CVE-2022-2509

High

Advisory

Published 1 Aug 2022In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.019; 78th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 609; of 17,781 indexed, latest versions
Container images: 577; deployed by those charts
Fix available: 3 of 3; affected packages

Red Hat Security Advisory: gnutls security update

Carried by container images the latest versions of 609 of 17,781 indexed charts deploy, on 577 images.

Affected package	Affected versions	Fixed in	Images
gnutls28deb	3.5.17-1ubuntu1, 3.5.18-1ubuntu1, 3.5.18-1ubuntu1.1, 3.5.18-1ubuntu1.2+9 more	3.5.18-1ubuntu1.6, 3.6.13-2ubuntu1.7, 3.7.1-5+deb11u2, 3.7.3-4ubuntu1.1	467
gnutlsrpm	3.6.5-2.el8, 3.6.7-14.4.1, 3.6.7-lp151.2.3.1, 3.6.8-8.el8+7 more	0:3.6.16-5.el8_6, 3.6.7-150200.14.19.2, 3.7.7-1.1	86
gnutlsapk	3.7.1-r0, 3.7.6-r0	3.7.1-r1, 3.7.7-r0	24

OSV records: ALPINE-CVE-2022-2509 RHSA-2022:7105 UBUNTU-CVE-2022-2509 DSA-5203-1 openSUSE-SU-2024:12233-1 SUSE-SU-2022:2882-1
Also known as: USN-5550-1

Charts affected

609 by stars

Chart

Latest

Affected images

Radar Score

emissary-ingresswenerme

8.12.2

1 of 2 See more

emissary-ingress wenerme 8.12.2

1 of the 2 container images this version deploys carry CVE-2022-2509.

Container image	Digest	Package	Fixed in
istio/kubectl :1.5.10	dbb7726d1bf0	gnutls28@3.5.18-1ubuntu1.4	3.5.18-1ubuntu1.6

Open the chart page →

10,843

longhornwenerme

1.2.3

1 of 2 See more

longhorn wenerme 1.2.3

1 of the 2 container images this version deploys carry CVE-2022-2509.

Container image	Digest	Package	Fixed in
longhornio/longhorn-manager :v1.2.3	dca34321452c	gnutls28@3.6.13-2ubuntu1.6	3.6.13-2ubuntu1.7

Open the chart page →

15,230

miniowenerme

8.0.10

1 of 1 See more

minio wenerme 8.0.10

1 of the 1 container images this version deploys carry CVE-2022-2509.

Container image	Digest	Package	Fixed in
minio/minio :RELEASE.2021-02-14T04-01-33Z	bd11edda91f3	gnutls@3.6.14-7.el8_3	0:3.6.16-5.el8_6

Open the chart page →

6,915

minio-standalonewenerme

1.0.2

1 of 1 See more

minio-standalone wenerme 1.0.2

1 of the 1 container images this version deploys carry CVE-2022-2509.

Container image	Digest	Package	Fixed in
minio/minio :RELEASE.2022-01-04T07-41-07Z	1484c87239ea	gnutls@3.6.16-4.el8	0:3.6.16-5.el8_6

Open the chart page →

6,138

sambawenerme

1.0.0

1 of 1 See more

samba wenerme 1.0.0

1 of the 1 container images this version deploys carry CVE-2022-2509.

Container image	Digest	Package	Fixed in
wener/samba :4.13.3	9a42bae466d4	gnutls@3.7.1-r0	3.7.1-r1

Open the chart page →

2,555

vaultwardenwitcom-gmbh

0.2.0

1 of 2 See more

vaultwarden witcom-gmbh 0.2.0

1 of the 2 container images this version deploys carry CVE-2022-2509.

Container image	Digest	Package	Fixed in
vaultwarden/server :1.25.2	39f34c5159a2	gnutls28@3.7.1-5+deb11u1	3.7.1-5+deb11u2

Open the chart page →

1,585

wp-gats-helmwordpress-gatsby

0.0.1

1 of 3 See more

wp-gats-helm wordpress-gatsby 0.0.1

1 of the 3 container images this version deploys carry CVE-2022-2509.

Container image	Digest	Package	Fixed in
library/wordpress :6.0.0-php8.0-apache	277c6c25980f	gnutls28@3.7.1-5	3.7.1-5+deb11u2

Open the chart page →

2,021

workshop-pipelinesworkshop-pipelines

0.1.6

1 of 2 See more

workshop-pipelines workshop-pipelines 0.1.6

1 of the 2 container images this version deploys carry CVE-2022-2509.

Container image	Digest	Package	Fixed in
quay.io/maximilianopizarro/workshop-pipelines :latest	e383ba3e0966	gnutls@3.6.16-4.el8	0:3.6.16-5.el8_6

Open the chart page →

11,577

clickhousezloi-space

1.2.0

2 of 3 See more

clickhouse zloi-space 1.2.0

2 of the 3 container images this version deploys carry CVE-2022-2509.

Container image	Digest	Package	Fixed in
yandex/clickhouse-client :21.3	863f94a0f607	gnutls28@3.5.18-1ubuntu1.5	3.5.18-1ubuntu1.6
yandex/clickhouse-server :21.3.20	4eccfffb01d7	gnutls28@3.6.13-2ubuntu1.6	3.6.13-2ubuntu1.7

Open the chart page →

9,207

Container images carrying it

577 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container image	Digest	Package	Fixed in	Used by
dellcloud/pages :monitor	6ba7b22caacd	gnutls28@3.6.13-2ubuntu1.3	3.6.13-2ubuntu1.7	79
flyway/flyway :6.4.4	22d97ceb0c47	gnutls28@3.5.18-1ubuntu1.3	3.5.18-1ubuntu1.6	79
library/mongo :5.0.6-focal	8e70544b6c76	gnutls28@3.6.13-2ubuntu1.6	3.6.13-2ubuntu1.7	10
wurstmeister/kafka :latest	2d4bbf9cc83d	gnutls28@3.7.1-5	3.7.1-5+deb11u2	7
library/nginx :1.21 :1.21.6	2bcabc23b454	gnutls28@3.7.1-5	3.7.1-5+deb11u2	6
library/mongo :4.2.12-bionic	628741415fc9	gnutls28@3.5.18-1ubuntu1.4	3.5.18-1ubuntu1.6	4
library/mongo :4.4.6	6efa05203990	gnutls28@3.5.18-1ubuntu1.4	3.5.18-1ubuntu1.6	4
ncsa/checks :1.0.1	cc46a03e16ed	gnutls28@3.7.1-5+deb11u1	3.7.1-5+deb11u2	4
oscarsotosanchez/weatherservice :v1.0	911ec961d10b	gnutls28@3.5.18-1ubuntu1.4	3.5.18-1ubuntu1.6	4
cloudve/cloudlaunch-server :latest	4a3d7fae90bb	gnutls28@3.6.13-2ubuntu1.6	3.6.13-2ubuntu1.7	3
dgraph/dgraph :v21.12.0	3b55ea83fffe	gnutls28@3.6.13-2ubuntu1.3	3.6.13-2ubuntu1.7	3
grafana/promtail :2.4.2	626900031c4e	gnutls28@3.7.1-5	3.7.1-5+deb11u2	3
library/postgres :14.1	3162a6ead070	gnutls28@3.7.1-5	3.7.1-5+deb11u2	3
library/solr :8.11.1	8c5f7881cebb	gnutls28@3.7.1-5	3.7.1-5+deb11u2	3
minio/minio :RELEASE.2021-02-14T04-01-33Z	bd11edda91f3	gnutls@3.6.14-7.el8_3	0:3.6.16-5.el8_6	3
phpmyadmin/phpmyadmin :5.2.0	ae6dadd9cf3c	gnutls28@3.7.1-5	3.7.1-5+deb11u2	3
selenium/hub :3.141.59	02f251d48d5f	gnutls28@3.6.13-2ubuntu1.3	3.6.13-2ubuntu1.7	3
supertokens/supertokens-postgresql :3.14	18d34c781347	gnutls28@3.7.1-5	3.7.1-5+deb11u2	3
xenondb/percona :5.7.33	0e26872a2b67	gnutls28@3.6.13-2ubuntu1.3	3.6.13-2ubuntu1.7	3
quay.io/devtron/clair :4.3.6	75fb847ac045	gnutls@3.6.16-4.el8	0:3.6.16-5.el8_6	3
quay.io/devtron/google-chat-alert-manager :v2.0.2	39f2c6e0af38	gnutls28@3.6.13-2ubuntu1.6	3.6.13-2ubuntu1.7	3
quay.io/redhat-cop/kube-rbac-proxy :v0.11.0	c68135620167	gnutls@3.6.16-4.el8	0:3.6.16-5.el8_6	3
1password/scim :v2.3.1	29d0c6cb67eb	gnutls28@3.7.1-5	3.7.1-5+deb11u2	2
freeradius/freeradius-server :3.0.21	21c8bfa904d8	gnutls28@3.5.18-1ubuntu1.3	3.5.18-1ubuntu1.6	2
geoservercloud/geoserver-cloud-gateway :1.0-RC3	756559ee788a	gnutls28@3.6.13-2ubuntu1.6	3.6.13-2ubuntu1.7	2
geoservercloud/geoserver-cloud-rest :1.0-RC3	99540eef78ad	gnutls28@3.6.13-2ubuntu1.6	3.6.13-2ubuntu1.7	2
geoservercloud/geoserver-cloud-wcs :1.0-RC3	5c254c53a357	gnutls28@3.6.13-2ubuntu1.6	3.6.13-2ubuntu1.7	2
geoservercloud/geoserver-cloud-webui :1.0-RC3	c687b1cbc891	gnutls28@3.6.13-2ubuntu1.6	3.6.13-2ubuntu1.7	2
geoservercloud/geoserver-cloud-wfs :1.0-RC3	5288f320cf36	gnutls28@3.6.13-2ubuntu1.6	3.6.13-2ubuntu1.7	2
geoservercloud/geoserver-cloud-wms :1.0-RC3	a30a60ac6cd0	gnutls28@3.6.13-2ubuntu1.6	3.6.13-2ubuntu1.7	2
grafana/agent-operator :v0.25.1	a136c6208aa3	gnutls28@3.7.1-5	3.7.1-5+deb11u2	2
honestica/kube-iptables-tailer :master-91	a393242fb939	gnutls28@3.6.13-2ubuntu1.6	3.6.13-2ubuntu1.7	2
hookiesolutions/webhookie :latest	0629694246ba	gnutls28@3.6.13-2ubuntu1.6	3.6.13-2ubuntu1.7	2
hyperledger/besu :22.4-openjdk-latest	a674d35eec9a	gnutls28@3.6.13-2ubuntu1.6	3.6.13-2ubuntu1.7	2
interlayhq/interbtc-clients :vault-master	c3e311de67da	gnutls28@3.6.13-2ubuntu1.6	3.6.13-2ubuntu1.7	2
iomesh/node-disk-exporter :1.8.0	f03148764f38	gnutls28@3.6.13-2ubuntu1.6	3.6.13-2ubuntu1.7	2
istio/kubectl :1.5.10	dbb7726d1bf0	gnutls28@3.5.18-1ubuntu1.4	3.5.18-1ubuntu1.6	2
istio/proxyv2 :1.10.3	a78b7a165744	gnutls28@3.5.18-1ubuntu1.4	3.5.18-1ubuntu1.6	2
library/cassandra :3.11.6	5aa8400b4b3b	gnutls28@3.5.18-1ubuntu1.4	3.5.18-1ubuntu1.6	2
library/elasticsearch :7.17.3	5e6ac15bf6a5	gnutls28@3.6.13-2ubuntu1.6	3.6.13-2ubuntu1.7	2
library/mariadb :10.8.3	0abf60f81588	gnutls28@3.7.3-4ubuntu1	3.7.3-4ubuntu1.1	2
library/mongo :4.2.3	58b25d51baa1	gnutls28@3.5.18-1ubuntu1.3	3.5.18-1ubuntu1.6	2
library/neo4j :4.3.2-enterprise	56a9453c4064	gnutls28@3.7.1-5+deb11u1	3.7.1-5+deb11u2	2
mesosphere/kubeaddons-catalog :v0.11.4	073db43d0b8b	gnutls28@3.6.13-2ubuntu1.3	3.6.13-2ubuntu1.7	2
minio/operator :v4.3.7	54393e03f3b2	gnutls@3.6.16-4.el8	0:3.6.16-5.el8_6	2
ngick8stesting/c3po-mmeinit :latest	1e764eab77b4	gnutls28@3.5.18-1ubuntu1	3.5.18-1ubuntu1.6	2
obsidiandynamics/kafdrop :3.30.0	5337c9e0e2de	gnutls28@3.6.13-2ubuntu1.6	3.6.13-2ubuntu1.7	2
passbolt/passbolt :3.4.0-ce-non-root	655547e17263	gnutls28@3.7.1-5	3.7.1-5+deb11u2	2
pecan/bety :5.4.1	f825d480cd62	gnutls28@3.7.1-5	3.7.1-5+deb11u2	2
scorpiobroker/scorpio :RegistrySubscriptionManager_2.1.0	01e11d800459	gnutls28@3.7.1-5	3.7.1-5+deb11u2	2