StackRadar

CVE-2022-2837

Medium

Advisory

Published 3 Mar 2023In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
6.1
base score, highest
EPSS
0.004
32nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
28
of 17,781 indexed, latest versions
Container images
22
deployed by those charts
Fix available
None
affected package

coreDNS vulnerable to Improper Restriction of Communication Channel to Intended Endpoints

Carried by container images the latest versions of 28 of 17,781 indexed charts deploy, on 22 images.

Affected packageAffected versionsFixed inImages
github.com/coredns/corednsgolangv0.0.0-20200803163833-7d5f5b87a4fb, v0.0.0-20230206182419-055b2c31a9cf, v0.0.0-20241121192733-51e11f166ef6, v0.0.0-20251008152637-1db4568df6aa+8 moreno fix listed22
OSV records
GHSA-h828-v5pv-33qx

Charts affected

28 by stars
ChartLatestAffected imagesRadar Score
corednscorednsVerified publisher1.47.11 of 1See more

coredns coredns 1.47.1

1 of the 1 container images this version deploys carry CVE-2022-2837.

Container imageDigestPackageFixed in
coredns/coredns:1.14.6900f9c109f7a
github.com/coredns/coredns@v0.0.0-20260710050435-424d125775cd
no fix listed

Open the chart page →

330
chaos-meshchaos-meshVerified publisher2.8.41 of 4See more

chaos-mesh chaos-mesh 2.8.4

1 of the 4 container images this version deploys carry CVE-2022-2837.

Container imageDigestPackageFixed in
ghcr.io/chaos-mesh/chaos-coredns:v0.2.838bfdf5e3774
github.com/coredns/coredns@v1.7.1-0.20200803163833-7d5f5b87a4fb+dirty
no fix listed

Open the chart page →

6,342
uptime-kumaduyet0.1.71 of 1See more

uptime-kuma duyet 0.1.7

1 of the 1 container images this version deploys carry CVE-2022-2837.

Container imageDigestPackageFixed in
louislam/uptime-kuma:1.18.5a84767d7934f
github.com/coredns/coredns@v1.8.7
no fix listed

Open the chart page →

4,515
oesopsmxVerified publisher4.0.321 of 25See more

oes opsmx 4.0.32

1 of the 25 container images this version deploys carry CVE-2022-2837.

Container imageDigestPackageFixed in
minio/minio:RELEASE.2020-12-03T05-49-24Z053f103f4894
github.com/coredns/coredns@v1.4.0
no fix listed

Open the chart page →

107,811
corednssoftizyVerified publisher0.2.01 of 1See more

coredns softizy 0.2.0

1 of the 1 container images this version deploys carry CVE-2022-2837.

Container imageDigestPackageFixed in
coredns/coredns:1.10.1a0ead06651cf
github.com/coredns/coredns@v0.0.0-20230206182419-055b2c31a9cf
no fix listed

Open the chart page →

1,663
uptime-kumageek-cookbookVerified publisher1.4.21 of 1See more

uptime-kuma geek-cookbook 1.4.2

1 of the 1 container images this version deploys carry CVE-2022-2837.

Container imageDigestPackageFixed in
louislam/uptime-kuma:1.17.1a4eab252e5a2
github.com/coredns/coredns@v1.8.7
no fix listed

Open the chart page →

5,079
juicefskubesphere-stable0.16.21 of 4See more

juicefs kubesphere-stable 0.16.2

1 of the 4 container images this version deploys carry CVE-2022-2837.

Container imageDigestPackageFixed in
juicedata/juicefs-csi-driver:v0.20.043978fc60798
github.com/coredns/coredns@v1.6.6
no fix listed

Open the chart page →

2,489
miniomilvus8.0.171 of 1See more

minio milvus 8.0.17

1 of the 1 container images this version deploys carry CVE-2022-2837.

Container imageDigestPackageFixed in
minio/minio:RELEASE.2021-02-14T04-01-33Zbd11edda91f3
github.com/coredns/coredns@v1.4.0
no fix listed

Open the chart page →

6,915
catalyst-agentscatalyst-agents0.1.301 of 18See more

catalyst-agents catalyst-agents 0.1.30

1 of the 18 container images this version deploys carry CVE-2022-2837.

Container imageDigestPackageFixed in
ghcr.io/chaos-mesh/chaos-coredns:v0.2.838bfdf5e3774
github.com/coredns/coredns@v1.7.1-0.20200803163833-7d5f5b87a4fb+dirty
no fix listed

Open the chart page →

15,027
corednsdoubanVerified publisher1.39.21 of 1See more

coredns douban 1.39.2

1 of the 1 container images this version deploys carry CVE-2022-2837.

Container imageDigestPackageFixed in
coredns/coredns:1.12.040384aa1f5ea
github.com/coredns/coredns@v0.0.0-20241121192733-51e11f166ef6
no fix listed

Open the chart page →

1,132
chaos-meshethereum-helm-chartsVerified publisher0.0.31 of 4See more

chaos-mesh ethereum-helm-charts 0.0.3

1 of the 4 container images this version deploys carry CVE-2022-2837.

Container imageDigestPackageFixed in
ghcr.io/chaos-mesh/chaos-coredns:v0.2.678dc63bc5b89
github.com/coredns/coredns@v0.0.0-20200803163833-7d5f5b87a4fb
no fix listed

Open the chart page →

12,127
mimir-openshift-experimentalgrafana2.1.01 of 4See more

mimir-openshift-experimental grafana 2.1.0

1 of the 4 container images this version deploys carry CVE-2022-2837.

Container imageDigestPackageFixed in
minio/minio:RELEASE.2021-02-14T04-01-33Zbd11edda91f3
github.com/coredns/coredns@v1.4.0
no fix listed

Open the chart page →

17,759
cac-systemhuangchengwu-helm-chart0.1.01 of 9See more

cac-system huangchengwu-helm-chart 0.1.0

1 of the 9 container images this version deploys carry CVE-2022-2837.

Container imageDigestPackageFixed in
huangchengwu6904/hi-app:cac-16910478061b932f8221a9
github.com/coredns/coredns@v1.6.6
no fix listed

Open the chart page →

11,186
consulintelVerified publisher0.8.11 of 2See more

consul intel 0.8.1

1 of the 2 container images this version deploys carry CVE-2022-2837.

Container imageDigestPackageFixed in
hashicorp/consul:1.14.2e38576edcdfd
github.com/coredns/coredns@v1.6.6
no fix listed

Open the chart page →

5,389
evi-consulintelVerified publisher3.0.31 of 2See more

evi-consul intel 3.0.3

1 of the 2 container images this version deploys carry CVE-2022-2837.

Container imageDigestPackageFixed in
hashicorp/consul:1.14.2e38576edcdfd
github.com/coredns/coredns@v1.6.6
no fix listed

Open the chart page →

5,389
corednsjouveVerified publisher1.45.01 of 1See more

coredns jouve 1.45.0

1 of the 1 container images this version deploys carry CVE-2022-2837.

Container imageDigestPackageFixed in
coredns/coredns:1.13.19b9128672209
github.com/coredns/coredns@v0.0.0-20251008152637-1db4568df6aa
no fix listed

Open the chart page →

887
chaos-meshkubeblocksVerified publisher2.7.21 of 4See more

chaos-mesh kubeblocks 2.7.2

1 of the 4 container images this version deploys carry CVE-2022-2837.

Container imageDigestPackageFixed in
ghcr.io/chaos-mesh/chaos-coredns:v0.2.678dc63bc5b89
github.com/coredns/coredns@v0.0.0-20200803163833-7d5f5b87a4fb
no fix listed

Open the chart page →

13,497
edgemeshkubesphere-stable0.1.01 of 2See more

edgemesh kubesphere-stable 0.1.0

1 of the 2 container images this version deploys carry CVE-2022-2837.

Container imageDigestPackageFixed in
kubeedge/edgemesh-agent:latest460c6061b608
github.com/coredns/coredns@v1.8.0
no fix listed

Open the chart page →

4,096
apica-ascentlogiqai2.0.41 of 19See more

apica-ascent logiqai 2.0.4

1 of the 19 container images this version deploys carry CVE-2022-2837.

Container imageDigestPackageFixed in
minio/minio:RELEASE.2020-09-17T04-49-20Ze2b7b633c250
github.com/coredns/coredns@v1.4.0
no fix listed

Open the chart page →

23,613
cdmswebapppyalive-cdmswebappVerified publisher0.1.01 of 3See more

cdmswebapp pyalive-cdmswebapp 0.1.0

1 of the 3 container images this version deploys carry CVE-2022-2837.

Container imageDigestPackageFixed in
sarwansharma/minio:v359d1da9385d1
github.com/coredns/coredns@v1.9.2
no fix listed

Open the chart page →

6,668
cloudflaredsectionmeVerified publisher2022.3.41 of 1See more

cloudflared sectionme 2022.3.4

1 of the 1 container images this version deploys carry CVE-2022-2837.

Container imageDigestPackageFixed in
quay.io/giantswarm/cloudflared:2022.3.40b20d2fe9a6b
github.com/coredns/coredns@v1.8.7
no fix listed

Open the chart page →

2,407
tailscalesinextraVerified publisher0.18.11 of 2See more

tailscale sinextra 0.18.1

1 of the 2 container images this version deploys carry CVE-2022-2837.

Container imageDigestPackageFixed in
registry.k8s.io/coredns/coredns:v1.13.294caebb89dcf
github.com/coredns/coredns@v0.0.0-20251209114403-0233f3e7c600
no fix listed

Open the chart page →

1,047
spinnakerspinnakerVerified publisher2.2.131 of 4See more

spinnaker spinnaker 2.2.13

1 of the 4 container images this version deploys carry CVE-2022-2837.

Container imageDigestPackageFixed in
minio/minio:RELEASE.2020-01-03T19-12-21Zf00aa6ef2b72
github.com/coredns/coredns@v1.4.0
no fix listed

Open the chart page →

6,836
corednsvks-helm-chartsVerified publisher1.45.01 of 1See more

coredns vks-helm-charts 1.45.0

1 of the 1 container images this version deploys carry CVE-2022-2837.

Container imageDigestPackageFixed in
coredns/coredns:1.13.19b9128672209
github.com/coredns/coredns@v0.0.0-20251008152637-1db4568df6aa
no fix listed

Open the chart page →

887
juicefs-csi-driverwenerme0.32.51 of 5See more

juicefs-csi-driver wenerme 0.32.5

1 of the 5 container images this version deploys carry CVE-2022-2837.

Container imageDigestPackageFixed in
juicedata/juicefs-csi-driver:v0.32.595008ba63318
github.com/coredns/coredns@v1.4.0
no fix listed

Open the chart page →

9,117
miniowenerme8.0.101 of 1See more

minio wenerme 8.0.10

1 of the 1 container images this version deploys carry CVE-2022-2837.

Container imageDigestPackageFixed in
minio/minio:RELEASE.2021-02-14T04-01-33Zbd11edda91f3
github.com/coredns/coredns@v1.4.0
no fix listed

Open the chart page →

6,915
minio-standalonewenerme1.0.21 of 1See more

minio-standalone wenerme 1.0.2

1 of the 1 container images this version deploys carry CVE-2022-2837.

Container imageDigestPackageFixed in
minio/minio:RELEASE.2022-01-04T07-41-07Z1484c87239ea
github.com/coredns/coredns@v1.4.0
no fix listed

Open the chart page →

6,138
zahori-consulzahoriVerified publisher1.0.11 of 2See more

zahori-consul zahori 1.0.1

1 of the 2 container images this version deploys carry CVE-2022-2837.

Container imageDigestPackageFixed in
hashicorp/consul:1.15.3ddff34041c5c
github.com/coredns/coredns@v1.6.6
no fix listed

Open the chart page →

5,033

Container images carrying it

22 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
minio/minio:RELEASE.2021-02-14T04-01-33Zbd11edda91f3
github.com/coredns/coredns@v1.4.0
no fix listed
3
coredns/coredns:1.13.19b9128672209
github.com/coredns/coredns@v0.0.0-20251008152637-1db4568df6aa
no fix listed
2
hashicorp/consul:1.14.2e38576edcdfd
github.com/coredns/coredns@v1.6.6
no fix listed
2
ghcr.io/chaos-mesh/chaos-coredns:v0.2.838bfdf5e3774
github.com/coredns/coredns@v1.7.1-0.20200803163833-7d5f5b87a4fb+dirty
no fix listed
2
ghcr.io/chaos-mesh/chaos-coredns:v0.2.678dc63bc5b89
github.com/coredns/coredns@v0.0.0-20200803163833-7d5f5b87a4fb
no fix listed
2
coredns/coredns:1.12.040384aa1f5ea
github.com/coredns/coredns@v0.0.0-20241121192733-51e11f166ef6
no fix listed
1
coredns/coredns:1.14.6900f9c109f7a
github.com/coredns/coredns@v0.0.0-20260710050435-424d125775cd
no fix listed
1
coredns/coredns:1.10.1a0ead06651cf
github.com/coredns/coredns@v0.0.0-20230206182419-055b2c31a9cf
no fix listed
1
hashicorp/consul:1.15.3ddff34041c5c
github.com/coredns/coredns@v1.6.6
no fix listed
1
huangchengwu6904/hi-app:cac-16910478061b932f8221a9
github.com/coredns/coredns@v1.6.6
no fix listed
1
juicedata/juicefs-csi-driver:v0.20.043978fc60798
github.com/coredns/coredns@v1.6.6
no fix listed
1
juicedata/juicefs-csi-driver:v0.32.595008ba63318
github.com/coredns/coredns@v1.4.0
no fix listed
1
kubeedge/edgemesh-agent:latest460c6061b608
github.com/coredns/coredns@v1.8.0
no fix listed
1
louislam/uptime-kuma:1.17.1a4eab252e5a2
github.com/coredns/coredns@v1.8.7
no fix listed
1
louislam/uptime-kuma:1.18.5a84767d7934f
github.com/coredns/coredns@v1.8.7
no fix listed
1
minio/minio:RELEASE.2020-12-03T05-49-24Z053f103f4894
github.com/coredns/coredns@v1.4.0
no fix listed
1
minio/minio:RELEASE.2022-01-04T07-41-07Z1484c87239ea
github.com/coredns/coredns@v1.4.0
no fix listed
1
minio/minio:RELEASE.2020-09-17T04-49-20Ze2b7b633c250
github.com/coredns/coredns@v1.4.0
no fix listed
1
minio/minio:RELEASE.2020-01-03T19-12-21Zf00aa6ef2b72
github.com/coredns/coredns@v1.4.0
no fix listed
1
sarwansharma/minio:v359d1da9385d1
github.com/coredns/coredns@v1.9.2
no fix listed
1
quay.io/giantswarm/cloudflared:2022.3.40b20d2fe9a6b
github.com/coredns/coredns@v1.8.7
no fix listed
1
registry.k8s.io/coredns/coredns:v1.13.294caebb89dcf
github.com/coredns/coredns@v0.0.0-20251209114403-0233f3e7c600
no fix listed
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.