CVE-2022-36227
CriticalAdvisory
Published 22 Nov 2022In the index since 5 Sept 2026
- Severity
- Critical
- worst across findings
- CVSS
- 9.8
- base score, highest
- EPSS
- 0.024
- 83rd percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 139
- of 17,781 indexed, latest versions
- Container images
- 160
- deployed by those charts
- Fix available
- 3 of 3
- affected packages
Red Hat Security Advisory: libarchive security update
Carried by container images the latest versions of 139 of 17,781 indexed charts deploy, on 160 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| libarchivedeb | 3.1.2-11ubuntu0.16.04.3, 3.3.3-4+deb10u1, 3.4.0-2ubuntu1, 3.4.0-2ubuntu1.2+1 more | 3.1.2-11ubuntu0.16.04.8+esm1, 3.3.3-4+deb10u3, 3.4.0-2ubuntu1.3, 3.6.0-1ubuntu1.2 | 19 |
| libarchiveapk | 3.6.0-r0, 3.6.1-r0 | 3.6.1-r1 | 2 |
| libarchiverpm | 3.3.2-3.el8, 3.3.2-8.el8_1, 3.3.2-9.el8, 3.3.3-1.el8+4 more | 0:3.3.3-5.el8, 0:3.5.3-4.el9 | 139 |
- OSV records
- ALPINE-CVE-2022-36227UBUNTU-CVE-2022-36227RHSA-2023:2532RHSA-2023:3018RLSA-2023:3018DLA-3294-1
- Also known as
- RHSA-2024:0146, USN-7070-1
Charts affected
139 by stars
Container images carrying it
160 by charts deploying them
A fixed version is listed for 3 of the 3 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| codeurjc/ | b9e2f7234349 | libarchive | 0:3.3.3-5.el8 | 10 |
| codeurjc/ | 310bea5b1ee7 | libarchive | 0:3.3.3-5.el8 | 8 |
| mastercloudapps/ | f3d24dfe2686 | libarchive | 0:3.3.3-5.el8 | 4 |
| mastercloudapps/ | de859d29c116 | libarchive | 0:3.3.3-5.el8 | 4 |
| minio/ | bd11edda91f3 | libarchive | 0:3.3.3-5.el8 | 3 |
| quay.io/ | 75fb847ac045 | libarchive | 0:3.3.3-5.el8 | 3 |
| quay.io/ | a7dff785d821 | libarchive | 0:3.3.3-5.el8 | 3 |
| quay.io/ | c68135620167 | libarchive | 0:3.3.3-5.el8 | 3 |
| minio/ | 54393e03f3b2 | libarchive | 0:3.3.3-5.el8 | 2 |
| stakater/ | 954d2be66e95 | libarchive | 0:3.3.3-5.el8 | 2 |
| ghcr.io/ | 103fbcec2314 | libarchive | 3.4.0-2ubuntu1.3 | 2 |
| mcr.microsoft.com/ | 902628a8be89 | libarchive | 3.4.0-2ubuntu1.3 | 2 |
| quay.io/ | 054ef67eb7da | libarchive | 0:3.3.3-5.el8 | 2 |
| quay.io/ | 68f9f38c8f30 | libarchive | 0:3.3.3-5.el8 | 2 |
| quay.io/ | ad34abeba912 | libarchive | 0:3.3.3-5.el8 | 2 |
| quay.io/ | a0a002cb113c | libarchive | 0:3.3.3-5.el8 | 2 |
| quay.io/ | d8c631a6dc43 | libarchive | 0:3.3.3-5.el8 | 2 |
| quay.io/ | 464a3af4dfe0 | libarchive | 0:3.3.3-5.el8 | 2 |
| quay.io/ | bb5e052770e5 | libarchive | 0:3.3.3-5.el8 | 2 |
| altinity/ | 7a85f522c5bc | libarchive | 0:3.3.3-5.el8 | 1 |
| anchore/ | bde9eedf639d | libarchive | 0:3.3.3-5.el8 | 1 |
| anchore/ | ed9b3badd17c | libarchive | 0:3.3.3-5.el8 | 1 |
| apache/ | 3bb13d14f64a | libarchive | 0:3.3.3-5.el8 | 1 |
| apicurio/ | a97d67487532 | libarchive | 0:3.3.3-5.el8 | 1 |
| assistiot/ | 0df4b4fa899a | libarchive | 0:3.3.3-5.el8 | 1 |
| bsgrigorov/ | 45ab095f09c8 | libarchive | 0:3.3.3-5.el8 | 1 |
| cockroachdb/ | 1116820f4134 | libarchive | 0:3.3.3-5.el8 | 1 |
| cockroachdb/ | 983312754620 | libarchive | 0:3.3.3-5.el8 | 1 |
| confluentinc/ | f2975d507a2a | libarchive | 0:3.3.3-5.el8 | 1 |
| confluentinc/ | 8f1544df1f48 | libarchive | 0:3.3.3-5.el8 | 1 |
| confluentinc/ | 3bf359d5e340 | libarchive | 0:3.3.3-5.el8 | 1 |
| confluentinc/ | 4bc70a83ca6f | libarchive | 0:3.3.3-5.el8 | 1 |
| confluentinc/ | b0b7aa26254a | libarchive | 0:3.3.3-5.el8 | 1 |
| confluentinc/ | ee403d5b9090 | libarchive | 0:3.3.3-5.el8 | 1 |
| confluentinc/ | b651d4b6185a | libarchive | 0:3.3.3-5.el8 | 1 |
| confluentinc/ | 78c190f4472c | libarchive | 0:3.3.3-5.el8 | 1 |
| craftypath/ | 402a0024c732 | libarchive | 0:3.3.3-5.el8 | 1 |
| ctron/ | 8fdea8f76499 | libarchive | 0:3.3.3-5.el8 | 1 |
| datadog/ | 513a4377aed5 | libarchive | 0:3.3.3-5.el8 | 1 |
| datawire/ | f95ae710d75c | libarchive | 0:3.3.3-5.el8 | 1 |
| dellemc/ | 148ada9060a9 | libarchive | 0:3.3.3-5.el8 | 1 |
| dellemc/ | 660cabd6d929 | libarchive | 0:3.3.3-5.el8 | 1 |
| fiware/ | 92a3c5cf43c0 | libarchive | 0:3.3.3-5.el8 | 1 |
| fiware/ | efc6793388cc | libarchive | 0:3.3.3-5.el8 | 1 |
| fossology/ | 8bd1f22ba7bb | libarchive | 3.3.3-4+deb10u3 | 1 |
| gollumorg/ | 7cd5305a3cf7 | libarchive | 3.3.3-4+deb10u3 | 1 |
| haveagitgat/ | 1256348872ce | libarchive | 3.4.0-2ubuntu1.3 | 1 |
| haveagitgat/ | 1e3f9328327d | libarchive | 3.4.0-2ubuntu1.3 | 1 |
| haveagitgat/ | 3ff0913202dd | libarchive | 3.4.0-2ubuntu1.3 | 1 |
| hyperledger/ | c65891b6c237 | libarchive | 3.1.2-11ubuntu0.16.04.8+esm1 | 1 |