CVE-2022-25147

Medium

Advisory

Published 31 Jan 2023In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 6.5; base score, highest
EPSS: 0.014; 71st percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 155; of 17,781 indexed, latest versions
Container images: 150; deployed by those charts
Fix available: 4 of 4; affected packages

Red Hat Security Advisory: apr-util security update

Carried by container images the latest versions of 155 of 17,781 indexed charts deploy, on 150 images.

Affected package	Affected versions	Fixed in	Images
apr-utildeb	1.6.1-4, 1.6.1-4ubuntu2, 1.6.1-5	1.6.1-4+deb10u1, 1.6.1-4ubuntu2.1, 1.6.1-5+deb11u1	145
aprapk	1.7.0-r0, 1.7.0-r1, 1.7.0-r2	1.7.1-r0	4
apr-utilapk	1.6.1-r11, 1.6.1-r12, 1.6.1-r14	1.6.3-r0	4
apr-utilrpm	1.6.1-6.el8	0:1.6.1-6.el8_8.1	1

OSV records: ALPINE-CVE-2022-25147 RHSA-2023:3109 UBUNTU-CVE-2022-25147 DLA-3332-1 DSA-5364-1
Also known as: USN-5870-1

Charts affected

155 by stars

Chart

Latest

Affected images

Radar Score

tool-quickstatementswbstack

0.4.0

1 of 1 See more

tool-quickstatements wbstack 0.4.0

1 of the 1 container images this version deploys carry CVE-2022-25147.

Container image	Digest	Package	Fixed in
ghcr.io/wbstack/quickstatements :1.3.5	88423e422ea8	apr-util@1.6.1-4	1.6.1-4+deb10u1

Open the chart page →

1,698

tool-widarwbstack

0.4.0

1 of 1 See more

tool-widar wbstack 0.4.0

1 of the 1 container images this version deploys carry CVE-2022-25147.

Container image	Digest	Package	Fixed in
ghcr.io/wbstack/widar :1.3	1702fc9df79f	apr-util@1.6.1-4	1.6.1-4+deb10u1

Open the chart page →

1,480

drillwearefrank

1.3.6

1 of 3 See more

drill wearefrank 1.3.6

1 of the 3 container images this version deploys carry CVE-2022-25147.

Container image	Digest	Package	Fixed in
apache/drill :1.21.1	1f96558fd292	apr-util@1.6.1-5	1.6.1-5+deb11u1

Open the chart page →

9,397

weather-chartweather-web-app

0.1.0

1 of 1 See more

weather-chart weather-web-app 0.1.0

1 of the 1 container images this version deploys carry CVE-2022-25147.

Container image	Digest	Package	Fixed in
zohardocker12/weather_app_flask :latest	b86d60dbb68d	apr-util@1.6.1-4	1.6.1-4+deb10u1

Open the chart page →

2,670

wp-gats-helmwordpress-gatsby

0.0.1

1 of 3 See more

wp-gats-helm wordpress-gatsby 0.0.1

1 of the 3 container images this version deploys carry CVE-2022-25147.

Container image	Digest	Package	Fixed in
library/wordpress :6.0.0-php8.0-apache	277c6c25980f	apr-util@1.6.1-5	1.6.1-5+deb11u1

Open the chart page →

2,021

Container images carrying it

150 by charts deploying them

A fixed version is listed for 4 of the 4 affected packages.

Container image	Digest	Package	Fixed in	Used by
robotshop/rs-payment :latest	774b52c6180d	apr-util@1.6.1-5	1.6.1-5+deb11u1	1
robotshop/rs-ratings :latest	4899c686c249	apr-util@1.6.1-5	1.6.1-5+deb11u1	1
robotshop/rs-shipping :latest	89753ab48919	apr-util@1.6.1-5	1.6.1-5+deb11u1	1
roundcube/roundcubemail :1.5.3-apache	a8ea6fd751dc	apr-util@1.6.1-5	1.6.1-5+deb11u1	1
samajh/alprbackend :latest	ea742b4372ad	apr-util@1.6.1-4	1.6.1-4+deb10u1	1
samajh/alprfrontend :latest	05ef4fddbb75	apr-util@1.6.1-4	1.6.1-4+deb10u1	1
seataio/seata-server :latest	703b5de7f1a6	apr-util@1.6.1-5	1.6.1-5+deb11u1	1
shadow228/accountingcollege :0.0.2	8fcea5b71906	apr-util@1.6.1-4	1.6.1-4+deb10u1	1
snipe/snipe-it :v6.0.14	55fb7636a98c	apr-util@1.6.1-4ubuntu2	1.6.1-4ubuntu2.1	1
socialmediamacroscope/classification_predict :0.1.2	4fb86885d64d	apr-util@1.6.1-5	1.6.1-5+deb11u1	1
socialmediamacroscope/classification_split :0.1.2	4bfda60829fe	apr-util@1.6.1-5	1.6.1-5+deb11u1	1
socialmediamacroscope/classification_train :0.1.2	07477060bba8	apr-util@1.6.1-5	1.6.1-5+deb11u1	1
socialmediamacroscope/screen_name_prompt :0.1.2	724f3f5702e0	apr-util@1.6.1-5	1.6.1-5+deb11u1	1
solidnerd/bookstack :21.12	762ffd5c51d3	apr-util@1.6.1-4	1.6.1-4+deb10u1	1
someblackmagic/k8s-testing-multitool :v0.1.0	6eca64b6b440	apr-util@1.6.1-4ubuntu2	1.6.1-4ubuntu2.1	1
stakater/workshop-operator :v0.0.38	97bf456cc97c	apr-util@1.6.1-6.el8	0:1.6.1-6.el8_8.1	1
stratospire/activityrelay :0.2.3	a4c34cb01117	apr-util@1.6.1-5	1.6.1-5+deb11u1	1
svtechnmaa/svtech_http_thruk :v1.0.2	e19aba397c1f	apr-util@1.6.1-4	1.6.1-4+deb10u1	1
tachyongroup/mlflow-deployment-controller-ui :mlflow-controller-0.1.8	f4f7fabe1037	apr-util@1.6.1-5	1.6.1-5+deb11u1	1
tooljet/tooljet-ce :v1.18.0	c85a4720e42e	apr-util@1.6.1-4	1.6.1-4+deb10u1	1
vlebediantsev/config-server-another :latest	e7f20450d2ae	apr-util@1.6.1-5	1.6.1-5+deb11u1	1
vlebediantsev/file-system-ms-final :latest	10393a89b4a8	apr-util@1.6.1-5	1.6.1-5+deb11u1	1
vlebediantsev/logic-ms :latest	df8bf38c535b	apr-util@1.6.1-5	1.6.1-5+deb11u1	1
vlebediantsev/registration-ms-final :latest	427af418b75e	apr-util@1.6.1-5	1.6.1-5+deb11u1	1
vlebediantsev/user-data-ms-final-final :latest	9319437f3c8f	apr-util@1.6.1-5	1.6.1-5+deb11u1	1
volkerraschek/postfixadmin :3.3.13	c4f10aebf87b	apr-util@1.6.1-5	1.6.1-5+deb11u1	1
weblate/weblate :3.11.3-1	82848df56ecd	apr-util@1.6.1-4	1.6.1-4+deb10u1	1
xtrendence/cryptofolio :V.2.2.0	e6e6612bb94c	apr-util@1.6.1-5	1.6.1-5+deb11u1	1
youssef11gaber10/deployment-ui-react :latest	ba6853e35c60	apr-util@1.6.1-5	1.6.1-5+deb11u1	1
zbalogh/reservation-api-server :1.0.9	7c247e399a1f	apr-util@1.6.1-5	1.6.1-5+deb11u1	1
zohardocker12/weather_app_flask :latest	b86d60dbb68d	apr-util@1.6.1-4	1.6.1-4+deb10u1	1
gcr.io/ml-pipeline/metadata-writer :2.0.0-alpha.5	ec3ae9f6df47	apr-util@1.6.1-5	1.6.1-5+deb11u1	1
ghcr.io/codingducksrl/wordpress :6.0.2	3113c0960507	apr-util@1.6.1-5	1.6.1-5+deb11u1	1
ghcr.io/fleeksoft/hbase/hdfs :3.3.3.2	ac62269785ac	apr-util@1.6.1-5	1.6.1-5+deb11u1	1
ghcr.io/grofers/legend :0.1	d6e901ad0ebd	apr-util@1.6.1-4	1.6.1-4+deb10u1	1
ghcr.io/k8s-at-home/apache-musicindex :v1.4.1-2	c9bd82dc5fda	apr-util@1.6.1-4ubuntu2	1.6.1-4ubuntu2.1	1
ghcr.io/leoquote/tinyproxy_exporter :master	6b4103d88dbb	apr-util@1.6.1-5	1.6.1-5+deb11u1	1
ghcr.io/nathanvaughn/webtrees :2.0.19	69423a100fab	apr-util@1.6.1-5	1.6.1-5+deb11u1	1
ghcr.io/privacyengineering/collector-go :main	7217f1a4fa28	apr-util@1.6.1-4	1.6.1-4+deb10u1	1
ghcr.io/privacyengineering/consumer :main	73f59c032812	apr-util@1.6.1-4	1.6.1-4+deb10u1	1
ghcr.io/wbstack/api :8x.9.11	eee94f9f7a53	apr-util@1.6.1-5	1.6.1-5+deb11u1	1
ghcr.io/wbstack/cradle :2.0.1	1c7a78c54f77	apr-util@1.6.1-4	1.6.1-4+deb10u1	1
ghcr.io/wbstack/mediawiki :1.37-7.4-20220621-fp-beta-0	c3012c8a34b4	apr-util@1.6.1-5	1.6.1-5+deb11u1	1
ghcr.io/wbstack/quickstatements :1.3.5	88423e422ea8	apr-util@1.6.1-4	1.6.1-4+deb10u1	1
ghcr.io/wbstack/widar :1.3	1702fc9df79f	apr-util@1.6.1-4	1.6.1-4+deb10u1	1
public.ecr.aws/supportpal/helpdesk-monolithic :4.0.4	573779e57fae	apr-util@1.6.1-4ubuntu2	1.6.1-4ubuntu2.1	1
quay.io/bentoml/yatai :0.4.6	14b482c1f1b8	apr-util@1.6.1-5	1.6.1-5+deb11u1	1
quay.io/mongodb/farm-intro-frontend :0.1	99ccdfd543e1	apr-util@1.6.1-4	1.6.1-4+deb10u1	1
quay.io/snowdrop/spring-boot-rest-http-example :2.7	b1a054613715	apr-util@1.6.1-5	1.6.1-5+deb11u1	1
registry.gitlab.com/open-forms/design-catalogue :latest	f21f19346b29	apr-util@1.6.1-4	1.6.1-4+deb10u1	1