CVE-2022-36021

Medium

Advisory

Published 1 Mar 2023In the index since 6 Sept 2026

Severity: Medium; worst across findings
CVSS: 5.5; base score, highest
EPSS: 0.605; 99th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 7; of 17,781 indexed, latest versions
Container images: 7; deployed by those charts
Fix available: 2 of 2; affected packages

Redis string pattern matching can be abused to achieve Denial of Service

Carried by container images the latest versions of 7 of 17,781 indexed charts deploy, on 7 images.

Affected package	Affected versions	Fixed in	Images
redisbitnami	6.0.8-0, 6.0.12-0, 6.2.7-150, 7.0.8-0+1 more	6.0.18	5
redisdeb	5:5.0.7-2ubuntu0.1	5:5.0.7-2ubuntu0.1+esm2	2

OSV records: BIT-redis-2022-36021 UBUNTU-CVE-2022-36021
Also known as: BIT-keydb-2022-36021, BIT-valkey-2022-36021, GHSA-jr7j-rfj5-8xqv, USN-6531-1

Charts affected

7 by stars

Chart

Latest

Affected images

Radar Score

chatwootchatwoot

2.0.24

1 of 3 See more

chatwoot chatwoot 2.0.24

1 of the 3 container images this version deploys carry CVE-2022-36021.

Container image	Digest	Package	Fixed in
bitnamilegacy/redis :6.2.7-debian-11-r3	7788b908dd0d	redis@6.2.7-150	6.0.18

Open the chart page →

9,203

netris-controllernetrisai

2.8.2

1 of 14 See more

netris-controller netrisai 2.8.2

1 of the 14 container images this version deploys carry CVE-2022-36021.

Container image	Digest	Package	Fixed in
netrisai/redis :6.0.12-debian-10-r3	a4c0140d1696	redis@6.0.12-0	6.0.18

Open the chart page →

30,326

supportpalevilgn0me

0.1.6

1 of 1 See more

supportpal evilgn0me 0.1.6

1 of the 1 container images this version deploys carry CVE-2022-36021.

Container image	Digest	Package	Fixed in
public.ecr.aws/supportpal/helpdesk-monolithic :4.0.4	573779e57fae	redis@5:5.0.7-2ubuntu0.1	5:5.0.7-2ubuntu0.1+esm2

Open the chart page →

20,933

redisredis

0.1.1

1 of 1 See more

redis redis 0.1.1

1 of the 1 container images this version deploys carry CVE-2022-36021.

Container image	Digest	Package	Fixed in
mcr.microsoft.com/oss/bitnami/redis :6.0.8.9	e1e9cf5297a6	redis@6.0.8-0	6.0.18

Open the chart page →

1,594

redisredis-arm

17.8.0

1 of 1 See more

redis redis-arm 17.8.0

1 of the 1 container images this version deploys carry CVE-2022-36021.

Container image	Digest	Package	Fixed in
ghcr.io/zcube/bitnami-compat/redis :7.0-debian-11-r55	118a403046f7	redis@7.0.8-1	6.0.18

Open the chart page →

1,906

redis-high-availabilitysomeblackmagic

1.3.10

1 of 3 See more

redis-high-availability someblackmagic 1.3.10

1 of the 3 container images this version deploys carry CVE-2022-36021.

Container image	Digest	Package	Fixed in
bitnamilegacy/redis :7.0.8-debian-11-r0	bf01d031ba8c	redis@7.0.8-0	6.0.18

Open the chart page →

3,148

testing-multitoolsomeblackmagic

0.1.2

1 of 1 See more

testing-multitool someblackmagic 0.1.2

1 of the 1 container images this version deploys carry CVE-2022-36021.

Container image	Digest	Package	Fixed in
someblackmagic/k8s-testing-multitool :v0.1.0	6eca64b6b440	redis@5:5.0.7-2ubuntu0.1	5:5.0.7-2ubuntu0.1+esm2

Open the chart page →

30,687

Container images carrying it

7 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
bitnamilegacy/redis :6.2.7-debian-11-r3	7788b908dd0d	redis@6.2.7-150	6.0.18	1
bitnamilegacy/redis :7.0.8-debian-11-r0	bf01d031ba8c	redis@7.0.8-0	6.0.18	1
netrisai/redis :6.0.12-debian-10-r3	a4c0140d1696	redis@6.0.12-0	6.0.18	1
someblackmagic/k8s-testing-multitool :v0.1.0	6eca64b6b440	redis@5:5.0.7-2ubuntu0.1	5:5.0.7-2ubuntu0.1+esm2	1
ghcr.io/zcube/bitnami-compat/redis :7.0-debian-11-r55	118a403046f7	redis@7.0.8-1	6.0.18	1
mcr.microsoft.com/oss/bitnami/redis :6.0.8.9	e1e9cf5297a6	redis@6.0.8-0	6.0.18	1
public.ecr.aws/supportpal/helpdesk-monolithic :4.0.4	573779e57fae	redis@5:5.0.7-2ubuntu0.1	5:5.0.7-2ubuntu0.1+esm2	1