CVE-2022-36227
CriticalAdvisory
Published 22 Nov 2022In the index since 5 Sept 2026
- Severity
- Critical
- worst across findings
- CVSS
- 9.8
- base score, highest
- EPSS
- 0.024
- 83rd percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 139
- of 17,781 indexed, latest versions
- Container images
- 160
- deployed by those charts
- Fix available
- 3 of 3
- affected packages
Red Hat Security Advisory: libarchive security update
Carried by container images the latest versions of 139 of 17,781 indexed charts deploy, on 160 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| libarchivedeb | 3.1.2-11ubuntu0.16.04.3, 3.3.3-4+deb10u1, 3.4.0-2ubuntu1, 3.4.0-2ubuntu1.2+1 more | 3.1.2-11ubuntu0.16.04.8+esm1, 3.3.3-4+deb10u3, 3.4.0-2ubuntu1.3, 3.6.0-1ubuntu1.2 | 19 |
| libarchiveapk | 3.6.0-r0, 3.6.1-r0 | 3.6.1-r1 | 2 |
| libarchiverpm | 3.3.2-3.el8, 3.3.2-8.el8_1, 3.3.2-9.el8, 3.3.3-1.el8+4 more | 0:3.3.3-5.el8, 0:3.5.3-4.el9 | 139 |
- OSV records
- ALPINE-CVE-2022-36227UBUNTU-CVE-2022-36227RHSA-2023:2532RHSA-2023:3018RLSA-2023:3018DLA-3294-1
- Also known as
- RHSA-2024:0146, USN-7070-1
Charts affected
139 by stars
Container images carrying it
160 by charts deploying them
A fixed version is listed for 3 of the 3 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| ghcr.io/ | 32c6d2f5eab9 | libarchive | 0:3.5.3-4.el9 | 1 |
| ghcr.io/ | 7ac2adb6ca49 | libarchive | 0:3.5.3-4.el9 | 1 |
| ghcr.io/ | 1a958edafdb1 | libarchive | 0:3.5.3-4.el9 | 1 |
| ghcr.io/ | c6bb121ced90 | libarchive | 0:3.3.3-5.el8 | 1 |
| ghcr.io/ | 6ba7e1608286 | libarchive | 0:3.3.3-5.el8 | 1 |
| ghcr.io/ | 5253fbf8d04c | libarchive | 0:3.5.3-4.el9 | 1 |
| ghcr.io/ | 7dd5ac80c8f1 | libarchive | 0:3.5.3-4.el9 | 1 |
| ghcr.io/ | adebc40ddf98 | libarchive | 0:3.5.3-4.el9 | 1 |
| ghcr.io/ | 372dcd370945 | libarchive | 0:3.5.3-4.el9 | 1 |
| ghcr.io/ | 3fbe4c29d14c | libarchive | 3.4.0-2ubuntu1.3 | 1 |
| ghcr.io/ | 8caf5289fe73 | libarchive | 0:3.3.3-5.el8 | 1 |
| ghcr.io/ | c9bd82dc5fda | libarchive | 3.4.0-2ubuntu1.3 | 1 |
| ghcr.io/ | 292b3614670f | libarchive | 3.4.0-2ubuntu1.3 | 1 |
| ghcr.io/ | 4f08e2823756 | libarchive | 3.6.1-r1 | 1 |
| mcr.microsoft.com/ | 49a57dc220b1 | libarchive | 3.4.0-2ubuntu1.3 | 1 |
| quay.io/ | cdefc81c6b2e | libarchive | 0:3.3.3-5.el8 | 1 |
| quay.io/ | 10df27bc5560 | libarchive | 0:3.3.3-5.el8 | 1 |
| quay.io/ | a3b9a07648b6 | libarchive | 0:3.3.3-5.el8 | 1 |
| quay.io/ | 55330b1b60c1 | libarchive | 0:3.3.3-5.el8 | 1 |
| quay.io/ | bb40472e4ff5 | libarchive | 0:3.3.3-5.el8 | 1 |
| quay.io/ | 0dc38a87b844 | libarchive | 0:3.3.3-5.el8 | 1 |
| quay.io/ | ea838e5b4051 | libarchive | 0:3.3.3-5.el8 | 1 |
| quay.io/ | a8a9ec461034 | libarchive | 0:3.3.3-5.el8 | 1 |
| quay.io/ | ce6938ff6709 | libarchive | 0:3.3.3-5.el8 | 1 |
| quay.io/ | e6d7afb1a4bf | libarchive | 0:3.3.3-5.el8 | 1 |
| quay.io/ | fce990dece01 | libarchive | 0:3.3.3-5.el8 | 1 |
| quay.io/ | 3590af73f65a | libarchive | 0:3.3.3-5.el8 | 1 |
| quay.io/ | e048bc7a17c2 | libarchive | 0:3.3.3-5.el8 | 1 |
| quay.io/ | 674f45865af1 | libarchive | 0:3.3.3-5.el8 | 1 |
| quay.io/ | c3bc5e7a70e6 | libarchive | 0:3.3.3-5.el8 | 1 |
| quay.io/ | 8e9c39c34e89 | libarchive | 0:3.3.3-5.el8 | 1 |
| quay.io/ | f94282a9cfec | libarchive | 0:3.3.3-5.el8 | 1 |
| quay.io/ | 9912fdf6c183 | libarchive | 0:3.3.3-5.el8 | 1 |
| quay.io/ | 24352dca6672 | libarchive | 0:3.3.3-5.el8 | 1 |
| quay.io/ | 35d87a381432 | libarchive | 0:3.3.3-5.el8 | 1 |
| quay.io/ | 7a4b9fedc724 | libarchive | 0:3.3.3-5.el8 | 1 |
| quay.io/ | 3029dc0f1d38 | libarchive | 0:3.3.3-5.el8 | 1 |
| quay.io/ | 8830f76112b6 | libarchive | 0:3.3.3-5.el8 | 1 |
| quay.io/ | b8f2a453a17a | libarchive | 0:3.3.3-5.el8 | 1 |
| quay.io/ | 09d52508fee9 | libarchive | 0:3.3.3-5.el8 | 1 |
| quay.io/ | 15fa0ed662b1 | libarchive | 0:3.3.3-5.el8 | 1 |
| quay.io/ | 36ce77526145 | libarchive | 0:3.3.3-5.el8 | 1 |
| quay.io/ | b1710745fa64 | libarchive | 0:3.3.3-5.el8 | 1 |
| quay.io/ | e383ba3e0966 | libarchive | 0:3.3.3-5.el8 | 1 |
| quay.io/ | c2851757eca4 | libarchive | 0:3.3.3-5.el8 | 1 |
| quay.io/ | 50ee58bc9770 | libarchive | 0:3.3.3-5.el8 | 1 |
| quay.io/ | 546a8b52d7b0 | libarchive | 0:3.3.3-5.el8 | 1 |
| quay.io/ | c3d20bc2ea08 | libarchive | 0:3.3.3-5.el8 | 1 |
| quay.io/ | d853057f2800 | libarchive | 0:3.3.3-5.el8 | 1 |
| quay.io/ | 107a7c73af59 | libarchive | 0:3.3.3-5.el8 | 1 |