CVE-2022-3821

Medium

Advisory

Published 8 Nov 2022In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 5.5; base score, highest
EPSS: 0.004; 36th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 963; of 17,787 indexed, latest versions
Container images: 889; deployed by those charts
Fix available: 2 of 2; affected packages

Red Hat Security Advisory: systemd security and bug fix update

Carried by container images the latest versions of 963 of 17,787 indexed charts deploy, on 889 images.

Affected package	Affected versions	Fixed in	Images
systemddeb	204-5ubuntu20.7, 204-5ubuntu20.10, 204-5ubuntu20.24, 204-5ubuntu20.28+68 more	204-5ubuntu20.31+esm2, 229-4ubuntu21.31+esm3, 237-3ubuntu10.57, 241-7~deb10u10+2 more	767
systemdrpm	234-lp151.25.7, 239-13.el8_0.3, 239-18.el8_1.4, 239-18.el8_1.5+21 more	0:239-68.el8_7.1, 0:250-12.el9_1.1, 254.5-3.1	122

OSV records: RHSA-2023:0100 RHSA-2023:0336 UBUNTU-CVE-2022-3821 DLA-3474-1 openSUSE-SU-2024:13366-1
Also known as: USN-5928-1

Charts affected

963 by stars

Chart

Latest

Affected images

Radar Score

webhookie-allwebhookie

0.1.2

2 of 3 See more

webhookie-all webhookie 0.1.2

2 of the 3 container images this version deploys carry CVE-2022-3821.

Container image	Digest	Package	Fixed in
hookiesolutions/webhookie :latest	0629694246ba	systemd@245.4-4ubuntu3.13	245.4-4ubuntu3.20
quay.io/keycloak/keycloak :14.0.0	3029dc0f1d38	systemd@239-45.el8_4.1	0:239-68.el8_7.1

Open the chart page →

28,699

emissary-ingresswenerme

8.12.2

1 of 2 See more

emissary-ingress wenerme 8.12.2

1 of the 2 container images this version deploys carry CVE-2022-3821.

Container image	Digest	Package	Fixed in
istio/kubectl :1.5.10	dbb7726d1bf0	systemd@237-3ubuntu10.42	237-3ubuntu10.57

Open the chart page →

10,857

longhornwenerme

1.2.3

1 of 2 See more

longhorn wenerme 1.2.3

1 of the 2 container images this version deploys carry CVE-2022-3821.

Container image	Digest	Package	Fixed in
longhornio/longhorn-manager :v1.2.3	dca34321452c	systemd@245.4-4ubuntu3.13	245.4-4ubuntu3.20

Open the chart page →

15,287

miniowenerme

8.0.10

1 of 1 See more

minio wenerme 8.0.10

1 of the 1 container images this version deploys carry CVE-2022-3821.

Container image	Digest	Package	Fixed in
minio/minio :RELEASE.2021-02-14T04-01-33Z	bd11edda91f3	systemd@239-41.el8_3.1	0:239-68.el8_7.1

Open the chart page →

6,915

minio-standalonewenerme

1.0.2

1 of 1 See more

minio-standalone wenerme 1.0.2

1 of the 1 container images this version deploys carry CVE-2022-3821.

Container image	Digest	Package	Fixed in
minio/minio :RELEASE.2022-01-04T07-41-07Z	1484c87239ea	systemd@239-51.el8_5.3	0:239-68.el8_7.1

Open the chart page →

6,138

openebswenerme

3.10.0

2 of 3 See more

openebs wenerme 3.10.0

2 of the 3 container images this version deploys carry CVE-2022-3821.

Container image	Digest	Package	Fixed in
openebs/node-disk-manager :2.1.0	f6c18b0f8c8a	systemd@249.11-0ubuntu3.6	249.11-0ubuntu3.7
openebs/node-disk-operator :2.1.0	6afe2123c457	systemd@249.11-0ubuntu3.6	249.11-0ubuntu3.7

Open the chart page →

10,568

workadventureworkadventure

1.1.0

4 of 9 See more

workadventure workadventure 1.1.0

4 of the 9 container images this version deploys carry CVE-2022-3821.

Container image	Digest	Package	Fixed in
thecodingmachine/workadventure-back :v1.17.7	64001369dad5	systemd@241-7~deb10u8	241-7~deb10u10
thecodingmachine/workadventure-map-storage :v1.17.7	5bdab56da2fa	systemd@241-7~deb10u8	241-7~deb10u10
thecodingmachine/workadventure-play :v1.17.7	d8f66979b9b4	systemd@241-7~deb10u8	241-7~deb10u10
thecodingmachine/workadventure-uploader :v1.17.7	3ccd467543b3	systemd@241-7~deb10u8	241-7~deb10u10

Open the chart page →

16,083

workshop-pipelinesworkshop-pipelines

0.1.6

1 of 2 See more

workshop-pipelines workshop-pipelines 0.1.6

1 of the 2 container images this version deploys carry CVE-2022-3821.

Container image	Digest	Package	Fixed in
quay.io/maximilianopizarro/workshop-pipelines :latest	e383ba3e0966	systemd@239-51.el8_5.5	0:239-68.el8_7.1

Open the chart page →

11,592

myfirstchartww-helm-charts-repo

0.1.0

1 of 1 See more

myfirstchart ww-helm-charts-repo 0.1.0

1 of the 1 container images this version deploys carry CVE-2022-3821.

Container image	Digest	Package	Fixed in
ghcr.io/stacksimplify/kubenginx :0.1.0	205961b09a80	systemd@241-7~deb10u4	241-7~deb10u10

Open the chart page →

1,138

myfirstchartzikilab

0.2.0

1 of 1 See more

myfirstchart zikilab 0.2.0

1 of the 1 container images this version deploys carry CVE-2022-3821.

Container image	Digest	Package	Fixed in
ghcr.io/stacksimplify/kubenginxhelm :0.2.0	ae2268dcc930	systemd@241-7~deb10u4	241-7~deb10u10

Open the chart page →

1,138

alertmanager-matrix-forwarderzloi-space

1.0.1

1 of 2 See more

alertmanager-matrix-forwarder zloi-space 1.0.1

1 of the 2 container images this version deploys carry CVE-2022-3821.

Container image	Digest	Package	Fixed in
matrixdotorg/pantalaimon :v0.10.4	ba6a587fa508	systemd@241-7~deb10u8	241-7~deb10u10

Open the chart page →

3,118

clickhousezloi-space

1.2.0

2 of 3 See more

clickhouse zloi-space 1.2.0

2 of the 3 container images this version deploys carry CVE-2022-3821.

Container image	Digest	Package	Fixed in
yandex/clickhouse-client :21.3	863f94a0f607	systemd@237-3ubuntu10.53	237-3ubuntu10.57
yandex/clickhouse-server :21.3.20	4eccfffb01d7	systemd@245.4-4ubuntu3.15	245.4-4ubuntu3.20

Open the chart page →

9,250

grafana-matrix-forwarderzloi-space

1.0.0

1 of 2 See more

grafana-matrix-forwarder zloi-space 1.0.0

1 of the 2 container images this version deploys carry CVE-2022-3821.

Container image	Digest	Package	Fixed in
matrixdotorg/pantalaimon :v0.10.4	ba6a587fa508	systemd@241-7~deb10u8	241-7~deb10u10

Open the chart page →

1,636

Container images carrying it

889 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
shinobisystems/shinobi :latest	c2f5ce2e1067	systemd@241-7~deb10u7	241-7~deb10u10	1
sigma2as/minio :20240306-3a2e4f5	c284ead9ec3e	systemd@239-58.el8_6.7	0:239-68.el8_7.1	1
sigp/lighthouse :v2.1.2	ad501f02cfef	systemd@245.4-4ubuntu3.15	245.4-4ubuntu3.20	1
sikalabs/slu :v0.34.0	fdc0c6711add	systemd@241-7~deb10u8	241-7~deb10u10	1
simpleidserver/faasgateway :0.0.4	53c159ea49ca	systemd@241-7~deb10u8	241-7~deb10u10	1
simpleidserver/faaskubernetes :0.0.4	9007e742dd48	systemd@241-7~deb10u8	241-7~deb10u10	1
sinusbot/docker :1.0.0-beta.14-dc94a7c	c7a4f3cc4393	systemd@241-7~deb10u7	241-7~deb10u10	1
sirfragalot/hyperion.ng :2.0.0-alpha.9-x86_64	34577843cb7b	systemd@241-7~deb10u4	241-7~deb10u10	1
siscc/dotstatsuite-core-auth-management :9a653e82	bb1e9a45b6fa	systemd@241-7~deb10u4	241-7~deb10u10	1
siscc/dotstatsuite-core-sdmxri-nsi :master	00d73f06edcf	systemd@241-7~deb10u4	241-7~deb10u10	1
sismics/docs :v1.10	f4b0ef019cf1	systemd@237-3ubuntu3	237-3ubuntu10.57	1
slagattollas/planner-practica :latest	cecd95e31486	systemd@241-7~deb10u7	241-7~deb10u10	1
slagattollas/weatherservice-practica :latest	68e7f56393fc	systemd@237-3ubuntu10.44	237-3ubuntu10.57	1
snipe/snipe-it :v6.0.14	55fb7636a98c	systemd@245.4-4ubuntu3.18	245.4-4ubuntu3.20	1
snowplow/scala-stream-collector-pubsub :2.2.0	41d318841516	systemd@241-7~deb10u4	241-7~deb10u10	1
socialmediamacroscope/collect_reddit_comment :0.1.2	19d3d26d53ee	systemd@237-3ubuntu10.56	237-3ubuntu10.57	1
socialmediamacroscope/image_crawler :0.1.2	f508216be63c	systemd@237-3ubuntu10.56	237-3ubuntu10.57	1
softonic/node-policy-webhook :0.1.2	ab6098c04a53	systemd@241-7~deb10u4	241-7~deb10u10	1
softonic/pod-defaulter :0.1.0	72017aed5902	systemd@241-7~deb10u4	241-7~deb10u10	1
softonic/preemptible-killer :1.2.6-2	94b87f1fb362	systemd@241-7~deb10u4	241-7~deb10u10	1
solidnerd/bookstack :21.12	762ffd5c51d3	systemd@241-7~deb10u8	241-7~deb10u10	1
someblackmagic/k8s-testing-multitool :v0.1.0	6eca64b6b440	systemd@245.4-4ubuntu3.17	245.4-4ubuntu3.20	1
someblackmagic/smtp-fake-server :latest	0d63ba37a560	systemd@241-7~deb10u5	241-7~deb10u10	1
sorintlab/stolon :v0.16.0-pg12	36b45c0f97fc	systemd@241-7~deb10u2	241-7~deb10u10	1
splunk/splunk-operator :2.0.0	c4e0d3146226	systemd@239-58.el8	0:239-68.el8_7.1	1
stacksimplify/kube-nginxapp1 :1.0.0	ead648280067	systemd@241-7~deb10u4	241-7~deb10u10	1
stacksimplify/kube-nginxapp2 :1.0.0	ce2b15139aca	systemd@241-7~deb10u4	241-7~deb10u10	1
stakater/workshop-operator :v0.0.38	97bf456cc97c	systemd@239-51.el8_5.2	0:239-68.el8_7.1	1
stakewiselabs/bls-horcrux :v1.0.0	2afd0c0b34cb	systemd@241-7~deb10u5	241-7~deb10u10	1
stanfordoval/almond-server :latest	1a63cdccedaf	systemd@241-7~deb10u8	241-7~deb10u10	1
stashapp/stash :latest	24dbd7607174	systemd@245.4-4ubuntu3.5	245.4-4ubuntu3.20	1
statcan/ckan :2.9	3921305425b8	systemd@245.4-4ubuntu3.6	245.4-4ubuntu3.20	1
streamnative/apache-pulsar-grafana-dashboard-k8s :0.0.16	11bceacec8fb	systemd@245.4-4ubuntu3.7	245.4-4ubuntu3.20	1
stremio/server :latest	3dc145603def	systemd@241-7~deb10u9	241-7~deb10u10	1
subsquid/hydra-indexer-gateway :5.0.0-alpha.37	a0d9dea6a9c2	systemd@241-7~deb10u7	241-7~deb10u10	1
svtechnmaa/svtech_csv :v1.0.1	b9d7ecf8de24	systemd@241-7~deb10u4	241-7~deb10u10	1
svtechnmaa/svtech_gitlist :v1.0.0	d5a1390b5b75	systemd@241-7~deb10u1	241-7~deb10u10	1
svtechnmaa/svtech_http_thruk :v1.0.2	e19aba397c1f	systemd@241-7~deb10u1	241-7~deb10u10	1
svtechnmaa/svtech_rundeck_option_provider :v1.1.1	674fad30a51f	systemd@241-7~deb10u4	241-7~deb10u10	1
tachyongroup/mlflow-deployment-controller :mlflow-controller-0.1.8	7e79b9000856	systemd@241-7~deb10u8	241-7~deb10u10	1
taigaio/taiga-protected :6.4.0	36318831b3e7	systemd@241-7~deb10u7	241-7~deb10u10	1
tdengine/tdengine :3.0.2.2	4140a4021ddb	systemd@237-3ubuntu10.56	237-3ubuntu10.57	1
tensorflow/tensorflow :1.6.0-devel	1e3172090703	systemd@229-4ubuntu21	229-4ubuntu21.31+esm3	1
teslamate/teslamate :1.23.4	49db95fbf2a1	systemd@241-7~deb10u7	241-7~deb10u10	1
testhubio/testhub-api :on-prem	56badee134b9	systemd@241-7~deb10u3	241-7~deb10u10	1
thecampagnards/trafficlight-api :main	7dca9d973837	systemd@245.4-4ubuntu3.6	245.4-4ubuntu3.20	1
thecodingmachine/workadventure-back :v1.17.7	64001369dad5	systemd@241-7~deb10u8	241-7~deb10u10	1
thecodingmachine/workadventure-map-storage :v1.17.7	5bdab56da2fa	systemd@241-7~deb10u8	241-7~deb10u10	1
thecodingmachine/workadventure-play :v1.17.7	d8f66979b9b4	systemd@241-7~deb10u8	241-7~deb10u10	1
thecodingmachine/workadventure-uploader :v1.17.7	3ccd467543b3	systemd@241-7~deb10u8	241-7~deb10u10	1