Digest	Package	Fixed in
minio/minio :RELEASE.2022-01-04T07-41-07Z	1484c87239ea	gnutls@3.6.16-4.el8	0:3.6.16-5.el8_6

Open the chart page →

6,138

sambawenerme

1.0.0

1 of 1 See more

samba wenerme 1.0.0

1 of the 1 container images this version deploys carry CVE-2022-2509.

Container image	Digest	Package	Fixed in
wener/samba :4.13.3	9a42bae466d4	gnutls@3.7.1-r0	3.7.1-r1

Open the chart page →

2,555

vaultwardenwitcom-gmbh

0.2.0

1 of 2 See more

vaultwarden witcom-gmbh 0.2.0

1 of the 2 container images this version deploys carry CVE-2022-2509.

Container image	Digest	Package	Fixed in
vaultwarden/server :1.25.2	39f34c5159a2	gnutls28@3.7.1-5+deb11u1	3.7.1-5+deb11u2

Open the chart page →

1,585

wp-gats-helmwordpress-gatsby

0.0.1

1 of 3 See more

wp-gats-helm wordpress-gatsby 0.0.1

1 of the 3 container images this version deploys carry CVE-2022-2509.

Container image	Digest	Package	Fixed in
library/wordpress :6.0.0-php8.0-apache	277c6c25980f	gnutls28@3.7.1-5	3.7.1-5+deb11u2

Open the chart page →

2,021

workshop-pipelinesworkshop-pipelines

0.1.6

1 of 2 See more

workshop-pipelines workshop-pipelines 0.1.6

1 of the 2 container images this version deploys carry CVE-2022-2509.

Container image	Digest	Package	Fixed in
quay.io/maximilianopizarro/workshop-pipelines :latest	e383ba3e0966	gnutls@3.6.16-4.el8	0:3.6.16-5.el8_6

Open the chart page →

11,577

clickhousezloi-space

1.2.0

2 of 3 See more

clickhouse zloi-space 1.2.0

2 of the 3 container images this version deploys carry CVE-2022-2509.

Container image	Digest	Package	Fixed in
yandex/clickhouse-client :21.3	863f94a0f607	gnutls28@3.5.18-1ubuntu1.5	3.5.18-1ubuntu1.6
yandex/clickhouse-server :21.3.20	4eccfffb01d7	gnutls28@3.6.13-2ubuntu1.6	3.6.13-2ubuntu1.7

Open the chart page →

9,207

Container images carrying it

577 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container image	Digest	Package	Fixed in	Used by
apicurio/apicurio-registry-kafkasql :2.1.0.Final	a97d67487532	gnutls@3.6.14-8.el8_3	0:3.6.16-5.el8_6	1
archish27/python-fastapi-postgres :latest	6610071a2101	gnutls28@3.7.1-5+deb11u1	3.7.1-5+deb11u2	1
aroralalit/student-producer :1.0.0	2a094f597b36	gnutls28@3.7.1-5+deb11u1	3.7.1-5+deb11u2	1
arturisimo/planner :v1.0	fff9de644941	gnutls28@3.7.1-5	3.7.1-5+deb11u2	1
assistiot/fl_orchestrator :dbmongo4-latest	d157fbe150e3	gnutls28@3.6.13-2ubuntu1.6	3.6.13-2ubuntu1.7	1
assistiot/identity-manager_kc :latest	0df4b4fa899a	gnutls@3.6.16-4.el8	0:3.6.16-5.el8_6	1
assistiot/sdn_controller :2.4.0	ea254b6d8a31	gnutls28@3.6.13-2ubuntu1.6	3.6.13-2ubuntu1.7	1
assistiot/tacticle_dashboard :api-latest	e4414cb72dc4	gnutls28@3.7.1-5+deb11u1	3.7.1-5+deb11u2	1
atomix/atomix :3.1.12	7738ff4f5c63	gnutls28@3.7.1-5	3.7.1-5+deb11u2	1
azhar008/flaskapplication :latest	a1e827b0adea	gnutls28@3.7.1-5	3.7.1-5+deb11u2	1
bbernhard/signal-cli-rest-api :0.57	549ad08d7e14	gnutls28@3.6.13-2ubuntu1.6	3.6.13-2ubuntu1.7	1
beastob/url-shortener :1.0.2	99a49885ab33	gnutls28@3.7.1-5	3.7.1-5+deb11u2	1
bicarus/elrond-rosetta :v1.3.50.0	b1dab0721e1c	gnutls28@3.6.13-2ubuntu1.6	3.6.13-2ubuntu1.7	1
bicarus/mx-notifier :1.1.8	bed688d16762	gnutls28@3.6.13-2ubuntu1.6	3.6.13-2ubuntu1.7	1
biospheere/promcord :latest	16d4fd269e66	gnutls28@3.7.1-5	3.7.1-5+deb11u2	1
bitnamilegacy/kafka :2.8.1-debian-11-r7	b6e381ffd6ae	gnutls28@3.7.1-5	3.7.1-5+deb11u2	1
bitnamilegacy/redis :6.2.7-debian-11-r3	7788b908dd0d	gnutls28@3.7.1-5	3.7.1-5+deb11u2	1
blakeblackshear/frigate :0.10.0-amd64	ae269270ad9e	gnutls28@3.6.13-2ubuntu1.6	3.6.13-2ubuntu1.7	1
browserless/chrome :1.48.0-chrome-stable	c81ae5585b47	gnutls28@3.6.13-2ubuntu1.3	3.6.13-2ubuntu1.7	1
bsgrigorov/helm-operator :latest	45ab095f09c8	gnutls@3.6.14-8.el8_3	0:3.6.16-5.el8_6	1
cfcontainerization/cf-operator :v2.3.0-0.g27a91cdf	82fa261c18a8	gnutls@3.6.7-lp151.2.3.1	3.7.7-1.1	1
cfcontainerization/quarks-job :v0.0.0-0.g70ae34b	58fb1c173a46	gnutls@3.6.7-lp151.2.3.1	3.7.7-1.1	1
chandanteekinavar/findery-market-order-service :1.0	0cf52bf5ee9a	gnutls28@3.7.1-5+deb11u1	3.7.1-5+deb11u2	1
chetangautamm/repo :sipp.v3	e7f7049e1544	gnutls28@3.6.13-2ubuntu1.3	3.6.13-2ubuntu1.7	1
chubaofs/cfs-client :3.2.0	15ff74209ce7	gnutls28@3.7.1-5	3.7.1-5+deb11u2	1
chubaofs/cfs-server :3.2.0	205030e045f2	gnutls28@3.7.1-5	3.7.1-5+deb11u2	1
cloudve/janis-terminal :latest	af56e77ca587	gnutls28@3.5.18-1ubuntu1.3	3.5.18-1ubuntu1.6	1
cloudve/ttyd :latest	d79c1c5881c0	gnutls28@3.5.18-1ubuntu1.3	3.5.18-1ubuntu1.6	1
cmosborn/metabase-arm64 :0.50.28	6ec0a8878ad2	gnutls28@3.7.1-5+deb11u1	3.7.1-5+deb11u2	1
cockroachdb/cockroach-operator :v2.1.0	983312754620	gnutls@3.6.14-8.el8_3	0:3.6.16-5.el8_6	1
confluentinc/cp-enterprise-control-center :6.1.0	f2975d507a2a	gnutls@3.6.14-7.el8_3	0:3.6.16-5.el8_6	1
confluentinc/cp-enterprise-kafka :6.1.0	8f1544df1f48	gnutls@3.6.14-7.el8_3	0:3.6.16-5.el8_6	1
confluentinc/cp-kafka :7.1.2.amd64	3bf359d5e340	gnutls@3.6.16-4.el8	0:3.6.16-5.el8_6	1
confluentinc/cp-kafka-connect :6.1.0	4bc70a83ca6f	gnutls@3.6.14-7.el8_3	0:3.6.16-5.el8_6	1
confluentinc/cp-kafka-rest :6.1.0	b0b7aa26254a	gnutls@3.6.14-7.el8_3	0:3.6.16-5.el8_6	1
confluentinc/cp-ksqldb-server :6.1.0	ee403d5b9090	gnutls@3.6.14-7.el8_3	0:3.6.16-5.el8_6	1
confluentinc/cp-schema-registry :6.1.0	b651d4b6185a	gnutls@3.6.14-7.el8_3	0:3.6.16-5.el8_6	1
confluentinc/cp-zookeeper :6.1.0	78c190f4472c	gnutls@3.6.14-7.el8_3	0:3.6.16-5.el8_6	1
countly/countly-server :25.05.4	e3c238248f99	gnutls28@3.6.13-2ubuntu1.6	3.6.13-2ubuntu1.7	1
cradlepoint/pgbouncer :1.0.1	8f5720b0cd03	gnutls28@3.5.18-1ubuntu1	3.5.18-1ubuntu1.6	1
craftypath/sops-operator :v0.8.0	402a0024c732	gnutls@3.6.14-8.el8_3	0:3.6.16-5.el8_6	1
cribl/cribl :3.0.2	762747cb6796	gnutls28@3.5.18-1ubuntu1.4	3.5.18-1ubuntu1.6	1
ctron/hawkbit-operator :0.1.4	8fdea8f76499	gnutls@3.6.8-11.el8_2	0:3.6.16-5.el8_6	1
daedalusproject/base_kubectl :latest	6f72b5119eda	gnutls28@3.6.13-2ubuntu1.3	3.6.13-2ubuntu1.7	1
dannielkil/book-backend :latest	e3b479a55a69	gnutls28@3.7.1-5+deb11u1	3.7.1-5+deb11u2	1
daskdev/dask-notebook :1.1.0	052630f5ca04	gnutls28@3.5.18-1ubuntu1	3.5.18-1ubuntu1.6	1
datadog/extendeddaemonset :v0.8.0	513a4377aed5	gnutls@3.6.16-4.el8	0:3.6.16-5.el8_6	1
datappeal/hive-metastore :latest	e38c085a3567	gnutls28@3.7.1-5	3.7.1-5+deb11u2	1
datawire/ambassador-operator :v1.3.0	f95ae710d75c	gnutls@3.6.14-8.el8_3	0:3.6.16-5.el8_6	1
davidvmar/urjc-davidvmar-worker :1.0.1	0d221e834a21	gnutls28@3.7.1-5+deb11u1	3.7.1-5+deb11u2	1