CVE-2022-2509

High

Advisory

Published 1 Aug 2022In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.019; 78th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 611; of 17,787 indexed, latest versions
Container images: 579; deployed by those charts
Fix available: 3 of 3; affected packages

Red Hat Security Advisory: gnutls security update

Carried by container images the latest versions of 611 of 17,787 indexed charts deploy, on 579 images.

Affected package	Affected versions	Fixed in	Images
gnutls28deb	3.5.17-1ubuntu1, 3.5.18-1ubuntu1, 3.5.18-1ubuntu1.1, 3.5.18-1ubuntu1.2+9 more	3.5.18-1ubuntu1.6, 3.6.13-2ubuntu1.7, 3.7.1-5+deb11u2, 3.7.3-4ubuntu1.1	469
gnutlsrpm	3.6.5-2.el8, 3.6.7-14.4.1, 3.6.7-lp151.2.3.1, 3.6.8-8.el8+7 more	0:3.6.16-5.el8_6, 3.6.7-150200.14.19.2, 3.7.7-1.1	86
gnutlsapk	3.7.1-r0, 3.7.6-r0	3.7.1-r1, 3.7.7-r0	24

OSV records: ALPINE-CVE-2022-2509 RHSA-2022:7105 UBUNTU-CVE-2022-2509 DSA-5203-1 openSUSE-SU-2024:12233-1 SUSE-SU-2022:2882-1
Also known as: USN-5550-1

Charts affected

611 by stars

Chart

Latest

Affected images

Radar Score

webhookie-allwebhookie

0.1.2

2 of 3 See more

webhookie-all webhookie 0.1.2

2 of the 3 container images this version deploys carry CVE-2022-2509.

Container image	Digest	Package	Fixed in
hookiesolutions/webhookie :latest	0629694246ba	gnutls28@3.6.13-2ubuntu1.6	3.6.13-2ubuntu1.7
quay.io/keycloak/keycloak :14.0.0	3029dc0f1d38	gnutls@3.6.14-8.el8_3	0:3.6.16-5.el8_6

Open the chart page →

28,605

webresourcecataloguswebresourcecatalogus

1.1.0

1 of 4 See more

webresourcecatalogus webresourcecatalogus 1.1.0

1 of the 4 container images this version deploys carry CVE-2022-2509.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/webresourcecatalogus-nginx :latest	6de60c83128d	gnutls28@3.7.1-5	3.7.1-5+deb11u2

Open the chart page →

7,552

emissary-ingresswenerme

8.12.2

1 of 2 See more

emissary-ingress wenerme 8.12.2

1 of the 2 container images this version deploys carry CVE-2022-2509.

Container image	Digest	Package	Fixed in
istio/kubectl :1.5.10	dbb7726d1bf0	gnutls28@3.5.18-1ubuntu1.4	3.5.18-1ubuntu1.6

Open the chart page →

10,843

longhornwenerme

1.2.3

1 of 2 See more

longhorn wenerme 1.2.3

1 of the 2 container images this version deploys carry CVE-2022-2509.

Container image	Digest	Package	Fixed in
longhornio/longhorn-manager :v1.2.3	dca34321452c	gnutls28@3.6.13-2ubuntu1.6	3.6.13-2ubuntu1.7

Open the chart page →

15,230

miniowenerme

8.0.10

1 of 1 See more

minio wenerme 8.0.10

1 of the 1 container images this version deploys carry CVE-2022-2509.

Container image	Digest	Package	Fixed in
minio/minio :RELEASE.2021-02-14T04-01-33Z	bd11edda91f3	gnutls@3.6.14-7.el8_3	0:3.6.16-5.el8_6

Open the chart page →

6,915

minio-standalonewenerme

1.0.2

1 of 1 See more

minio-standalone wenerme 1.0.2

1 of the 1 container images this version deploys carry CVE-2022-2509.

Container image	Digest	Package	Fixed in
minio/minio :RELEASE.2022-01-04T07-41-07Z	1484c87239ea	gnutls@3.6.16-4.el8	0:3.6.16-5.el8_6

Open the chart page →

6,138

sambawenerme

1.0.0

1 of 1 See more

samba wenerme 1.0.0

1 of the 1 container images this version deploys carry CVE-2022-2509.

Container image	Digest	Package	Fixed in
wener/samba :4.13.3	9a42bae466d4	gnutls@3.7.1-r0	3.7.1-r1

Open the chart page →

2,555

vaultwardenwitcom-gmbh

0.2.0

1 of 2 See more

vaultwarden witcom-gmbh 0.2.0

1 of the 2 container images this version deploys carry CVE-2022-2509.

Container image	Digest	Package	Fixed in
vaultwarden/server :1.25.2	39f34c5159a2	gnutls28@3.7.1-5+deb11u1	3.7.1-5+deb11u2

Open the chart page →

1,585

wp-gats-helmwordpress-gatsby

0.0.1

1 of 3 See more

wp-gats-helm wordpress-gatsby 0.0.1

1 of the 3 container images this version deploys carry CVE-2022-2509.

Container image	Digest	Package	Fixed in
library/wordpress :6.0.0-php8.0-apache	277c6c25980f	gnutls28@3.7.1-5	3.7.1-5+deb11u2

Open the chart page →

2,021

workshop-pipelinesworkshop-pipelines

0.1.6

1 of 2 See more

workshop-pipelines workshop-pipelines 0.1.6

1 of the 2 container images this version deploys carry CVE-2022-2509.

Container image	Digest	Package	Fixed in
quay.io/maximilianopizarro/workshop-pipelines :latest	e383ba3e0966	gnutls@3.6.16-4.el8	0:3.6.16-5.el8_6

Open the chart page →

11,577

clickhousezloi-space

1.2.0

2 of 3 See more

clickhouse zloi-space 1.2.0

2 of the 3 container images this version deploys carry CVE-2022-2509.

Container image	Digest	Package	Fixed in
yandex/clickhouse-client :21.3	863f94a0f607	gnutls28@3.5.18-1ubuntu1.5	3.5.18-1ubuntu1.6
yandex/clickhouse-server :21.3.20	4eccfffb01d7	gnutls28@3.6.13-2ubuntu1.6	3.6.13-2ubuntu1.7

Open the chart page →

9,207

Container images carrying it

579 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container image	Digest	Package	Fixed in	Used by
taigaio/taiga-back :6.4.2	9f97323cc150	gnutls28@3.7.1-5	3.7.1-5+deb11u2	1
tautulli/tautulli :v2.7.7	c4da15f058ea	gnutls28@3.7.1-5	3.7.1-5+deb11u2	1
thecampagnards/trafficlight-api :main	7dca9d973837	gnutls28@3.6.13-2ubuntu1.3	3.6.13-2ubuntu1.7	1
timescale/timescaledb-ha :pg14-ts2.6-latest	ed719c0cd19d	gnutls28@3.7.3-4ubuntu1	3.7.3-4ubuntu1.1	1
torrespro/mca-worker :2.0.0	6d3bd305a1ba	gnutls28@3.7.1-5+deb11u1	3.7.1-5+deb11u2	1
turt2live/matrix-media-repo :v1.2.8	bfbd459f89a5	gnutls@3.7.1-r0	3.7.1-r1	1
tvanro/prerender-alpine :6.4.0	6909015f0328	gnutls@3.7.1-r0	3.7.1-r1	1
ubcctlt/barman :v2.19	cbbbbc8ae16b	gnutls28@3.7.1-5	3.7.1-5+deb11u2	1
uffizzi/app :latest	66e9e3937c60	gnutls28@3.7.1-5	3.7.1-5+deb11u2	1
utkuozdemir/nvidia_gpu_exporter :0.3.0	149f9e7e7aa3	gnutls28@3.6.13-2ubuntu1.6	3.6.13-2ubuntu1.7	1
vexorian/dizquetv :1.4.3	7e2b99844a5c	gnutls28@3.5.18-1ubuntu1.4	3.5.18-1ubuntu1.6	1
vientoprojects/kubernetes-monitoring-telegram-bot :latest	eb2a71531741	gnutls28@3.5.18-1ubuntu1.4	3.5.18-1ubuntu1.6	1
viniciusfcf/gitops-quarkus-app-jvm :latest	bba8ee1b5cd5	gnutls@3.6.16-4.el8	0:3.6.16-5.el8_6	1
vlebediantsev/config-server-another :latest	e7f20450d2ae	gnutls28@3.7.1-5+deb11u1	3.7.1-5+deb11u2	1
vlebediantsev/file-system-ms-final :latest	10393a89b4a8	gnutls28@3.7.1-5+deb11u1	3.7.1-5+deb11u2	1
vlebediantsev/logic-ms :latest	df8bf38c535b	gnutls28@3.7.1-5+deb11u1	3.7.1-5+deb11u2	1
vlebediantsev/registration-ms-final :latest	427af418b75e	gnutls28@3.7.1-5+deb11u1	3.7.1-5+deb11u2	1
vlebediantsev/user-data-ms-final-final :latest	9319437f3c8f	gnutls28@3.7.1-5+deb11u1	3.7.1-5+deb11u2	1
voltha/voltha-onos :5.1.8	e038acb950d3	gnutls28@3.5.18-1ubuntu1.4	3.5.18-1ubuntu1.6	1
wavefronthq/proxy :9.2	d1064d28f6eb	gnutls28@3.5.18-1ubuntu1.4	3.5.18-1ubuntu1.6	1
wekanteam/wekan :v4.22	68a51f0327df	gnutls28@3.6.13-2ubuntu1.2	3.6.13-2ubuntu1.7	1
wener/samba :4.13.3	9a42bae466d4	gnutls@3.7.1-r0	3.7.1-r1	1
woojoong/wowza :latest	ec230db19652	gnutls28@3.5.18-1ubuntu1	3.5.18-1ubuntu1.6	1
xeladock/mysql_dns :latest	4baf531453f1	gnutls28@3.7.3-4ubuntu1	3.7.3-4ubuntu1.1	1
xeladock/nginx2 :latest	c259a67b1dff	gnutls28@3.7.3-4ubuntu1	3.7.3-4ubuntu1.1	1
xtrendence/cryptofolio :V.2.2.0	e6e6612bb94c	gnutls28@3.7.1-5	3.7.1-5+deb11u2	1
xuxueli/xxl-job-admin :2.4.0	640093c35fd6	gnutls28@3.7.1-5	3.7.1-5+deb11u2	1
yandex/clickhouse-client :21.3	863f94a0f607	gnutls28@3.5.18-1ubuntu1.5	3.5.18-1ubuntu1.6	1
yandex/clickhouse-server :latest	1cbf75aabe1e	gnutls28@3.6.13-2ubuntu1.6	3.6.13-2ubuntu1.7	1
yandex/clickhouse-server :21.3.20	4eccfffb01d7	gnutls28@3.6.13-2ubuntu1.6	3.6.13-2ubuntu1.7	1
yandex/clickhouse-server :19.17	ab1738a64b70	gnutls28@3.5.18-1ubuntu1.3	3.5.18-1ubuntu1.6	1
yandex/clickhouse-server :19.14	ccf9c2b5e3f2	gnutls28@3.5.18-1ubuntu1.3	3.5.18-1ubuntu1.6	1
yandex/clickhouse-server :19.16	d210dc69321e	gnutls28@3.5.18-1ubuntu1.3	3.5.18-1ubuntu1.6	1
youssef11gaber10/deployment-ui-react :latest	ba6853e35c60	gnutls28@3.7.1-5	3.7.1-5+deb11u2	1
yuzutech/kroki-bpmn :0.16.0	bd629239a64e	gnutls@3.7.1-r0	3.7.1-r1	1
yuzutech/kroki-excalidraw :0.16.0	15c9eef47a62	gnutls@3.7.1-r0	3.7.1-r1	1
yuzutech/kroki-mermaid :0.16.0	7acc8fe7caba	gnutls@3.7.1-r0	3.7.1-r1	1
zabbix/zabbix-agent :ubuntu-5.4.6	2127168cab03	gnutls28@3.6.13-2ubuntu1.6	3.6.13-2ubuntu1.7	1
zabbix/zabbix-agent2 :ubuntu-6.0.8	e5b594057c9c	gnutls28@3.7.3-4ubuntu1	3.7.3-4ubuntu1.1	1
zabbix/zabbix-server-pgsql :ubuntu-5.4.6	6c946b1f45cd	gnutls28@3.6.13-2ubuntu1.6	3.6.13-2ubuntu1.7	1
zabbix/zabbix-server-pgsql :ubuntu-6.0.8	d59ffa07f615	gnutls28@3.7.3-4ubuntu1	3.7.3-4ubuntu1.1	1
zabbix/zabbix-web-nginx-pgsql :ubuntu-5.4.6	01de79c31391	gnutls28@3.6.13-2ubuntu1.6	3.6.13-2ubuntu1.7	1
zabbix/zabbix-web-nginx-pgsql :ubuntu-6.0.8	99e9a090b516	gnutls28@3.7.3-4ubuntu1	3.7.3-4ubuntu1.1	1
zabbix/zabbix-web-service :ubuntu-6.0.8	ee4baa872280	gnutls28@3.7.3-4ubuntu1	3.7.3-4ubuntu1.1	1
zbalogh/reservation-api-server :1.0.9	7c247e399a1f	gnutls28@3.7.1-5+deb11u1	3.7.1-5+deb11u2	1
zzorica/k8s-mgmt-pod :0.5.2	640ca4de2922	gnutls28@3.7.1-5+deb11u1	3.7.1-5+deb11u2	1
gcr.io/flink-operator/deployer :webhook-cert	809338a69bd5	gnutls28@3.5.18-1ubuntu1.1	3.5.18-1ubuntu1.6	1
gcr.io/istio-release/pilot :1.11.1	c552478f8f11	gnutls28@3.6.13-2ubuntu1.6	3.6.13-2ubuntu1.7	1
gcr.io/istio-release/proxyv2 :1.11.1	9538fabe49fd	gnutls28@3.6.13-2ubuntu1.6	3.6.13-2ubuntu1.7	1
gcr.io/tfx-oss-public/ml_metadata_store_server :1.5.0	db8691752b4c	gnutls28@3.5.18-1ubuntu1.5	3.5.18-1ubuntu1.6	1