CVE-2022-25147

Medium

Advisory

Published 31 Jan 2023In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 6.5; base score, highest
EPSS: 0.014; 71st percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 155; of 17,781 indexed, latest versions
Container images: 150; deployed by those charts
Fix available: 4 of 4; affected packages

Red Hat Security Advisory: apr-util security update

Carried by container images the latest versions of 155 of 17,781 indexed charts deploy, on 150 images.

Affected package	Affected versions	Fixed in	Images
apr-utildeb	1.6.1-4, 1.6.1-4ubuntu2, 1.6.1-5	1.6.1-4+deb10u1, 1.6.1-4ubuntu2.1, 1.6.1-5+deb11u1	145
aprapk	1.7.0-r0, 1.7.0-r1, 1.7.0-r2	1.7.1-r0	4
apr-utilapk	1.6.1-r11, 1.6.1-r12, 1.6.1-r14	1.6.3-r0	4
apr-utilrpm	1.6.1-6.el8	0:1.6.1-6.el8_8.1	1

OSV records: ALPINE-CVE-2022-25147 RHSA-2023:3109 UBUNTU-CVE-2022-25147 DLA-3332-1 DSA-5364-1
Also known as: USN-5870-1

Charts affected

155 by stars

Chart

Latest

Affected images

Radar Score

tool-quickstatementswbstack

0.4.0

1 of 1 See more

tool-quickstatements wbstack 0.4.0

1 of the 1 container images this version deploys carry CVE-2022-25147.

Container image	Digest	Package	Fixed in
ghcr.io/wbstack/quickstatements :1.3.5	88423e422ea8	apr-util@1.6.1-4	1.6.1-4+deb10u1

Open the chart page →

1,698

tool-widarwbstack

0.4.0

1 of 1 See more

tool-widar wbstack 0.4.0

1 of the 1 container images this version deploys carry CVE-2022-25147.

Container image	Digest	Package	Fixed in
ghcr.io/wbstack/widar :1.3	1702fc9df79f	apr-util@1.6.1-4	1.6.1-4+deb10u1

Open the chart page →

1,480

drillwearefrank

1.3.6

1 of 3 See more

drill wearefrank 1.3.6

1 of the 3 container images this version deploys carry CVE-2022-25147.

Container image	Digest	Package	Fixed in
apache/drill :1.21.1	1f96558fd292	apr-util@1.6.1-5	1.6.1-5+deb11u1

Open the chart page →

9,397

weather-chartweather-web-app

0.1.0

1 of 1 See more

weather-chart weather-web-app 0.1.0

1 of the 1 container images this version deploys carry CVE-2022-25147.

Container image	Digest	Package	Fixed in
zohardocker12/weather_app_flask :latest	b86d60dbb68d	apr-util@1.6.1-4	1.6.1-4+deb10u1

Open the chart page →

2,670

wp-gats-helmwordpress-gatsby

0.0.1

1 of 3 See more

wp-gats-helm wordpress-gatsby 0.0.1

1 of the 3 container images this version deploys carry CVE-2022-25147.

Container image	Digest	Package	Fixed in
library/wordpress :6.0.0-php8.0-apache	277c6c25980f	apr-util@1.6.1-5	1.6.1-5+deb11u1

Open the chart page →

2,021

Container images carrying it

150 by charts deploying them

A fixed version is listed for 4 of the 4 affected packages.

Container image	Digest	Package	Fixed in	Used by
osixia/phpldapadmin :0.9.0	d112b82be133	apr-util@1.6.1-4	1.6.1-4+deb10u1	5
conduction/openwebconcept :4.8	ee2121b569ac	apr-util@1.6.1-4	1.6.1-4+deb10u1	3
phpmyadmin/phpmyadmin :5.2.0	ae6dadd9cf3c	apr-util@1.6.1-5	1.6.1-5+deb11u1	3
siddharth67/block-buster-dev :7.6.0	4e1151ea5774	apr-util@1.6.1-5	1.6.1-5+deb11u1	3
quay.io/devtron/svn-git-sync :v7	8e54bc2d261f	apr@1.7.0-r2 apr-util@1.6.1-r12	1.7.1-r0 1.6.3-r0	3
amancevice/superset :0.35.2	12a0a9e66550	apr-util@1.6.1-4	1.6.1-4+deb10u1	2
ldapaccountmanager/lam :8.0.1	d46cf25d1dda	apr-util@1.6.1-5	1.6.1-5+deb11u1	2
martinaif/backstage-k8s-demo-backend :test1	43bc40a3da0e	apr-util@1.6.1-4	1.6.1-4+deb10u1	2
pecan/bety :5.4.1	f825d480cd62	apr-util@1.6.1-5	1.6.1-5+deb11u1	2
stakater/stakater-nordmart-review-ui :1.0.14	3f4926eedc74	apr-util@1.6.1-4	1.6.1-4+deb10u1	2
ujamii/prometheus-sentry-exporter :0.5.0	6243197349e1	apr-util@1.6.1-4	1.6.1-4+deb10u1	2
weblate/weblate :4.2.2-1	69c160d37a3c	apr-util@1.6.1-4	1.6.1-4+deb10u1	2
adolfintel/speedtest :latest	1f828fe83374	apr-util@1.6.1-5	1.6.1-5+deb11u1	1
afrank/mozalert-controller :latest	d463c37b08d7	apr-util@1.6.1-4	1.6.1-4+deb10u1	1
apache/drill :1.21.1	1f96558fd292	apr-util@1.6.1-5	1.6.1-5+deb11u1	1
apache/superset :9cdaa280429ec297db16d56c94fd77b5d2aff107	975ab033580d	apr-util@1.6.1-5	1.6.1-5+deb11u1	1
archish27/python-fastapi-postgres :latest	6610071a2101	apr-util@1.6.1-5	1.6.1-5+deb11u1	1
aroralalit/student-producer :1.0.0	2a094f597b36	apr-util@1.6.1-5	1.6.1-5+deb11u1	1
arturisimo/server-urjc :v1.0	d8dc4430531e	apr-util@1.6.1-4	1.6.1-4+deb10u1	1
asdkant/fastapi-hello-world :latest	a23d8bf7c885	apr-util@1.6.1-4	1.6.1-4+deb10u1	1
assistiot/authorization_svr :latest	db9361dad79b	apr-util@1.6.1-4	1.6.1-4+deb10u1	1
assistiot/cybersecurity-monitoring_ir-thv :latest	c8b6c7eaa0cd	apr-util@1.6.1-5	1.6.1-5+deb11u1	1
atomix/atomix :3.1.12	7738ff4f5c63	apr-util@1.6.1-5	1.6.1-5+deb11u1	1
azhar008/flaskapplication :latest	a1e827b0adea	apr-util@1.6.1-5	1.6.1-5+deb11u1	1
bastilimbach/docker-magicmirror :v2.15.0	41b0835ab31e	apr-util@1.6.1-4	1.6.1-4+deb10u1	1
bicarus/mx-api-service :1.0.2-hf1	dab88659ae3b	apr-util@1.6.1-4	1.6.1-4+deb10u1	1
buntha/mlflow :2.1.1	154542cc3083	apr-util@1.6.1-5	1.6.1-5+deb11u1	1
camptocamp/bucket-cloner :latest	acfafc308d88	apr-util@1.6.1-4	1.6.1-4+deb10u1	1
camptocamp/ekorre :0.1.0	35c91d5fda04	apr-util@1.6.1-4	1.6.1-4+deb10u1	1
cdignam/kodiak :v0.54.0	5a6a55b39cee	apr-util@1.6.1-4	1.6.1-4+deb10u1	1
ceticasbl/tsimulus-saas :0.1.18	bc34ce180d0c	apr-util@1.6.1-4	1.6.1-4+deb10u1	1
chubaofs/cfs-client :3.2.0	15ff74209ce7	apr-util@1.6.1-5	1.6.1-5+deb11u1	1
chubaofs/cfs-server :3.2.0	205030e045f2	apr-util@1.6.1-5	1.6.1-5+deb11u1	1
ckulka/baikal :0.8.0	aedb1f4f3fa0	apr-util@1.6.1-4	1.6.1-4+deb10u1	1
coderaiser/cloudcmd :16.6.1	b34a9775c7ce	apr-util@1.6.1-4	1.6.1-4+deb10u1	1
crazymax/rtorrent-rutorrent :3.10-0.9.8-0.13.8	fb307f5b87bf	apr@1.7.0-r2 apr-util@1.6.1-r14	1.7.1-r0 1.6.3-r0	1
danuk/telegram-sender :0.0.1	026560388070	apr-util@1.6.1-5	1.6.1-5+deb11u1	1
darkobas/ethexporter :latest	62e6464491ba	apr-util@1.6.1-5	1.6.1-5+deb11u1	1
darkobas/tokenexporter :latest	a0349a0eedf0	apr-util@1.6.1-5	1.6.1-5+deb11u1	1
deltaio/delta-sharing-server :0.2.0	8b75118187c5	apr-util@1.6.1-4	1.6.1-4+deb10u1	1
dgraziotin/nginx-webdav-nononsense :1.23.1	38f2de42bed0	apr-util@1.6.1-4ubuntu2	1.6.1-4ubuntu2.1	1
dnationcloud/kubernetes-linter :0.2.1	dee6376560f5	apr-util@1.6.1-4	1.6.1-4+deb10u1	1
douz/helpdesk :latest	4384103d0219	apr-util@1.6.1-5	1.6.1-5+deb11u1	1
duck1123/me.untethr.nostr-relay :0.2.1	119fc5d4cbfb	apr-util@1.6.1-5	1.6.1-5+deb11u1	1
eaudeweb/mailtrap :2.3	b8ad9b7e19bb	apr-util@1.6.1-4	1.6.1-4+deb10u1	1
eclipseaerios/self-service-password :5.2.3	2f93bfa4cf0d	apr@1.7.0-r1 apr-util@1.6.1-r11	1.7.1-r0 1.6.3-r0	1
erlangsolutions/wombatoam :4.1.28	4680c990147a	apr-util@1.6.1-5	1.6.1-5+deb11u1	1
factly/hunting :0.2.0-stagv1.2	ca5bc71d1d5c	apr-util@1.6.1-5	1.6.1-5+deb11u1	1
fanzynoodle/smeejas :0.0.1	5f9916c1a287	apr-util@1.6.1-5	1.6.1-5+deb11u1	1
fireflyiii/core :version-5.6.14	2f4283bd0cf7	apr-util@1.6.1-4	1.6.1-4+deb10u1	1