CVE-2022-3821

Medium

Advisory

Published 8 Nov 2022In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 5.5; base score, highest
EPSS: 0.004; 36th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 963; of 17,790 indexed, latest versions
Container images: 889; deployed by those charts
Fix available: 2 of 2; affected packages

Red Hat Security Advisory: systemd security and bug fix update

Carried by container images the latest versions of 963 of 17,790 indexed charts deploy, on 889 images.

Affected package	Affected versions	Fixed in	Images
systemddeb	204-5ubuntu20.7, 204-5ubuntu20.10, 204-5ubuntu20.24, 204-5ubuntu20.28+68 more	204-5ubuntu20.31+esm2, 229-4ubuntu21.31+esm3, 237-3ubuntu10.57, 241-7~deb10u10+2 more	767
systemdrpm	234-lp151.25.7, 239-13.el8_0.3, 239-18.el8_1.4, 239-18.el8_1.5+21 more	0:239-68.el8_7.1, 0:250-12.el9_1.1, 254.5-3.1	122

OSV records: RHSA-2023:0100 RHSA-2023:0336 UBUNTU-CVE-2022-3821 DLA-3474-1 openSUSE-SU-2024:13366-1
Also known as: USN-5928-1

Charts affected

963 by stars

Chart

Latest

Affected images

Radar Score

webhookie-allwebhookie

0.1.2

2 of 3 See more

webhookie-all webhookie 0.1.2

2 of the 3 container images this version deploys carry CVE-2022-3821.

Container image	Digest	Package	Fixed in
hookiesolutions/webhookie :latest	0629694246ba	systemd@245.4-4ubuntu3.13	245.4-4ubuntu3.20
quay.io/keycloak/keycloak :14.0.0	3029dc0f1d38	systemd@239-45.el8_4.1	0:239-68.el8_7.1

Open the chart page →

28,697

emissary-ingresswenerme

8.12.2

1 of 2 See more

emissary-ingress wenerme 8.12.2

1 of the 2 container images this version deploys carry CVE-2022-3821.

Container image	Digest	Package	Fixed in
istio/kubectl :1.5.10	dbb7726d1bf0	systemd@237-3ubuntu10.42	237-3ubuntu10.57

Open the chart page →

10,859

longhornwenerme

1.2.3

1 of 2 See more

longhorn wenerme 1.2.3

1 of the 2 container images this version deploys carry CVE-2022-3821.

Container image	Digest	Package	Fixed in
longhornio/longhorn-manager :v1.2.3	dca34321452c	systemd@245.4-4ubuntu3.13	245.4-4ubuntu3.20

Open the chart page →

15,288

miniowenerme

8.0.10

1 of 1 See more

minio wenerme 8.0.10

1 of the 1 container images this version deploys carry CVE-2022-3821.

Container image	Digest	Package	Fixed in
minio/minio :RELEASE.2021-02-14T04-01-33Z	bd11edda91f3	systemd@239-41.el8_3.1	0:239-68.el8_7.1

Open the chart page →

6,922

minio-standalonewenerme

1.0.2

1 of 1 See more

minio-standalone wenerme 1.0.2

1 of the 1 container images this version deploys carry CVE-2022-3821.

Container image	Digest	Package	Fixed in
minio/minio :RELEASE.2022-01-04T07-41-07Z	1484c87239ea	systemd@239-51.el8_5.3	0:239-68.el8_7.1

Open the chart page →

6,144

openebswenerme

3.10.0

2 of 3 See more

openebs wenerme 3.10.0

2 of the 3 container images this version deploys carry CVE-2022-3821.

Container image	Digest	Package	Fixed in
openebs/node-disk-manager :2.1.0	f6c18b0f8c8a	systemd@249.11-0ubuntu3.6	249.11-0ubuntu3.7
openebs/node-disk-operator :2.1.0	6afe2123c457	systemd@249.11-0ubuntu3.6	249.11-0ubuntu3.7

Open the chart page →

10,587

workadventureworkadventure

1.1.0

4 of 9 See more

workadventure workadventure 1.1.0

4 of the 9 container images this version deploys carry CVE-2022-3821.

Container image	Digest	Package	Fixed in
thecodingmachine/workadventure-back :v1.17.7	64001369dad5	systemd@241-7~deb10u8	241-7~deb10u10
thecodingmachine/workadventure-map-storage :v1.17.7	5bdab56da2fa	systemd@241-7~deb10u8	241-7~deb10u10
thecodingmachine/workadventure-play :v1.17.7	d8f66979b9b4	systemd@241-7~deb10u8	241-7~deb10u10
thecodingmachine/workadventure-uploader :v1.17.7	3ccd467543b3	systemd@241-7~deb10u8	241-7~deb10u10

Open the chart page →

16,084

workshop-pipelinesworkshop-pipelines

0.1.6

1 of 2 See more

workshop-pipelines workshop-pipelines 0.1.6

1 of the 2 container images this version deploys carry CVE-2022-3821.

Container image	Digest	Package	Fixed in
quay.io/maximilianopizarro/workshop-pipelines :latest	e383ba3e0966	systemd@239-51.el8_5.5	0:239-68.el8_7.1

Open the chart page →

11,603

myfirstchartww-helm-charts-repo

0.1.0

1 of 1 See more

myfirstchart ww-helm-charts-repo 0.1.0

1 of the 1 container images this version deploys carry CVE-2022-3821.

Container image	Digest	Package	Fixed in
ghcr.io/stacksimplify/kubenginx :0.1.0	205961b09a80	systemd@241-7~deb10u4	241-7~deb10u10

Open the chart page →

1,138

myfirstchartzikilab

0.2.0

1 of 1 See more

myfirstchart zikilab 0.2.0

1 of the 1 container images this version deploys carry CVE-2022-3821.

Container image	Digest	Package	Fixed in
ghcr.io/stacksimplify/kubenginxhelm :0.2.0	ae2268dcc930	systemd@241-7~deb10u4	241-7~deb10u10

Open the chart page →

1,138

alertmanager-matrix-forwarderzloi-space

1.0.1

1 of 2 See more

alertmanager-matrix-forwarder zloi-space 1.0.1

1 of the 2 container images this version deploys carry CVE-2022-3821.

Container image	Digest	Package	Fixed in
matrixdotorg/pantalaimon :v0.10.4	ba6a587fa508	systemd@241-7~deb10u8	241-7~deb10u10

Open the chart page →

3,118

clickhousezloi-space

1.2.0

2 of 3 See more

clickhouse zloi-space 1.2.0

2 of the 3 container images this version deploys carry CVE-2022-3821.

Container image	Digest	Package	Fixed in
yandex/clickhouse-client :21.3	863f94a0f607	systemd@237-3ubuntu10.53	237-3ubuntu10.57
yandex/clickhouse-server :21.3.20	4eccfffb01d7	systemd@245.4-4ubuntu3.15	245.4-4ubuntu3.20

Open the chart page →

9,256

grafana-matrix-forwarderzloi-space

1.0.0

1 of 2 See more

grafana-matrix-forwarder zloi-space 1.0.0

1 of the 2 container images this version deploys carry CVE-2022-3821.

Container image	Digest	Package	Fixed in
matrixdotorg/pantalaimon :v0.10.4	ba6a587fa508	systemd@241-7~deb10u8	241-7~deb10u10

Open the chart page →

1,636

Container images carrying it

889 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/drogue-iot/authentication-service :0.11.0	857b137fc7b3	systemd@250-12.el9_1	0:250-12.el9_1.1	1
ghcr.io/drogue-iot/coap-endpoint :0.11.0	44790b71aa22	systemd@250-12.el9_1	0:250-12.el9_1.1	1
ghcr.io/drogue-iot/command-endpoint :0.11.0	6dce3158b851	systemd@250-12.el9_1	0:250-12.el9_1.1	1
ghcr.io/drogue-iot/console-backend :0.11.0	25d229ae5bde	systemd@250-12.el9_1	0:250-12.el9_1.1	1
ghcr.io/drogue-iot/console-frontend :0.11.0	558972f9374c	systemd@250-12.el9_1	0:250-12.el9_1.1	1
ghcr.io/drogue-iot/database-migration :0.11.0	57072c72a7cd	systemd@250-12.el9_1	0:250-12.el9_1.1	1
ghcr.io/drogue-iot/device-management-controller :0.11.0	200aea1a2b42	systemd@250-12.el9_1	0:250-12.el9_1.1	1
ghcr.io/drogue-iot/device-management-service :0.11.0	f4a5bfc06a74	systemd@250-12.el9_1	0:250-12.el9_1.1	1
ghcr.io/drogue-iot/device-state-service :0.11.0	fbf0738cfc7e	systemd@250-12.el9_1	0:250-12.el9_1.1	1
ghcr.io/drogue-iot/drogue-event-source :0.2.1	e2e812a4cf8e	systemd@239-51.el8_5.3	0:239-68.el8_7.1	1
ghcr.io/drogue-iot/http-endpoint :0.11.0	b612c18479e0	systemd@250-12.el9_1	0:250-12.el9_1.1	1
ghcr.io/drogue-iot/knative-operator :0.11.0	e2d927639f6e	systemd@250-12.el9_1	0:250-12.el9_1.1	1
ghcr.io/drogue-iot/mqtt-endpoint :0.11.0	32c6d2f5eab9	systemd@250-12.el9_1	0:250-12.el9_1.1	1
ghcr.io/drogue-iot/mqtt-integration :0.11.0	7ac2adb6ca49	systemd@250-12.el9_1	0:250-12.el9_1.1	1
ghcr.io/drogue-iot/outbox-controller :0.11.0	1a958edafdb1	systemd@250-12.el9_1	0:250-12.el9_1.1	1
ghcr.io/drogue-iot/postgresql-pusher :0.2.1	c6bb121ced90	systemd@239-51.el8_5.3	0:239-68.el8_7.1	1
ghcr.io/drogue-iot/test-cert-generator :0.11.0	6ba7e1608286	systemd@239-68.el8	0:239-68.el8_7.1	1
ghcr.io/drogue-iot/topic-strimzi-operator :0.11.0	5253fbf8d04c	systemd@250-12.el9_1	0:250-12.el9_1.1	1
ghcr.io/drogue-iot/ttn-operator :0.11.0	7dd5ac80c8f1	systemd@250-12.el9_1	0:250-12.el9_1.1	1
ghcr.io/drogue-iot/user-auth-service :0.11.0	adebc40ddf98	systemd@250-12.el9_1	0:250-12.el9_1.1	1
ghcr.io/drogue-iot/websocket-integration :0.11.0	372dcd370945	systemd@250-12.el9_1	0:250-12.el9_1.1	1
ghcr.io/duyet/glossary :0.1.0	ae6309fa237d	systemd@241-7~deb10u8	241-7~deb10u10	1
ghcr.io/dysnix/bitnami/mongodb :4.4.11-debian-10-r5	073116e61007	systemd@241-7~deb10u8	241-7~deb10u10	1
ghcr.io/edgelesssys/coordinator :v0.5.0	bcd5b8d4c45c	systemd@237-3ubuntu10.51	237-3ubuntu10.57	1
ghcr.io/edgelesssys/edgelessdb-sgx-1gb :v0.3.2	7e1d7a11a11a	systemd@245.4-4ubuntu3.18	245.4-4ubuntu3.20	1
ghcr.io/ferama/vipien :v0.5.3	923a3f704b21	systemd@245.4-4ubuntu3.15	245.4-4ubuntu3.20	1
ghcr.io/grofers/legend :0.1	d6e901ad0ebd	systemd@241-7~deb10u4	241-7~deb10u10	1
ghcr.io/haveagitgat/tdarr :2.00.18.2	3fbe4c29d14c	systemd@245.4-4ubuntu3.17	245.4-4ubuntu3.20	1
ghcr.io/jenkins-x/nexus :0.1.37	8caf5289fe73	systemd@239-31.el8_2.2	0:239-68.el8_7.1	1
ghcr.io/jr0dd/puppeteer :v13.3.2	6047599cd78e	systemd@245.4-4ubuntu3.15	245.4-4ubuntu3.20	1
ghcr.io/k8s-at-home/apache-musicindex :v1.4.1-2	c9bd82dc5fda	systemd@245.4-4ubuntu3.17	245.4-4ubuntu3.20	1
ghcr.io/k8s-at-home/bazarr :v1.0.3	fdb5501cdfb9	systemd@245.4-4ubuntu3.15	245.4-4ubuntu3.20	1
ghcr.io/k8s-at-home/emby :v4.6.1.0	5c6b8f91f1c4	systemd@245.4-4ubuntu3.6	245.4-4ubuntu3.20	1
ghcr.io/k8s-at-home/haste-server :latest	827aa2f2389d	systemd@245.4-4ubuntu3.11	245.4-4ubuntu3.20	1
ghcr.io/k8s-at-home/jackett :v0.20.1316	3a4715b46aa2	systemd@245.4-4ubuntu3.17	245.4-4ubuntu3.20	1
ghcr.io/k8s-at-home/leaf2mqtt :v0.1	fc9f5aca6cf4	systemd@241-7~deb10u7	241-7~deb10u10	1
ghcr.io/k8s-at-home/lidarr :v1.0.0.2255	54ebc1f90963	systemd@245.4-4ubuntu3.11	245.4-4ubuntu3.20	1
ghcr.io/k8s-at-home/network-ups-tools :v2.7.4-2479-g86a32237	cbd5d4cc1245	systemd@245.4-4ubuntu3.6	245.4-4ubuntu3.20	1
ghcr.io/k8s-at-home/nzbget :v21.1	e5571acd10ce	systemd@249.11-0ubuntu3.4	249.11-0ubuntu3.7	1
ghcr.io/k8s-at-home/nzbhydra2 :v3.14.2	ef3670f7e0a8	systemd@245.4-4ubuntu3.6	245.4-4ubuntu3.20	1
ghcr.io/k8s-at-home/plex :v1.28.0.5999-97678ded3	ef756c7d784b	systemd@245.4-4ubuntu3.17	245.4-4ubuntu3.20	1
ghcr.io/k8s-at-home/prowlarr :v0.3.0.1710	c863aa9875fa	systemd@245.4-4ubuntu3.15	245.4-4ubuntu3.20	1
ghcr.io/k8s-at-home/qbittorrent :v4.4.2	61deadd1ec78	systemd@245.4-4ubuntu3.16	245.4-4ubuntu3.20	1
ghcr.io/k8s-at-home/radarr :v4.1.0.6175	4273dfaf0295	systemd@249.11-0ubuntu3.4	249.11-0ubuntu3.7	1
ghcr.io/k8s-at-home/readarr :v0.1.0.715	ad943e9309e4	systemd@245.4-4ubuntu3.6	245.4-4ubuntu3.20	1
ghcr.io/k8s-at-home/sabnzbd :v3.3.1	c2d6e775db5a	systemd@245.4-4ubuntu3.6	245.4-4ubuntu3.20	1
ghcr.io/k8s-at-home/sonarr :v3.0.8.1507	0eb230e2381a	systemd@249.11-0ubuntu3.4	249.11-0ubuntu3.7	1
ghcr.io/k8s-at-home/tautulli :v2.7.7	4ea617c30397	systemd@245.4-4ubuntu3.13	245.4-4ubuntu3.20	1
ghcr.io/k8s-at-home/transmission :v3.00	6011182e3946	systemd@245.4-4ubuntu3.17	245.4-4ubuntu3.20	1
ghcr.io/k8s-at-home/wireguard :v1.0.20210424	448045c4270b	systemd@245.4-4ubuntu3.6	245.4-4ubuntu3.20	1