CVE-2022-40735
HighAdvisory
Published 14 Nov 2022In the index since 5 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 7.5
- base score, highest
- EPSS
- 0.024
- 83rd percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 301
- of 17,781 indexed, latest versions
- Container images
- 269
- deployed by those charts
- Fix available
- 1 of 2
- affected packages
The matching OSV records carry no description.
Carried by container images the latest versions of 301 of 17,781 indexed charts deploy, on 269 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| openssldeb | 3.0.2-0ubuntu1, 3.0.2-0ubuntu1.2, 3.0.2-0ubuntu1.5, 3.0.2-0ubuntu1.6+18 more | 3.0.2-0ubuntu1.16 | 269 |
| nodejsdeb | 16.14.2-deb-1nodesource1, 16.18.0-deb-1nodesource1, 20.11.1-1nodesource1, 20.15.0-1nodesource1+1 more | no fix listed | 5 |
- OSV records
- UBUNTU-CVE-2022-40735
- Also known as
- USN-6854-1
Charts affected
301 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| zoo-project-druzoo-projectOfficialVerified publisher | 0.10.4 | 1 of 6See more | 7,849 |
Container images carrying it
269 by charts deploying them
A fixed version is listed for 1 of the 2 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| apachepulsar/ | 9c9947de139d | openssl | no fix listed | 1 |
| apache/ | 76c176e8a0e4 | openssl | no fix listed | 1 |
| apache/ | c8fb51195444 | openssl | 3.0.2-0ubuntu1.16 | 1 |
| apache/ | 133d35d2c263 | openssl | 3.0.2-0ubuntu1.16 | 1 |
| apache/ | 295f1dc87d98 | openssl | 3.0.2-0ubuntu1.16 | 1 |
| apache/ | 92d055a84e9e | openssl | 3.0.2-0ubuntu1.16 | 1 |
| assistiot/ | e9bae124095f | openssl | 3.0.2-0ubuntu1.16 | 1 |
| assistiot/ | 30812ba93555 | openssl | 3.0.2-0ubuntu1.16 | 1 |
| atlassian/ | 3b9222ab32ef | openssl | 3.0.2-0ubuntu1.16 | 1 |
| atlassian/ | 37bc46cbec1a | openssl | 3.0.2-0ubuntu1.16 | 1 |
| beanbag/ | 6b840f546e1c | openssl | no fix listed | 1 |
| boxcutter/ | 84e13f01bcab | openssl | 3.0.2-0ubuntu1.16 | 1 |
| camunda/ | ab5abc09e407 | openssl | 3.0.2-0ubuntu1.16 | 1 |
| checkmk/ | c11b422210c4 | openssl | no fix listed | 1 |
| cheveo/ | 82240f890884 | openssl | no fix listed | 1 |
| chriseaton/ | 54c3384ce701 | openssl | no fix listed | 1 |
| ciscolabs/ | 36d02faad958 | openssl | 3.0.2-0ubuntu1.16 | 1 |
| ckan/ | ef8e5d3e6be1 | openssl | no fix listed | 1 |
| clickhouse/ | 01b81d1432c4 | openssl | no fix listed | 1 |
| clickhouse/ | 810861a2e2d0 | openssl | no fix listed | 1 |
| clickhouse/ | 8745843b17f9 | openssl | no fix listed | 1 |
| clickhouse/ | 92098d3b31dd | openssl | no fix listed | 1 |
| clickhouse/ | a65ca89ddbe8 | openssl | no fix listed | 1 |
| clickhouse/ | b627d7a9bc0e | openssl | no fix listed | 1 |
| clickhouse/ | dc5658853ce1 | openssl | 3.0.2-0ubuntu1.16 | 1 |
| clickhouse/ | e019438e1e05 | openssl | no fix listed | 1 |
| cortezaproject/ | 0bcdcbcd3c63 | openssl | no fix listed | 1 |
| cortezaproject/ | cb9f200de5d2 | openssl | no fix listed | 1 |
| cyverse/ | aa69d105b292 | openssl | no fix listed | 1 |
| datalayers/ | 17b292079239 | openssl | no fix listed | 1 |
| datamate/ | 2dd66b722464 | openssl | no fix listed | 1 |
| dblaci/ | eea697611af4 | openssl | 3.0.2-0ubuntu1.16 | 1 |
| deepflowce/ | 29332fee7fc2 | openssl | 3.0.2-0ubuntu1.16 | 1 |
| dremio/ | 80ed2e3b7c43 | openssl | 3.0.2-0ubuntu1.16 | 1 |
| drpcorg/ | 8858fae1859d | openssl | 3.0.2-0ubuntu1.16 | 1 |
| duck1123/ | 0e29f19fa67c | openssl | 3.0.2-0ubuntu1.16 | 1 |
| duck1123/ | 9d6fb247b714 | openssl | 3.0.2-0ubuntu1.16 | 1 |
| envoyproxy/ | 2956bd9de830 | openssl | no fix listed | 1 |
| envoyproxy/ | 447f857a0146 | openssl | no fix listed | 1 |
| envoyproxy/ | 56da5afd7df3 | openssl | no fix listed | 1 |
| envoyproxy/ | caa5b411be16 | openssl | no fix listed | 1 |
| envoyproxy/ | cfc0678bc03c | openssl | no fix listed | 1 |
| envoyproxy/ | e596fda6a0ce | openssl | 3.0.2-0ubuntu1.16 | 1 |
| flanksource/ | 1dacc3195bf9 | openssl | 3.0.2-0ubuntu1.16 | 1 |
| fnzv/ | b3079b95c336 | openssl | 3.0.2-0ubuntu1.16 | 1 |
| freeradius/ | af6fd34a5b78 | openssl | no fix listed | 1 |
| geonode/ | 81b1d431b7e9 | openssl | no fix listed | 1 |
| gethue/ | 7d5c1b9f8a79 | nodejs openssl | no fix listed no fix listed | 1 |
| glasskube/ | be5133100d63 | openssl | 3.0.2-0ubuntu1.16 | 1 |
| gobitfly/ | 1d08a7986348 | openssl | no fix listed | 1 |