CVE-2022-40735
HighAdvisory
Published 14 Nov 2022In the index since 5 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 7.5
- base score, highest
- EPSS
- 0.025
- 84th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 302
- of 17,787 indexed, latest versions
- Container images
- 270
- deployed by those charts
- Fix available
- 1 of 2
- affected packages
The matching OSV records carry no description.
Carried by container images the latest versions of 302 of 17,787 indexed charts deploy, on 270 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| openssldeb | 3.0.2-0ubuntu1, 3.0.2-0ubuntu1.2, 3.0.2-0ubuntu1.5, 3.0.2-0ubuntu1.6+18 more | 3.0.2-0ubuntu1.16 | 270 |
| nodejsdeb | 16.14.2-deb-1nodesource1, 16.18.0-deb-1nodesource1, 20.11.1-1nodesource1, 20.15.0-1nodesource1+1 more | no fix listed | 5 |
- OSV records
- UBUNTU-CVE-2022-40735
- Also known as
- USN-6854-1
Charts affected
302 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| playwright-synthetic-monitoringwork-adventure | 1.0.1 | 1 of 1See more | 14,172 |
| zoo-project-druzoo-projectOfficialVerified publisher | 0.10.4 | 1 of 6See more | 7,916 |
Container images carrying it
270 by charts deploying them
A fixed version is listed for 1 of the 2 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| library/ | 8a279e9396a8 | openssl | 3.0.2-0ubuntu1.16 | 10 |
| library/ | a42d2b4503e7 | openssl | no fix listed | 7 |
| library/ | ce66c7be32a0 | openssl | no fix listed | 6 |
| hyperledger/ | a70b6ba64a08 | openssl | no fix listed | 4 |
| jaegertracing/ | d48d6dab2c65 | openssl | 3.0.2-0ubuntu1.16 | 4 |
| library/ | c3f70098e01d | openssl | 3.0.2-0ubuntu1.16 | 4 |
| mastercloudapps/ | 40a950b311b2 | openssl | 3.0.2-0ubuntu1.16 | 4 |
| ghcr.io/ | 0c00cb0bda1a | openssl | no fix listed | 4 |
| codeurjc/ | 800cf520c245 | openssl | 3.0.2-0ubuntu1.16 | 3 |
| envoyproxy/ | 2bf7f042e396 | openssl | no fix listed | 3 |
| sigp/ | 50f66cfebb6d | openssl | no fix listed | 3 |
| quay.io/ | 2b6db27eaf3d | openssl | 3.0.2-0ubuntu1.16 | 3 |
| quay.io/ | f296c2ec5db7 | openssl | 3.0.2-0ubuntu1.16 | 3 |
| apache/ | 7cdfd8deec92 | openssl | 3.0.2-0ubuntu1.16 | 2 |
| clickhouse/ | fa394da808cc | openssl | no fix listed | 2 |
| datagrok/ | f5876d3aebb8 | openssl | no fix listed | 2 |
| gradiant/ | 015b30d5fa0f | openssl | no fix listed | 2 |
| istio/ | 757d28c24100 | openssl | 3.0.2-0ubuntu1.16 | 2 |
| library/ | 7cbcec0086ac | openssl | 3.0.2-0ubuntu1.16 | 2 |
| library/ | 0abf60f81588 | openssl | 3.0.2-0ubuntu1.16 | 2 |
| library/ | 334b315c10e5 | openssl | 3.0.2-0ubuntu1.16 | 2 |
| library/ | 92e50059ea0a | openssl | no fix listed | 2 |
| library/ | e101f9db3191 | openssl | 3.0.2-0ubuntu1.16 | 2 |
| library/ | 406a4fdca9fc | openssl | no fix listed | 2 |
| library/ | b096b4cb9269 | openssl | no fix listed | 2 |
| library/ | b6421fd6d1c5 | openssl | no fix listed | 2 |
| library/ | f020c06da226 | openssl | 3.0.2-0ubuntu1.16 | 2 |
| library/ | f258365d4882 | openssl | no fix listed | 2 |
| openebs/ | f6c18b0f8c8a | openssl | 3.0.2-0ubuntu1.16 | 2 |
| openebs/ | 6afe2123c457 | openssl | 3.0.2-0ubuntu1.16 | 2 |
| piomin/ | 871f784dd6bc | openssl | 3.0.2-0ubuntu1.16 | 2 |
| redis/ | 1c5f43fddcdd | openssl | 3.0.2-0ubuntu1.16 | 2 |
| redis/ | 72035434f455 | openssl | no fix listed | 2 |
| redis/ | e44b2b49d059 | openssl | 3.0.2-0ubuntu1.16 | 2 |
| sigp/ | 44aa773dcf27 | openssl | no fix listed | 2 |
| sigp/ | 9a62bb870545 | openssl | no fix listed | 2 |
| svtechnmaa/ | b2987abe57d3 | openssl | 3.0.2-0ubuntu1.16 | 2 |
| tzahi12345/ | 2f943d584711 | nodejs openssl | no fix listed 3.0.2-0ubuntu1.16 | 2 |
| wolveix/ | e103700ae6ae | openssl | no fix listed | 2 |
| ghcr.io/ | 536358d7b17e | openssl | no fix listed | 2 |
| ghcr.io/ | 5be52524664c | nodejs openssl | no fix listed 3.0.2-0ubuntu1.16 | 2 |
| ghcr.io/ | 5f545698e907 | openssl | 3.0.2-0ubuntu1.16 | 2 |
| ghcr.io/ | 03fd01b4f56e | openssl | 3.0.2-0ubuntu1.16 | 2 |
| ahmetfurkandemir/ | 142231a0b8b7 | openssl | no fix listed | 1 |
| altinity/ | 3396b15c51a2 | openssl | no fix listed | 1 |
| andrewgolikov55/ | fcc001b61c0e | openssl | 3.0.2-0ubuntu1.16 | 1 |
| andrewmackrodt/ | 33f9080470c9 | openssl | no fix listed | 1 |
| apache/ | 80136ae753ee | openssl | no fix listed | 1 |
| apache/ | 63b8e3e40742 | openssl | no fix listed | 1 |
| apachepulsar/ | 16f9fdab3fa6 | openssl | 3.0.2-0ubuntu1.16 | 1 |