StackRadar

CVE-2022-38178

High

Advisory

Published 21 Sept 2022In the index since 6 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.025
84th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
39
of 17,781 indexed, latest versions
Container images
38
deployed by those charts
Fix available
2 of 2
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 39 of 17,781 indexed charts deploy, on 38 images.

Affected packageAffected versionsFixed inImages
bind9deb1:9.11.3+dfsg-1ubuntu1.1, 1:9.11.3+dfsg-1ubuntu1.12, 1:9.11.3+dfsg-1ubuntu1.13, 1:9.11.3+dfsg-1ubuntu1.14+6 more1:9.11.3+dfsg-1ubuntu1.18, 1:9.16.1-0ubuntu2.11, 1:9.18.1-1ubuntu1.231
bindapk9.16.15-r1, 9.16.20-r1, 9.16.25-r0, 9.16.27-r0+1 more9.16.33-r07
OSV records
ALPINE-CVE-2022-38178UBUNTU-CVE-2022-38178
Also known as
USN-5626-1

Charts affected

39 by stars
ChartLatestAffected imagesRadar Score
milvusmilvus4.0.311 of 5See more

milvus milvus 4.0.31

1 of the 5 container images this version deploys carry CVE-2022-38178.

Container imageDigestPackageFixed in
apachepulsar/pulsar:2.8.2d538416d5afe
bind9@1:9.16.1-0ubuntu2.9
1:9.16.1-0ubuntu2.11

Open the chart page →

32,259
home-assistantgeek-cookbookVerified publisher13.5.01 of 1See more

home-assistant geek-cookbook 13.5.0

1 of the 1 container images this version deploys carry CVE-2022-38178.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2022.5.4ec6d67fbedfa
bind@9.16.20-r1
9.16.33-r0

Open the chart page →

7,705
openvpn-asstenicVerified publisher0.1.91 of 1See more

openvpn-as stenic 0.1.9

1 of the 1 container images this version deploys carry CVE-2022-38178.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/openvpn-as:version-2.8.6-916f8e7d-ubuntu184ee0764310e7
bind9@1:9.11.3+dfsg-1ubuntu1.13
1:9.11.3+dfsg-1ubuntu1.18

Open the chart page →

15,592
transmission-openvpnutkuozdemirVerified publisher2.5.01 of 1See more

transmission-openvpn utkuozdemir 2.5.0

1 of the 1 container images this version deploys carry CVE-2022-38178.

Container imageDigestPackageFixed in
haugene/transmission-openvpn:4.0059216cfae4b
bind9@1:9.16.1-0ubuntu2.8
1:9.16.1-0ubuntu2.11

Open the chart page →

11,405
fadicetic0.3.12 of 25See more

fadi cetic 0.3.1

2 of the 25 container images this version deploys carry CVE-2022-38178.

Container imageDigestPackageFixed in
jupyterhub/k8s-hub:0.11.1b6b4a1a34bf0
bind9@1:9.16.1-0ubuntu2.4
1:9.16.1-0ubuntu2.11
jupyterhub/k8s-singleuser-sample:0.11.1e3e6f3051df8
bind9@1:9.16.1-0ubuntu2.4
1:9.16.1-0ubuntu2.11

Open the chart page →

52,919
ecr-proxyevryfs-ossVerified publisher0.2.91 of 1See more

ecr-proxy evryfs-oss 0.2.9

1 of the 1 container images this version deploys carry CVE-2022-38178.

Container imageDigestPackageFixed in
esailors/aws-ecr-http-proxy:1.5.15608ae045fa7
bind@9.16.27-r0
9.16.33-r0

Open the chart page →

1,523
blockygeek-cookbookVerified publisher10.5.21 of 1See more

blocky geek-cookbook 10.5.2

1 of the 1 container images this version deploys carry CVE-2022-38178.

Container imageDigestPackageFixed in
ghcr.io/0xerr0r/blocky:v0.18b15824464acb
bind@9.16.25-r0
9.16.33-r0

Open the chart page →

3,030
plexgeek-cookbookVerified publisher6.4.31 of 1See more

plex geek-cookbook 6.4.3

1 of the 1 container images this version deploys carry CVE-2022-38178.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/plex:v1.28.0.5999-97678ded3ef756c7d784b
bind9@1:9.16.1-0ubuntu2.10
1:9.16.1-0ubuntu2.11

Open the chart page →

9,627
tautulligeek-cookbookVerified publisher11.4.21 of 1See more

tautulli geek-cookbook 11.4.2

1 of the 1 container images this version deploys carry CVE-2022-38178.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/tautulli:v2.7.74ea617c30397
bind9@1:9.16.1-0ubuntu2.8
1:9.16.1-0ubuntu2.11

Open the chart page →

10,628
bazarrgeek-cookbookVerified publisher10.6.21 of 1See more

bazarr geek-cookbook 10.6.2

1 of the 1 container images this version deploys carry CVE-2022-38178.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/bazarr:v1.0.3fdb5501cdfb9
bind9@1:9.16.1-0ubuntu2.9
1:9.16.1-0ubuntu2.11

Open the chart page →

17,377
homebridgegeek-cookbookVerified publisher5.3.21 of 1See more

homebridge geek-cookbook 5.3.2

1 of the 1 container images this version deploys carry CVE-2022-38178.

Container imageDigestPackageFixed in
ghcr.io/oznu/homebridge:2022-07-08ff2af53897e7
bind9@1:9.16.1-0ubuntu2.10
1:9.16.1-0ubuntu2.11

Open the chart page →

15,653
prowlarrgeek-cookbookVerified publisher4.5.21 of 1See more

prowlarr geek-cookbook 4.5.2

1 of the 1 container images this version deploys carry CVE-2022-38178.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/prowlarr:v0.3.0.1710c863aa9875fa
bind9@1:9.16.1-0ubuntu2.10
1:9.16.1-0ubuntu2.11

Open the chart page →

11,558
sonarrgeek-cookbookVerified publisher16.3.21 of 1See more

sonarr geek-cookbook 16.3.2

1 of the 1 container images this version deploys carry CVE-2022-38178.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/sonarr:v3.0.8.15070eb230e2381a
bind9@1:9.18.1-1ubuntu1.1
1:9.18.1-1ubuntu1.2

Open the chart page →

13,025
librenmsmidokura-communityVerified publisher0.3.21 of 6See more

librenms midokura-community 0.3.2

1 of the 6 container images this version deploys carry CVE-2022-38178.

Container imageDigestPackageFixed in
librenms/librenms:22.4.14f1f3d667cc7
bind@9.16.27-r0
9.16.33-r0

Open the chart page →

8,967
apache-musicindexgeek-cookbookVerified publisher2.4.21 of 1See more

apache-musicindex geek-cookbook 2.4.2

1 of the 1 container images this version deploys carry CVE-2022-38178.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/apache-musicindex:v1.4.1-2c9bd82dc5fda
bind9@1:9.16.1-0ubuntu2.10
1:9.16.1-0ubuntu2.11

Open the chart page →

14,659
jackettgeek-cookbookVerified publisher11.7.21 of 1See more

jackett geek-cookbook 11.7.2

1 of the 1 container images this version deploys carry CVE-2022-38178.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/jackett:v0.20.13163a4715b46aa2
bind9@1:9.16.1-0ubuntu2.10
1:9.16.1-0ubuntu2.11

Open the chart page →

9,698
lidarrgeek-cookbookVerified publisher14.2.21 of 1See more

lidarr geek-cookbook 14.2.2

1 of the 1 container images this version deploys carry CVE-2022-38178.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/lidarr:v1.0.0.225554ebc1f90963
bind9@1:9.16.1-0ubuntu2.8
1:9.16.1-0ubuntu2.11

Open the chart page →

14,283
nzbgetgeek-cookbookVerified publisher12.4.21 of 1See more

nzbget geek-cookbook 12.4.2

1 of the 1 container images this version deploys carry CVE-2022-38178.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/nzbget:v21.1e5571acd10ce
bind9@1:9.18.1-1ubuntu1.1
1:9.18.1-1ubuntu1.2

Open the chart page →

12,076
pod-gatewaygeek-cookbookVerified publisher5.6.21 of 2See more

pod-gateway geek-cookbook 5.6.2

1 of the 2 container images this version deploys carry CVE-2022-38178.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/pod-gateway:v1.6.1dcb2d814a4f7
bind@9.16.29-r0
9.16.33-r0

Open the chart page →

2,355
qbittorrentgeek-cookbookVerified publisher13.5.21 of 1See more

qbittorrent geek-cookbook 13.5.2

1 of the 1 container images this version deploys carry CVE-2022-38178.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/qbittorrent:v4.4.261deadd1ec78
bind9@1:9.16.1-0ubuntu2.10
1:9.16.1-0ubuntu2.11

Open the chart page →

11,807
radarrgeek-cookbookVerified publisher16.3.21 of 1See more

radarr geek-cookbook 16.3.2

1 of the 1 container images this version deploys carry CVE-2022-38178.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/radarr:v4.1.0.61754273dfaf0295
bind9@1:9.18.1-1ubuntu1.1
1:9.18.1-1ubuntu1.2

Open the chart page →

10,379
transmissiongeek-cookbookVerified publisher8.4.31 of 1See more

transmission geek-cookbook 8.4.3

1 of the 1 container images this version deploys carry CVE-2022-38178.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/transmission:v3.006011182e3946
bind9@1:9.16.1-0ubuntu2.10
1:9.16.1-0ubuntu2.11

Open the chart page →

11,861
xtevegeek-cookbookVerified publisher8.4.21 of 1See more

xteve geek-cookbook 8.4.2

1 of the 1 container images this version deploys carry CVE-2022-38178.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/xteve:v2.2.0.200292b3614670f
bind9@1:9.16.1-0ubuntu2.10
1:9.16.1-0ubuntu2.11

Open the chart page →

17,929
ikigaiikigai-chartVerified publisher0.0.91 of 58See more

ikigai ikigai-chart 0.0.9

1 of the 58 container images this version deploys carry CVE-2022-38178.

Container imageDigestPackageFixed in
jupyterhub/k8s-hub:1.2.0e4770285aaf7
bind9@1:9.16.1-0ubuntu2.9
1:9.16.1-0ubuntu2.11

Open the chart page →

37,671
online-boutiquekubesphere-testVerified publisher0.1.01 of 11See more

online-boutique kubesphere-test 0.1.0

1 of the 11 container images this version deploys carry CVE-2022-38178.

Container imageDigestPackageFixed in
gcr.io/google-samples/microservices-demo/frontend:v0.2.3ca5c0f0771c8
bind@9.16.15-r1
9.16.33-r0

Open the chart page →

26,018
longhornkvalitetsitVerified publisher1.1.1-01 of 2See more

longhorn kvalitetsit 1.1.1-0

1 of the 2 container images this version deploys carry CVE-2022-38178.

Container imageDigestPackageFixed in
longhornio/longhorn-manager:v1.1.1ede61fe2a472
bind9@1:9.11.3+dfsg-1ubuntu1.14
1:9.11.3+dfsg-1ubuntu1.18

Open the chart page →

16,520
ladeitladeit0.4.01 of 2See more

ladeit ladeit 0.4.0

1 of the 2 container images this version deploys carry CVE-2022-38178.

Container imageDigestPackageFixed in
kubeoperator/webkubectl:v2.4.0be8f0d624640
bind9@1:9.11.3+dfsg-1ubuntu1.12
1:9.11.3+dfsg-1ubuntu1.18

Open the chart page →

26,356
acmemosquitto-helm-chart0.2.01 of 2See more

acme mosquitto-helm-chart 0.2.0

1 of the 2 container images this version deploys carry CVE-2022-38178.

Container imageDigestPackageFixed in
neilpang/acme.sh:3.0.2595809ad43a2
bind@9.16.25-r0
9.16.33-r0

Open the chart page →

2,050
chirpstackmosquitto-helm-chart0.5.01 of 8See more

chirpstack mosquitto-helm-chart 0.5.0

1 of the 8 container images this version deploys carry CVE-2022-38178.

Container imageDigestPackageFixed in
apachepulsar/pulsar:2.9.0d056c89b7131
bind9@1:9.16.1-0ubuntu2.9
1:9.16.1-0ubuntu2.11

Open the chart page →

25,933
pulsarmosquitto-helm-chart0.2.01 of 1See more

pulsar mosquitto-helm-chart 0.2.0

1 of the 1 container images this version deploys carry CVE-2022-38178.

Container imageDigestPackageFixed in
apachepulsar/pulsar:2.10.03b262ab7a7d9
bind9@1:9.16.1-0ubuntu2.9
1:9.16.1-0ubuntu2.11

Open the chart page →

15,675
comac-cuopencord0.1.11 of 4See more

comac-cu opencord 0.1.1

1 of the 4 container images this version deploys carry CVE-2022-38178.

Container imageDigestPackageFixed in
ngick8stesting/c3po-mmeinit:latest1e764eab77b4
bind9@1:9.11.3+dfsg-1ubuntu1.1
1:9.11.3+dfsg-1ubuntu1.18

Open the chart page →

8,047
mcord-control-planeopencord0.2.21 of 5See more

mcord-control-plane opencord 0.2.2

1 of the 5 container images this version deploys carry CVE-2022-38178.

Container imageDigestPackageFixed in
ngick8stesting/c3po-mmeinit:latest1e764eab77b4
bind9@1:9.11.3+dfsg-1ubuntu1.1
1:9.11.3+dfsg-1ubuntu1.18

Open the chart page →

15,648
oaisimopencord0.1.72 of 3See more

oaisim opencord 0.1.7

2 of the 3 container images this version deploys carry CVE-2022-38178.

Container imageDigestPackageFixed in
omecproject/lte-softmodem:1.1.0b5ddd36ec20c
bind9@1:9.11.3+dfsg-1ubuntu1.13
1:9.11.3+dfsg-1ubuntu1.18
omecproject/lte-uesoftmodem:1.1.0686f8bc37d8c
bind9@1:9.11.3+dfsg-1ubuntu1.15
1:9.11.3+dfsg-1ubuntu1.18

Open the chart page →

14,536
omec-control-planeopencord0.1.311 of 8See more

omec-control-plane opencord 0.1.31

1 of the 8 container images this version deploys carry CVE-2022-38178.

Container imageDigestPackageFixed in
omecproject/c3po-hssdb:master-latest28a90cc26716
bind9@1:9.16.1-0ubuntu2.9
1:9.16.1-0ubuntu2.11

Open the chart page →

40,715
open-vpnopenvpn0.0.11 of 1See more

open-vpn openvpn 0.0.1

1 of the 1 container images this version deploys carry CVE-2022-38178.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/openvpn-as:version-2.8.6-916f8e7d-ubuntu184ee0764310e7
bind9@1:9.11.3+dfsg-1ubuntu1.13
1:9.11.3+dfsg-1ubuntu1.18

Open the chart page →

15,592
testing-multitoolsomeblackmagic0.1.21 of 1See more

testing-multitool someblackmagic 0.1.2

1 of the 1 container images this version deploys carry CVE-2022-38178.

Container imageDigestPackageFixed in
someblackmagic/k8s-testing-multitool:v0.1.06eca64b6b440
bind9@1:9.16.1-0ubuntu2.10
1:9.16.1-0ubuntu2.11

Open the chart page →

30,687
elasticsearchsvtech-public-helm-charts1.0.01 of 1See more

elasticsearch svtech-public-helm-charts 1.0.0

1 of the 1 container images this version deploys carry CVE-2022-38178.

Container imageDigestPackageFixed in
svtechnmaa/svtech_debuger:v1.0.0b2987abe57d3
bind9@1:9.18.1-1ubuntu1.1
1:9.18.1-1ubuntu1.2

Open the chart page →

12,048
preparationsvtech-public-helm-charts1.0.01 of 1See more

preparation svtech-public-helm-charts 1.0.0

1 of the 1 container images this version deploys carry CVE-2022-38178.

Container imageDigestPackageFixed in
svtechnmaa/svtech_debuger:v1.0.0b2987abe57d3
bind9@1:9.18.1-1ubuntu1.1
1:9.18.1-1ubuntu1.2

Open the chart page →

12,048
longhornwenerme1.2.31 of 2See more

longhorn wenerme 1.2.3

1 of the 2 container images this version deploys carry CVE-2022-38178.

Container imageDigestPackageFixed in
longhornio/longhorn-manager:v1.2.3dca34321452c
bind9@1:9.16.1-0ubuntu2.9
1:9.16.1-0ubuntu2.11

Open the chart page →

15,230

Container images carrying it

38 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
ngick8stesting/c3po-mmeinit:latest1e764eab77b4
bind9@1:9.11.3+dfsg-1ubuntu1.1
1:9.11.3+dfsg-1ubuntu1.18
2
svtechnmaa/svtech_debuger:v1.0.0b2987abe57d3
bind9@1:9.18.1-1ubuntu1.1
1:9.18.1-1ubuntu1.2
2
ghcr.io/linuxserver/openvpn-as:version-2.8.6-916f8e7d-ubuntu184ee0764310e7
bind9@1:9.11.3+dfsg-1ubuntu1.13
1:9.11.3+dfsg-1ubuntu1.18
2
apachepulsar/pulsar:2.10.03b262ab7a7d9
bind9@1:9.16.1-0ubuntu2.9
1:9.16.1-0ubuntu2.11
1
apachepulsar/pulsar:2.9.0d056c89b7131
bind9@1:9.16.1-0ubuntu2.9
1:9.16.1-0ubuntu2.11
1
apachepulsar/pulsar:2.8.2d538416d5afe
bind9@1:9.16.1-0ubuntu2.9
1:9.16.1-0ubuntu2.11
1
esailors/aws-ecr-http-proxy:1.5.15608ae045fa7
bind@9.16.27-r0
9.16.33-r0
1
haugene/transmission-openvpn:4.0059216cfae4b
bind9@1:9.16.1-0ubuntu2.8
1:9.16.1-0ubuntu2.11
1
jupyterhub/k8s-hub:0.11.1b6b4a1a34bf0
bind9@1:9.16.1-0ubuntu2.4
1:9.16.1-0ubuntu2.11
1
jupyterhub/k8s-hub:1.2.0e4770285aaf7
bind9@1:9.16.1-0ubuntu2.9
1:9.16.1-0ubuntu2.11
1
jupyterhub/k8s-singleuser-sample:0.11.1e3e6f3051df8
bind9@1:9.16.1-0ubuntu2.4
1:9.16.1-0ubuntu2.11
1
kubeoperator/webkubectl:v2.4.0be8f0d624640
bind9@1:9.11.3+dfsg-1ubuntu1.12
1:9.11.3+dfsg-1ubuntu1.18
1
librenms/librenms:22.4.14f1f3d667cc7
bind@9.16.27-r0
9.16.33-r0
1
longhornio/longhorn-manager:v1.2.3dca34321452c
bind9@1:9.16.1-0ubuntu2.9
1:9.16.1-0ubuntu2.11
1
longhornio/longhorn-manager:v1.1.1ede61fe2a472
bind9@1:9.11.3+dfsg-1ubuntu1.14
1:9.11.3+dfsg-1ubuntu1.18
1
neilpang/acme.sh:3.0.2595809ad43a2
bind@9.16.25-r0
9.16.33-r0
1
omecproject/c3po-hssdb:master-latest28a90cc26716
bind9@1:9.16.1-0ubuntu2.9
1:9.16.1-0ubuntu2.11
1
omecproject/lte-softmodem:1.1.0b5ddd36ec20c
bind9@1:9.11.3+dfsg-1ubuntu1.13
1:9.11.3+dfsg-1ubuntu1.18
1
omecproject/lte-uesoftmodem:1.1.0686f8bc37d8c
bind9@1:9.11.3+dfsg-1ubuntu1.15
1:9.11.3+dfsg-1ubuntu1.18
1
someblackmagic/k8s-testing-multitool:v0.1.06eca64b6b440
bind9@1:9.16.1-0ubuntu2.10
1:9.16.1-0ubuntu2.11
1
gcr.io/google-samples/microservices-demo/frontend:v0.2.3ca5c0f0771c8
bind@9.16.15-r1
9.16.33-r0
1
ghcr.io/0xerr0r/blocky:v0.18b15824464acb
bind@9.16.25-r0
9.16.33-r0
1
ghcr.io/home-assistant/home-assistant:2022.5.4ec6d67fbedfa
bind@9.16.20-r1
9.16.33-r0
1
ghcr.io/k8s-at-home/apache-musicindex:v1.4.1-2c9bd82dc5fda
bind9@1:9.16.1-0ubuntu2.10
1:9.16.1-0ubuntu2.11
1
ghcr.io/k8s-at-home/bazarr:v1.0.3fdb5501cdfb9
bind9@1:9.16.1-0ubuntu2.9
1:9.16.1-0ubuntu2.11
1
ghcr.io/k8s-at-home/jackett:v0.20.13163a4715b46aa2
bind9@1:9.16.1-0ubuntu2.10
1:9.16.1-0ubuntu2.11
1
ghcr.io/k8s-at-home/lidarr:v1.0.0.225554ebc1f90963
bind9@1:9.16.1-0ubuntu2.8
1:9.16.1-0ubuntu2.11
1
ghcr.io/k8s-at-home/nzbget:v21.1e5571acd10ce
bind9@1:9.18.1-1ubuntu1.1
1:9.18.1-1ubuntu1.2
1
ghcr.io/k8s-at-home/plex:v1.28.0.5999-97678ded3ef756c7d784b
bind9@1:9.16.1-0ubuntu2.10
1:9.16.1-0ubuntu2.11
1
ghcr.io/k8s-at-home/pod-gateway:v1.6.1dcb2d814a4f7
bind@9.16.29-r0
9.16.33-r0
1
ghcr.io/k8s-at-home/prowlarr:v0.3.0.1710c863aa9875fa
bind9@1:9.16.1-0ubuntu2.10
1:9.16.1-0ubuntu2.11
1
ghcr.io/k8s-at-home/qbittorrent:v4.4.261deadd1ec78
bind9@1:9.16.1-0ubuntu2.10
1:9.16.1-0ubuntu2.11
1
ghcr.io/k8s-at-home/radarr:v4.1.0.61754273dfaf0295
bind9@1:9.18.1-1ubuntu1.1
1:9.18.1-1ubuntu1.2
1
ghcr.io/k8s-at-home/sonarr:v3.0.8.15070eb230e2381a
bind9@1:9.18.1-1ubuntu1.1
1:9.18.1-1ubuntu1.2
1
ghcr.io/k8s-at-home/tautulli:v2.7.74ea617c30397
bind9@1:9.16.1-0ubuntu2.8
1:9.16.1-0ubuntu2.11
1
ghcr.io/k8s-at-home/transmission:v3.006011182e3946
bind9@1:9.16.1-0ubuntu2.10
1:9.16.1-0ubuntu2.11
1
ghcr.io/k8s-at-home/xteve:v2.2.0.200292b3614670f
bind9@1:9.16.1-0ubuntu2.10
1:9.16.1-0ubuntu2.11
1
ghcr.io/oznu/homebridge:2022-07-08ff2af53897e7
bind9@1:9.16.1-0ubuntu2.10
1:9.16.1-0ubuntu2.11
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.