CVE-2022-3821

Medium

Advisory

Published 8 Nov 2022In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 5.5; base score, highest
EPSS: 0.004; 36th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 963; of 17,790 indexed, latest versions
Container images: 889; deployed by those charts
Fix available: 2 of 2; affected packages

Red Hat Security Advisory: systemd security and bug fix update

Carried by container images the latest versions of 963 of 17,790 indexed charts deploy, on 889 images.

Affected package	Affected versions	Fixed in	Images
systemddeb	204-5ubuntu20.7, 204-5ubuntu20.10, 204-5ubuntu20.24, 204-5ubuntu20.28+68 more	204-5ubuntu20.31+esm2, 229-4ubuntu21.31+esm3, 237-3ubuntu10.57, 241-7~deb10u10+2 more	767
systemdrpm	234-lp151.25.7, 239-13.el8_0.3, 239-18.el8_1.4, 239-18.el8_1.5+21 more	0:239-68.el8_7.1, 0:250-12.el9_1.1, 254.5-3.1	122

OSV records: RHSA-2023:0100 RHSA-2023:0336 UBUNTU-CVE-2022-3821 DLA-3474-1 openSUSE-SU-2024:13366-1
Also known as: USN-5928-1

Charts affected

963 by stars

Chart

Latest

Affected images

Radar Score

webhookie-allwebhookie

0.1.2

2 of 3 See more

webhookie-all webhookie 0.1.2

2 of the 3 container images this version deploys carry CVE-2022-3821.

Container image	Digest	Package	Fixed in
hookiesolutions/webhookie :latest	0629694246ba	systemd@245.4-4ubuntu3.13	245.4-4ubuntu3.20
quay.io/keycloak/keycloak :14.0.0	3029dc0f1d38	systemd@239-45.el8_4.1	0:239-68.el8_7.1

Open the chart page →

28,699

emissary-ingresswenerme

8.12.2

1 of 2 See more

emissary-ingress wenerme 8.12.2

1 of the 2 container images this version deploys carry CVE-2022-3821.

Container image	Digest	Package	Fixed in
istio/kubectl :1.5.10	dbb7726d1bf0	systemd@237-3ubuntu10.42	237-3ubuntu10.57

Open the chart page →

10,857

longhornwenerme

1.2.3

1 of 2 See more

longhorn wenerme 1.2.3

1 of the 2 container images this version deploys carry CVE-2022-3821.

Container image	Digest	Package	Fixed in
longhornio/longhorn-manager :v1.2.3	dca34321452c	systemd@245.4-4ubuntu3.13	245.4-4ubuntu3.20

Open the chart page →

15,287

miniowenerme

8.0.10

1 of 1 See more

minio wenerme 8.0.10

1 of the 1 container images this version deploys carry CVE-2022-3821.

Container image	Digest	Package	Fixed in
minio/minio :RELEASE.2021-02-14T04-01-33Z	bd11edda91f3	systemd@239-41.el8_3.1	0:239-68.el8_7.1

Open the chart page →

6,915

minio-standalonewenerme

1.0.2

1 of 1 See more

minio-standalone wenerme 1.0.2

1 of the 1 container images this version deploys carry CVE-2022-3821.

Container image	Digest	Package	Fixed in
minio/minio :RELEASE.2022-01-04T07-41-07Z	1484c87239ea	systemd@239-51.el8_5.3	0:239-68.el8_7.1

Open the chart page →

6,138

openebswenerme

3.10.0

2 of 3 See more

openebs wenerme 3.10.0

2 of the 3 container images this version deploys carry CVE-2022-3821.

Container image	Digest	Package	Fixed in
openebs/node-disk-manager :2.1.0	f6c18b0f8c8a	systemd@249.11-0ubuntu3.6	249.11-0ubuntu3.7
openebs/node-disk-operator :2.1.0	6afe2123c457	systemd@249.11-0ubuntu3.6	249.11-0ubuntu3.7

Open the chart page →

10,568

workadventureworkadventure

1.1.0

4 of 9 See more

workadventure workadventure 1.1.0

4 of the 9 container images this version deploys carry CVE-2022-3821.

Container image	Digest	Package	Fixed in
thecodingmachine/workadventure-back :v1.17.7	64001369dad5	systemd@241-7~deb10u8	241-7~deb10u10
thecodingmachine/workadventure-map-storage :v1.17.7	5bdab56da2fa	systemd@241-7~deb10u8	241-7~deb10u10
thecodingmachine/workadventure-play :v1.17.7	d8f66979b9b4	systemd@241-7~deb10u8	241-7~deb10u10
thecodingmachine/workadventure-uploader :v1.17.7	3ccd467543b3	systemd@241-7~deb10u8	241-7~deb10u10

Open the chart page →

16,083

workshop-pipelinesworkshop-pipelines

0.1.6

1 of 2 See more

workshop-pipelines workshop-pipelines 0.1.6

1 of the 2 container images this version deploys carry CVE-2022-3821.

Container image	Digest	Package	Fixed in
quay.io/maximilianopizarro/workshop-pipelines :latest	e383ba3e0966	systemd@239-51.el8_5.5	0:239-68.el8_7.1

Open the chart page →

11,592

myfirstchartww-helm-charts-repo

0.1.0

1 of 1 See more

myfirstchart ww-helm-charts-repo 0.1.0

1 of the 1 container images this version deploys carry CVE-2022-3821.

Container image	Digest	Package	Fixed in
ghcr.io/stacksimplify/kubenginx :0.1.0	205961b09a80	systemd@241-7~deb10u4	241-7~deb10u10

Open the chart page →

1,138

myfirstchartzikilab

0.2.0

1 of 1 See more

myfirstchart zikilab 0.2.0

1 of the 1 container images this version deploys carry CVE-2022-3821.

Container image	Digest	Package	Fixed in
ghcr.io/stacksimplify/kubenginxhelm :0.2.0	ae2268dcc930	systemd@241-7~deb10u4	241-7~deb10u10

Open the chart page →

1,138

alertmanager-matrix-forwarderzloi-space

1.0.1

1 of 2 See more

alertmanager-matrix-forwarder zloi-space 1.0.1

1 of the 2 container images this version deploys carry CVE-2022-3821.

Container image	Digest	Package	Fixed in
matrixdotorg/pantalaimon :v0.10.4	ba6a587fa508	systemd@241-7~deb10u8	241-7~deb10u10

Open the chart page →

3,118

clickhousezloi-space

1.2.0

2 of 3 See more

clickhouse zloi-space 1.2.0

2 of the 3 container images this version deploys carry CVE-2022-3821.

Container image	Digest	Package	Fixed in
yandex/clickhouse-client :21.3	863f94a0f607	systemd@237-3ubuntu10.53	237-3ubuntu10.57
yandex/clickhouse-server :21.3.20	4eccfffb01d7	systemd@245.4-4ubuntu3.15	245.4-4ubuntu3.20

Open the chart page →

9,250

grafana-matrix-forwarderzloi-space

1.0.0

1 of 2 See more

grafana-matrix-forwarder zloi-space 1.0.0

1 of the 2 container images this version deploys carry CVE-2022-3821.

Container image	Digest	Package	Fixed in
matrixdotorg/pantalaimon :v0.10.4	ba6a587fa508	systemd@241-7~deb10u8	241-7~deb10u10

Open the chart page →

1,636

Container images carrying it

889 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
thesisrobot/bitcoind :v23.0	16b368e4d52c	systemd@249.11-0ubuntu3.6	249.11-0ubuntu3.7	1
thmmniii/fbs-core :v1.27.1	5438517d9fc2	systemd@249.11-0ubuntu3.4	249.11-0ubuntu3.7	1
timescale/timescaledb-ha :pg14.6-ts2.9.1-p1	cdb9ae118899	systemd@249.11-0ubuntu3.6	249.11-0ubuntu3.7	1
timescale/timescaledb-ha :pg14-ts2.6-latest	ed719c0cd19d	systemd@249.11-0ubuntu3.1	249.11-0ubuntu3.7	1
timothyclarke/wptagent :2018-01-23	22c41e5ca7e2	systemd@229-4ubuntu21	229-4ubuntu21.31+esm3	1
tooljet/tooljet-ce :v1.18.0	c85a4720e42e	systemd@241-7~deb10u8	241-7~deb10u10	1
tpdock/freeradius :2.2.9	3da600c95a49	systemd@229-4ubuntu21	229-4ubuntu21.31+esm3	1
trinodb/trino :405	ee80ab5eeab2	systemd@249.11-0ubuntu3.6	249.11-0ubuntu3.7	1
trungkien210493/icinga2-report :v1.7.1	2cc8c3763c4c	systemd@241-7~deb10u4	241-7~deb10u10	1
typesense/typesense :0.23.0	3accb727cbe2	systemd@229-4ubuntu21.31	229-4ubuntu21.31+esm3	1
utkuozdemir/nvidia_gpu_exporter :0.3.0	149f9e7e7aa3	systemd@245.4-4ubuntu3.11	245.4-4ubuntu3.20	1
vexorian/dizquetv :1.4.3	7e2b99844a5c	systemd@237-3ubuntu10.45	237-3ubuntu10.57	1
vientoprojects/kubernetes-monitoring-telegram-bot :latest	eb2a71531741	systemd@237-3ubuntu10.51	237-3ubuntu10.57	1
vikunja/frontend :0.17.0	863a426a8e49	systemd@241-7~deb10u7	241-7~deb10u10	1
vinanrra/7dtd-server :v0.4.4	f9534490bd2b	systemd@237-3ubuntu10.56	237-3ubuntu10.57	1
viniciusfcf/gitops-quarkus-app-jvm :latest	bba8ee1b5cd5	systemd@239-51.el8_5.5	0:239-68.el8_7.1	1
voltha/voltha-cli :1.6.0	c4e41e92f046	systemd@229-4ubuntu21.4	229-4ubuntu21.31+esm3	1
voltha/voltha-envoy :1.6.0	59ab2a00f712	systemd@204-5ubuntu20.24	204-5ubuntu20.31+esm2	1
voltha/voltha-netconf :1.6.0	37f80524c207	systemd@229-4ubuntu21.4	229-4ubuntu21.31+esm3	1
voltha/voltha-ofagent :1.6.0	9ee8c1f4428c	systemd@229-4ubuntu21.4	229-4ubuntu21.31+esm3	1
voltha/voltha-onos :5.1.8	e038acb950d3	systemd@237-3ubuntu10.42	237-3ubuntu10.57	1
voltha/voltha-tester :1.7.0	655c3048a602	systemd@229-4ubuntu21.21	229-4ubuntu21.31+esm3	1
voltha/voltha-voltha :1.6.0	ff596b62de59	systemd@229-4ubuntu21.4	229-4ubuntu21.31+esm3	1
wavefronthq/proxy :9.2	d1064d28f6eb	systemd@237-3ubuntu10.41	237-3ubuntu10.57	1
weblate/weblate :3.11.3-1	82848df56ecd	systemd@241-7~deb10u3	241-7~deb10u10	1
wekanteam/wekan :v4.22	68a51f0327df	systemd@245.4-4ubuntu3.1	245.4-4ubuntu3.20	1
wiremind/pghoard :12-2019-11-26	4dea42c8166c	systemd@241-7~deb10u2	241-7~deb10u10	1
wistefan/mvf :latest	e0887302b2d8	systemd@249.11-0ubuntu3.6	249.11-0ubuntu3.7	1
wolveix/satisfactory-server :v1.2.4	db00d63f4791	systemd@241-7~deb10u8	241-7~deb10u10	1
woojoong/wowza :latest	ec230db19652	systemd@237-3ubuntu10.3	237-3ubuntu10.57	1
xeladock/mysql_dns :latest	4baf531453f1	systemd@249.11-0ubuntu3	249.11-0ubuntu3.7	1
xeladock/nginx2 :latest	c259a67b1dff	systemd@249.11-0ubuntu3	249.11-0ubuntu3.7	1
xingse/kubernetes-oom-event-generator :v1.2.0	9f9d5492e4bf	systemd@229-4ubuntu21.31	229-4ubuntu21.31+esm3	1
yandex/clickhouse-client :21.3	863f94a0f607	systemd@237-3ubuntu10.53	237-3ubuntu10.57	1
yandex/clickhouse-server :latest	1cbf75aabe1e	systemd@245.4-4ubuntu3.15	245.4-4ubuntu3.20	1
yandex/clickhouse-server :21.3.20	4eccfffb01d7	systemd@245.4-4ubuntu3.15	245.4-4ubuntu3.20	1
yandex/clickhouse-server :19.17	ab1738a64b70	systemd@237-3ubuntu10.41	237-3ubuntu10.57	1
yandex/clickhouse-server :19.14	ccf9c2b5e3f2	systemd@237-3ubuntu10.41	237-3ubuntu10.57	1
yandex/clickhouse-server :19.16	d210dc69321e	systemd@237-3ubuntu10.39	237-3ubuntu10.57	1
youssef11gaber10/deployment-weather-flask :latest	96bce8b8b5a7	systemd@241-7~deb10u9	241-7~deb10u10	1
zabbix/zabbix-agent :ubuntu-5.4.6	2127168cab03	systemd@245.4-4ubuntu3.13	245.4-4ubuntu3.20	1
zabbix/zabbix-agent2 :ubuntu-6.0.8	e5b594057c9c	systemd@249.11-0ubuntu3.4	249.11-0ubuntu3.7	1
zabbix/zabbix-server-pgsql :ubuntu-5.4.6	6c946b1f45cd	systemd@245.4-4ubuntu3.13	245.4-4ubuntu3.20	1
zabbix/zabbix-server-pgsql :ubuntu-6.0.8	d59ffa07f615	systemd@249.11-0ubuntu3.4	249.11-0ubuntu3.7	1
zabbix/zabbix-web-nginx-pgsql :ubuntu-5.4.6	01de79c31391	systemd@245.4-4ubuntu3.13	245.4-4ubuntu3.20	1
zabbix/zabbix-web-nginx-pgsql :ubuntu-6.0.8	99e9a090b516	systemd@249.11-0ubuntu3.4	249.11-0ubuntu3.7	1
zabbix/zabbix-web-service :ubuntu-6.0.8	ee4baa872280	systemd@249.11-0ubuntu3.4	249.11-0ubuntu3.7	1
zammad/zammad-docker-compose :zammad-4.1.0-31	2808e2dfa810	systemd@241-7~deb10u7	241-7~deb10u10	1
zbalogh/reservation-dotnet-auth-server :1.0.9	09a51b809674	systemd@241-7~deb10u8	241-7~deb10u10	1
zohardocker12/weather_app_flask :latest	b86d60dbb68d	systemd@241-7~deb10u7	241-7~deb10u10	1