CVE-2022-4304
MediumAdvisory
Published 7 Feb 2023In the index since 5 Sept 2026
- Severity
- Medium
- worst across findings
- CVSS
- 5.9
- base score, highest
- EPSS
- 0.162
- 97th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 1,060
- of 17,787 indexed, latest versions
- Container images
- 1,063
- deployed by those charts
- Fix available
- 3 of 4
- affected packages
Security update for openssl-1_1
Carried by container images the latest versions of 1,060 of 17,787 indexed charts deploy, on 1,063 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| opensslapk | 1.1.1k-r0, 1.1.1l-r0, 1.1.1l-r7, 1.1.1l-r8+9 more | 1.1.1t-r0, 3.0.8-r0 | 566 |
| openssldeb | 1.0.1f-1ubuntu2.5, 1.0.1f-1ubuntu2.8, 1.0.1f-1ubuntu2.25, 1.0.1f-1ubuntu2.27+55 more | 1.1.1-1ubuntu2.1~18.04.21, 1.1.1-1ubuntu2.fips.2.1~18.04.21, 1.1.1f-1ubuntu2.17, 1.1.1f-1ubuntu2.fips.17+1 more | 490 |
| openssl1.0deb | 1.0.2n-1ubuntu5.3, 1.0.2n-1ubuntu5.4, 1.0.2n-1ubuntu5.6, 1.0.2n-1ubuntu5.10+2 more | no fix listed | 15 |
| openssl-1_1rpm | 1.1.0i-14.6.1 | 1.1.0i-150100.14.56.1 | 7 |
- OSV records
- ALPINE-CVE-2022-4304UBUNTU-CVE-2022-4304SUSE-SU-2023:2622-1
- Also known as
- USN-5844-1
Charts affected
1,060 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| mrtg-backendwitcom-gmbh | 0.7.0 | 1 of 2See more | 2,616 |
| workadventureworkadventure | 1.1.0 | 2 of 9See more | 16,083 |
| default-backendwyrihaximusnetVerified publisher | 1.1.0 | 1 of 1See more | 2,535 |
| skoonerxdVerified publisher | 1.1.0 | 1 of 1See more | 1,752 |
| pgbounceryasn77-pgbouncer | 0.0.8 | 1 of 1See more | 1,152 |
| rawfile-csiymatrixVerified publisher | 0.2.1 | 1 of 4See more | 7,972 |
| zahori-schedulerzahoriVerified publisher | 1.0.1 | 1 of 1See more | 2,464 |
| zahori-serverzahoriVerified publisher | 1.0.1 | 1 of 2See more | 5,847 |
| alertmanager-matrix-forwarderzloi-space | 1.0.1 | 1 of 2See more | 3,118 |
| clickhousezloi-space | 1.2.0 | 2 of 3See more | 9,250 |
Container images carrying it
1,063 by charts deploying them
A fixed version is listed for 3 of the 4 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| zeetdev/ | 1967aa2840b6 | openssl | 1.1.1t-r0 | 1 |
| zl0i/ | e94047931739 | openssl | 1.1.1t-r0 | 1 |
| gcr.io/ | 809338a69bd5 | openssl openssl1.0 | 1.1.1-1ubuntu2.1~18.04.21 no fix listed | 1 |
| gcr.io/ | 10f4dbc8eeeb | openssl | no fix listed | 1 |
| gcr.io/ | cb5c1bddd1b5 | openssl | no fix listed | 1 |
| gcr.io/ | 5ea7b7f3632a | openssl | no fix listed | 1 |
| gcr.io/ | c552478f8f11 | openssl | 1.1.1f-1ubuntu2.17 | 1 |
| gcr.io/ | 8f9ff98fdbef | openssl | no fix listed | 1 |
| gcr.io/ | 9538fabe49fd | openssl | 1.1.1f-1ubuntu2.17 | 1 |
| gcr.io/ | 989a60847416 | openssl | 1.1.1t-r0 | 1 |
| gcr.io/ | 2b1a3d08caac | openssl | 1.1.1t-r0 | 1 |
| gcr.io/ | e8bc6cf08613 | openssl | no fix listed | 1 |
| gcr.io/ | e8e263a919ff | openssl | 1.1.1f-1ubuntu2.fips.17 | 1 |
| gcr.io/ | 34403f9f94be | openssl | 1.1.1t-r0 | 1 |
| ghcr.io/ | b15824464acb | openssl | 1.1.1t-r0 | 1 |
| ghcr.io/ | eb7be822d5b2 | openssl | 1.1.1-1ubuntu2.fips.2.1~18.04.21 | 1 |
| ghcr.io/ | 140aed2752c3 | openssl | 1.1.1t-r0 | 1 |
| ghcr.io/ | bce133f3f511 | openssl | 1.1.1t-r0 | 1 |
| ghcr.io/ | a462d5797e14 | openssl | 1.1.1t-r0 | 1 |
| ghcr.io/ | 3191b771a6f2 | openssl | 1.1.1t-r0 | 1 |
| ghcr.io/ | 657a2c9f6e6d | openssl | 1.1.1t-r0 | 1 |
| ghcr.io/ | 6b359ace1408 | openssl | 1.1.1t-r0 | 1 |
| ghcr.io/ | d4022cd32df5 | openssl | 1.1.1t-r0 | 1 |
| ghcr.io/ | 42b0c87470d6 | openssl | 1.1.1t-r0 | 1 |
| ghcr.io/ | 9c7c11293b3c | openssl | 1.1.1t-r0 | 1 |
| ghcr.io/ | 74aff24d4b97 | openssl | 3.0.8-r0 | 1 |
| ghcr.io/ | 6fde1edc0983 | openssl | 1.1.1f-1ubuntu2.fips.17 | 1 |
| ghcr.io/ | c852606428cf | openssl | 1.1.1t-r0 | 1 |
| ghcr.io/ | f299baf467b5 | openssl | 1.1.1t-r0 | 1 |
| ghcr.io/ | 760eee87f839 | openssl-1_1 | 1.1.0i-150100.14.56.1 | 1 |
| ghcr.io/ | 6a1432b0d503 | openssl-1_1 | 1.1.0i-150100.14.56.1 | 1 |
| ghcr.io/ | f059af4de8ed | openssl-1_1 | 1.1.0i-150100.14.56.1 | 1 |
| ghcr.io/ | c7c70b527255 | openssl-1_1 | 1.1.0i-150100.14.56.1 | 1 |
| ghcr.io/ | e24a9e0a21b6 | openssl-1_1 | 1.1.0i-150100.14.56.1 | 1 |
| ghcr.io/ | 3d089d9078f8 | openssl | 1.1.1t-r0 | 1 |
| ghcr.io/ | 82cc9a77f6d6 | openssl | 1.1.1t-r0 | 1 |
| ghcr.io/ | 81669df338e0 | openssl | 1.1.1t-r0 | 1 |
| ghcr.io/ | ee6a21e66ff0 | openssl | 1.1.1t-r0 | 1 |
| ghcr.io/ | 3b3fbb57cae8 | openssl | 1.1.1t-r0 | 1 |
| ghcr.io/ | eeb625bd660c | openssl | 1.1.1t-r0 | 1 |
| ghcr.io/ | 24bbca4a52a8 | openssl | 1.1.1t-r0 | 1 |
| ghcr.io/ | da6b05a1a601 | openssl | 1.1.1t-r0 | 1 |
| ghcr.io/ | 1ea5412bed26 | openssl | 1.1.1t-r0 | 1 |
| ghcr.io/ | 198db44fabb5 | openssl | 1.1.1t-r0 | 1 |
| ghcr.io/ | 8f1bbd5cda85 | openssl | 1.1.1t-r0 | 1 |
| ghcr.io/ | bed6f4ec2e82 | openssl | 1.1.1t-r0 | 1 |
| ghcr.io/ | e9716966f30b | openssl | 1.1.1t-r0 | 1 |
| ghcr.io/ | 080150de7d86 | openssl | 1.1.1f-1ubuntu2.fips.17 | 1 |
| ghcr.io/ | aa45adaf59a7 | openssl | 1.1.1f-1ubuntu2.17 | 1 |
| ghcr.io/ | 38a4f32fad82 | openssl | 1.1.1t-r0 | 1 |