StackRadar

CVE-2022-3643

Medium

Advisory

Published 7 Dec 2022In the index since 6 Sept 2026
Severity
Medium
worst across findings
CVSS
6.5
base score, highest
EPSS
0.005
41st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
104
of 17,803 indexed, latest versions
Container images
91
deployed by those charts
Fix available
1 of 1
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 104 of 17,803 indexed charts deploy, on 91 images.

Affected packageAffected versionsFixed inImages
linuxdeb4.4.0-104.127, 4.4.0-112.135, 4.4.0-116.140, 4.4.0-124.148+49 more4.4.0-236.270, 4.15.0-202.213, 5.4.0-137.154, 5.15.0-58.6491
OSV records
UBUNTU-CVE-2022-3643
Also known as
USN-5802-1, USN-5803-1, USN-5804-1

Charts affected

104 by stars
ChartLatestAffected imagesRadar Score
istio-ingresstemp-charts0.3.31 of 1See more

istio-ingress temp-charts 0.3.3

1 of the 1 container images this version deploys carry CVE-2022-3643.

Container imageDigestPackageFixed in
istio/proxyv2:1.10.088c6c693e67a
linux@4.15.0-143.147
4.15.0-202.213

Open the chart page →

70,842
tensor_apptensor-app0.2.21 of 3See more

tensor_app tensor-app 0.2.2

1 of the 3 container images this version deploys carry CVE-2022-3643.

Container imageDigestPackageFixed in
xeladock/mysql_dns:latest4baf531453f1
linux@5.15.0-25.25
5.15.0-58.64

Open the chart page →

105,025
tdarrvhdirkVerified publisher5.0.51 of 2See more

tdarr vhdirk 5.0.5

1 of the 2 container images this version deploys carry CVE-2022-3643.

Container imageDigestPackageFixed in
ghcr.io/haveagitgat/tdarr:2.00.18.23fbe4c29d14c
linux@5.4.0-110.124
5.4.0-137.154

Open the chart page →

150,073
emissary-ingresswenerme8.12.21 of 2See more

emissary-ingress wenerme 8.12.2

1 of the 2 container images this version deploys carry CVE-2022-3643.

Container imageDigestPackageFixed in
istio/kubectl:1.5.10dbb7726d1bf0
linux@4.15.0-112.113
4.15.0-202.213

Open the chart page →

72,845

Container images carrying it

91 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
mintproject/graphql-engine:305c0dbeba1878eafe348f21fc300fbfc017d9dc83aade2c1855
linux@5.4.0-117.132
5.4.0-137.154
1
mshanley80/httpbin2022:latest5b189a70c0fb
linux@5.4.0-135.152
5.4.0-137.154
1
muluder/prograncontrollermcord:0.1.843b597a93da7
linux@4.4.0-112.135
4.4.0-236.270
1
nethermind/nethermind:1.14.615517708c3b6
linux@5.15.0-53.59
5.15.0-58.64
1
omecproject/mme-exporter:paging-latestbcc5f19fd676
linux@4.15.0-88.88
4.15.0-202.213
1
omecproject/onos-progran:1.0.05715e5648aa0
linux@4.4.0-112.135
4.4.0-236.270
1
omecproject/progran-synchronizer:comac-1.0.0d109a8e57e71
linux@4.4.0-142.168
4.4.0-236.270
1
opendatacube/pipelines:wofs-1.225d810e8504b8
linux@4.15.0-46.49
4.15.0-202.213
1
opendatacube/restcube:latest91870111837c
linux@4.15.0-50.54
4.15.0-202.213
1
opendatacube/wms:latest1b90cdf68831
linux@4.15.0-50.54
4.15.0-202.213
1
openelevation/open-elevation:latest82fb21612e86
linux@5.4.0-80.90
5.4.0-137.154
1
openwhisk/ow-utils:1.0.0c80dba0de3aa
linux@4.15.0-122.124
4.15.0-202.213
1
scrapinghub/splash:3.4.1a5f89bc84606
linux@4.15.0-74.84
4.15.0-202.213
1
seafileltd/seafile-mc:9.0.106693911bcc40
linux@5.4.0-135.152
5.4.0-137.154
1
seafileltd/seafile-mc:9.0.97ac833196f60
linux@5.4.0-125.141
5.4.0-137.154
1
seafileltd/seafile-mc:8.0.7ed0fcda5e6a9
linux@5.4.0-80.90
5.4.0-137.154
1
seldonio/locust-core:0.81d0da98a2d76
linux@4.4.0-148.174
4.4.0-236.270
1
snipe/snipe-it:v6.0.1455fb7636a98c
linux@5.4.0-131.147
5.4.0-137.154
1
someblackmagic/k8s-testing-multitool:v0.1.06eca64b6b440
linux@5.4.0-117.132
5.4.0-137.154
1
statcan/ckan:2.93921305425b8
linux@5.4.0-74.83
5.4.0-137.154
1
streamnative/apache-pulsar-grafana-dashboard-k8s:0.0.1611bceacec8fb
linux@5.4.0-77.86
5.4.0-137.154
1
tensorflow/tensorflow:1.6.0-devel1e3172090703
linux@4.4.0-116.140
4.4.0-236.270
1
timothyclarke/wptagent:2018-01-2322c41e5ca7e2
linux@4.4.0-112.135
4.4.0-236.270
1
voltha/voltha-cli:1.6.0c4e41e92f046
linux@4.4.0-137.163
4.4.0-236.270
1
voltha/voltha-netconf:1.6.037f80524c207
linux@4.4.0-137.163
4.4.0-236.270
1
voltha/voltha-ofagent:1.6.09ee8c1f4428c
linux@4.4.0-137.163
4.4.0-236.270
1
voltha/voltha-tester:1.7.0655c3048a602
linux@4.4.0-154.181
4.4.0-236.270
1
voltha/voltha-voltha:1.6.0ff596b62de59
linux@4.4.0-137.163
4.4.0-236.270
1
xeladock/mysql_dns:latest4baf531453f1
linux@5.15.0-25.25
5.15.0-58.64
1
gcr.io/flink-operator/deployer:webhook-cert809338a69bd5
linux@4.15.0-88.88
4.15.0-202.213
1
gcr.io/istio-release/pilot:release-1.0-latest-daily5ea7b7f3632a
linux@4.4.0-150.176
4.4.0-236.270
1
gcr.io/istio-release/proxyv2:release-1.0-latest-daily8f9ff98fdbef
linux@4.4.0-150.176
4.4.0-236.270
1
ghcr.io/haveagitgat/tdarr:2.00.18.23fbe4c29d14c
linux@5.4.0-110.124
5.4.0-137.154
1
ghcr.io/kvaps/opennebula:v5.12.0.4-1e28e0e7de11b
linux@5.4.0-80.90
5.4.0-137.154
1
ghcr.io/kvaps/opennebula-flow:v5.12.0.4-1600221f0f43f
linux@5.4.0-80.90
5.4.0-137.154
1
ghcr.io/oznu/homebridge:2022-07-08ff2af53897e7
linux@5.4.0-121.137
5.4.0-137.154
1
ghcr.io/smarter-project/audio-client:v3.1.23c8375dc5487
linux@5.4.0-131.147
5.4.0-137.154
1
ghcr.io/smarter-project/gstreamer:v1.0.25ecb16015aa8
linux@5.4.0-131.147
5.4.0-137.154
1
ghcr.io/smarter-project/image-detector:v2.5.31dcca70c6446
linux@5.4.0-131.147
5.4.0-137.154
1
public.ecr.aws/spotinst/spot-network-client:1.0.0-8-lb_endpoint-d0ec127efcecf98b912
linux@4.15.0-191.202
4.15.0-202.213
1
registry.gitlab.com/infinitydon/registry/open5gs-aio:v2.2.2f6385712935f
linux@5.4.0-67.75
5.4.0-137.154
1

syft 1.42.1 · advisories as of 18 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.