CVE-2022-2509

High

Advisory

Published 1 Aug 2022In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.019; 78th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 609; of 17,787 indexed, latest versions
Container images: 577; deployed by those charts
Fix available: 3 of 3; affected packages

Red Hat Security Advisory: gnutls security update

Carried by container images the latest versions of 609 of 17,787 indexed charts deploy, on 577 images.

Affected package	Affected versions	Fixed in	Images
gnutls28deb	3.5.17-1ubuntu1, 3.5.18-1ubuntu1, 3.5.18-1ubuntu1.1, 3.5.18-1ubuntu1.2+9 more	3.5.18-1ubuntu1.6, 3.6.13-2ubuntu1.7, 3.7.1-5+deb11u2, 3.7.3-4ubuntu1.1	467
gnutlsrpm	3.6.5-2.el8, 3.6.7-14.4.1, 3.6.7-lp151.2.3.1, 3.6.8-8.el8+7 more	0:3.6.16-5.el8_6, 3.6.7-150200.14.19.2, 3.7.7-1.1	86
gnutlsapk	3.7.1-r0, 3.7.6-r0	3.7.1-r1, 3.7.7-r0	24

OSV records: ALPINE-CVE-2022-2509 RHSA-2022:7105 UBUNTU-CVE-2022-2509 DSA-5203-1 openSUSE-SU-2024:12233-1 SUSE-SU-2022:2882-1
Also known as: USN-5550-1

Charts affected

609 by stars

Chart

Latest

Affected images

Radar Score

emissary-ingresswenerme

8.12.2

1 of 2 See more

emissary-ingress wenerme 8.12.2

1 of the 2 container images this version deploys carry CVE-2022-2509.

Container image	Digest	Package	Fixed in
istio/kubectl :1.5.10	dbb7726d1bf0	gnutls28@3.5.18-1ubuntu1.4	3.5.18-1ubuntu1.6

Open the chart page →

10,843

longhornwenerme

1.2.3

1 of 2 See more

longhorn wenerme 1.2.3

1 of the 2 container images this version deploys carry CVE-2022-2509.

Container image	Digest	Package	Fixed in
longhornio/longhorn-manager :v1.2.3	dca34321452c	gnutls28@3.6.13-2ubuntu1.6	3.6.13-2ubuntu1.7

Open the chart page →

15,230

miniowenerme

8.0.10

1 of 1 See more

minio wenerme 8.0.10

1 of the 1 container images this version deploys carry CVE-2022-2509.

Container image	Digest	Package	Fixed in
minio/minio :RELEASE.2021-02-14T04-01-33Z	bd11edda91f3	gnutls@3.6.14-7.el8_3	0:3.6.16-5.el8_6

Open the chart page →

6,915

minio-standalonewenerme

1.0.2

1 of 1 See more

minio-standalone wenerme 1.0.2

1 of the 1 container images this version deploys carry CVE-2022-2509.

Container image	Digest	Package	Fixed in
minio/minio :RELEASE.2022-01-04T07-41-07Z	1484c87239ea	gnutls@3.6.16-4.el8	0:3.6.16-5.el8_6

Open the chart page →

6,138

sambawenerme

1.0.0

1 of 1 See more

samba wenerme 1.0.0

1 of the 1 container images this version deploys carry CVE-2022-2509.

Container image	Digest	Package	Fixed in
wener/samba :4.13.3	9a42bae466d4	gnutls@3.7.1-r0	3.7.1-r1

Open the chart page →

2,555

vaultwardenwitcom-gmbh

0.2.0

1 of 2 See more

vaultwarden witcom-gmbh 0.2.0

1 of the 2 container images this version deploys carry CVE-2022-2509.

Container image	Digest	Package	Fixed in
vaultwarden/server :1.25.2	39f34c5159a2	gnutls28@3.7.1-5+deb11u1	3.7.1-5+deb11u2

Open the chart page →

1,585

wp-gats-helmwordpress-gatsby

0.0.1

1 of 3 See more

wp-gats-helm wordpress-gatsby 0.0.1

1 of the 3 container images this version deploys carry CVE-2022-2509.

Container image	Digest	Package	Fixed in
library/wordpress :6.0.0-php8.0-apache	277c6c25980f	gnutls28@3.7.1-5	3.7.1-5+deb11u2

Open the chart page →

2,021

workshop-pipelinesworkshop-pipelines

0.1.6

1 of 2 See more

workshop-pipelines workshop-pipelines 0.1.6

1 of the 2 container images this version deploys carry CVE-2022-2509.

Container image	Digest	Package	Fixed in
quay.io/maximilianopizarro/workshop-pipelines :latest	e383ba3e0966	gnutls@3.6.16-4.el8	0:3.6.16-5.el8_6

Open the chart page →

11,577

clickhousezloi-space

1.2.0

2 of 3 See more

clickhouse zloi-space 1.2.0

2 of the 3 container images this version deploys carry CVE-2022-2509.

Container image	Digest	Package	Fixed in
yandex/clickhouse-client :21.3	863f94a0f607	gnutls28@3.5.18-1ubuntu1.5	3.5.18-1ubuntu1.6
yandex/clickhouse-server :21.3.20	4eccfffb01d7	gnutls28@3.6.13-2ubuntu1.6	3.6.13-2ubuntu1.7

Open the chart page →

9,207

Container images carrying it

577 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container image	Digest	Package	Fixed in	Used by
haveagitgat/tdarr :2.00.18	1256348872ce	gnutls28@3.6.13-2ubuntu1.6	3.6.13-2ubuntu1.7	1
haveagitgat/tdarr_node :2.00.10	1e3f9328327d	gnutls28@3.6.13-2ubuntu1.3	3.6.13-2ubuntu1.7	1
hazelcast/hazelcast-jet :4.5.3	a825ecbe9fda	gnutls28@3.7.1-5	3.7.1-5+deb11u2	1
hivemq/hivemq4 :dns-4.5.14	4d194450d48e	gnutls28@3.7.1-5	3.7.1-5+deb11u2	1
hkotel/mealie :api-v1.0.0beta-2	a7e6b6abe087	gnutls28@3.7.1-5	3.7.1-5+deb11u2	1
hotavneesh/eclipse-jdtls :latest	a4579b163414	gnutls28@3.7.1-5	3.7.1-5+deb11u2	1
housewrecker/gaps :latest	f417dd0a7547	gnutls28@3.6.13-2ubuntu1.6	3.6.13-2ubuntu1.7	1
huertaslopez/i.huertas.2021-v.martinp.2021-planner :2.0.0	e2c18bd65472	gnutls28@3.7.1-5	3.7.1-5+deb11u2	1
huginn/huginn-single-process :4d17829cf6b15b004ad3f4be196303dca4944810	c794eddc7b47	gnutls28@3.5.18-1ubuntu1.4	3.5.18-1ubuntu1.6	1
hugohg34/planner :0.0.2	171f61e8d7e2	gnutls28@3.7.1-5	3.7.1-5+deb11u2	1
hugohg34/server :0.0.2	503e5d8960ff	gnutls28@3.7.1-5	3.7.1-5+deb11u2	1
hugohg34/toposervice :0.0.2	812a03b3f274	gnutls28@3.6.13-2ubuntu1.6	3.6.13-2ubuntu1.7	1
ibmcom/ibmcloud-object-storage-driver :1.8.16	c796a4c693b4	gnutls@3.6.8-10.el8_2	0:3.6.16-5.el8_6	1
ibmcom/ibmcloud-object-storage-plugin :1.8.16	9c73804b37a3	gnutls@3.6.8-10.el8_2	0:3.6.16-5.el8_6	1
ibmcom/ibm-enterprise-mongodb-ppc64le :4.4	d28bf361327a	gnutls@3.6.14-7.el8_3	0:3.6.16-5.el8_6	1
ibmcom/opencontent-common-utils :1.1.2	cd5065df7304	gnutls@3.6.5-2.el8	0:3.6.16-5.el8_6	1
ibmcom/skydive :0.22.0	395e60cc6e3d	gnutls28@3.5.18-1ubuntu1	3.5.18-1ubuntu1.6	1
intel/dlstreamer-pipeline-server :2022.1.1-ubuntu20	aa8f5483a2ef	gnutls28@3.6.13-2ubuntu1.6	3.6.13-2ubuntu1.7	1
intel/multimodal-data-visualization-streaming :3.0	1a89327e499b	gnutls28@3.6.13-2ubuntu1.6	3.6.13-2ubuntu1.7	1
iofog/router :2.0.1	7260cf861479	gnutls28@3.5.18-1ubuntu1.4	3.5.18-1ubuntu1.6	1
iomesh/node-disk-manager :1.8.0	002c4b92fd34	gnutls28@3.6.13-2ubuntu1.6	3.6.13-2ubuntu1.7	1
iomesh/node-disk-operator :1.8.0	f6c76380db34	gnutls28@3.6.13-2ubuntu1.6	3.6.13-2ubuntu1.7	1
iosifache/wazuh-manager-filebeat :latest	85df3f04b5da	gnutls28@3.6.13-2ubuntu1.6	3.6.13-2ubuntu1.7	1
istio/examples-bookinfo-reviews-v1 :1.17.0	b8f16a765eea	gnutls28@3.6.13-2ubuntu1.6	3.6.13-2ubuntu1.7	1
istio/examples-bookinfo-reviews-v2 :1.17.0	72f25a55f078	gnutls28@3.6.13-2ubuntu1.6	3.6.13-2ubuntu1.7	1
istio/examples-bookinfo-reviews-v3 :1.17.0	8f92fc1b6592	gnutls28@3.6.13-2ubuntu1.6	3.6.13-2ubuntu1.7	1
istio/install-cni :1.10.3	2232f365aed6	gnutls28@3.5.18-1ubuntu1.4	3.5.18-1ubuntu1.6	1
istio/operator :1.10.3	655eefa11c84	gnutls28@3.5.18-1ubuntu1.4	3.5.18-1ubuntu1.6	1
istio/operator :1.12.0	6cfce8a071b9	gnutls28@3.6.13-2ubuntu1.6	3.6.13-2ubuntu1.7	1
istio/pilot :1.10.0	294ca55bd1cc	gnutls28@3.5.18-1ubuntu1.4	3.5.18-1ubuntu1.6	1
istio/pilot :1.10.3	e7e110a421c2	gnutls28@3.5.18-1ubuntu1.4	3.5.18-1ubuntu1.6	1
istio/proxyv2 :1.9.6	87a9db561d2e	gnutls28@3.5.18-1ubuntu1.4	3.5.18-1ubuntu1.6	1
istio/proxyv2 :1.10.0	88c6c693e67a	gnutls28@3.5.18-1ubuntu1.4	3.5.18-1ubuntu1.6	1
istio/proxyv2 :1.14.1	df69c1a7af7c	gnutls28@3.6.13-2ubuntu1.6	3.6.13-2ubuntu1.7	1
j0113/haven-compliancy-dashboard :1.3	696cb8ca9f4e	gnutls28@3.7.1-5	3.7.1-5+deb11u2	1
jacobalberty/unifi :v7.1.66	4a3616625dda	gnutls28@3.5.18-1ubuntu1.5	3.5.18-1ubuntu1.6	1
jakowenko/double-take :1.6.0	b858bac9e32a	gnutls28@3.6.13-2ubuntu1.6	3.6.13-2ubuntu1.7	1
jellyfin/jellyfin :10.8.1	ee24f4459a40	gnutls28@3.7.1-5	3.7.1-5+deb11u2	1
jfwenisch/alpine-tor :latest	9e6c229f953c	gnutls@3.7.1-r0	3.7.1-r1	1
jupyterhub/k8s-hub :0.11.1	b6b4a1a34bf0	gnutls28@3.6.13-2ubuntu1.3	3.6.13-2ubuntu1.7	1
jupyterhub/k8s-hub :1.2.0	e4770285aaf7	gnutls28@3.6.13-2ubuntu1.6	3.6.13-2ubuntu1.7	1
jupyterhub/k8s-singleuser-sample :0.11.1	e3e6f3051df8	gnutls28@3.6.13-2ubuntu1.3	3.6.13-2ubuntu1.7	1
just1not2/streama :1.10.4	8a2305192dec	gnutls28@3.7.1-5	3.7.1-5+deb11u2	1
kennethreitz/httpbin :latest	599fe5e50731	gnutls28@3.5.18-1ubuntu1	3.5.18-1ubuntu1.6	1
kporwit/vinyl_lib_app :v0.1.1	217de0302218	gnutls28@3.7.1-5	3.7.1-5+deb11u2	1
kubebb/hello-world :0.1.0	b746824819f3	gnutls28@3.7.1-5	3.7.1-5+deb11u2	1
kubeoperator/webkubectl :v2.4.0	be8f0d624640	gnutls28@3.5.18-1ubuntu1.3	3.5.18-1ubuntu1.6	1
kudobuilder/controller :v0.9.0	69072d979708	gnutls28@3.5.18-1ubuntu1.1	3.5.18-1ubuntu1.6	1
lavandadelpatio/filebot-bot :0.0.1-SNAPSHOT	d2cba20aa4d8	gnutls28@3.7.1-5	3.7.1-5+deb11u2	1
library/cassandra :3.11.10	b095ff3248c6	gnutls28@3.6.13-2ubuntu1.3	3.6.13-2ubuntu1.7	1