CVE-2022-4304

Medium

Advisory

Published 7 Feb 2023In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 5.9; base score, highest
EPSS: 0.162; 97th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 1,060; of 17,787 indexed, latest versions
Container images: 1,063; deployed by those charts
Fix available: 3 of 4; affected packages

Security update for openssl-1_1

Carried by container images the latest versions of 1,060 of 17,787 indexed charts deploy, on 1,063 images.

Affected package	Affected versions	Fixed in	Images
opensslapk	1.1.1k-r0, 1.1.1l-r0, 1.1.1l-r7, 1.1.1l-r8+9 more	1.1.1t-r0, 3.0.8-r0	566
openssldeb	1.0.1f-1ubuntu2.5, 1.0.1f-1ubuntu2.8, 1.0.1f-1ubuntu2.25, 1.0.1f-1ubuntu2.27+55 more	1.1.1-1ubuntu2.1~18.04.21, 1.1.1-1ubuntu2.fips.2.1~18.04.21, 1.1.1f-1ubuntu2.17, 1.1.1f-1ubuntu2.fips.17+1 more	490
openssl1.0deb	1.0.2n-1ubuntu5.3, 1.0.2n-1ubuntu5.4, 1.0.2n-1ubuntu5.6, 1.0.2n-1ubuntu5.10+2 more	no fix listed	15
openssl-1_1rpm	1.1.0i-14.6.1	1.1.0i-150100.14.56.1	7

OSV records: ALPINE-CVE-2022-4304 UBUNTU-CVE-2022-4304 SUSE-SU-2023:2622-1
Also known as: USN-5844-1

Charts affected

1,060 by stars

Chart

Latest

Affected images

Radar Score

mrtg-backendwitcom-gmbh

0.7.0

1 of 2 See more

mrtg-backend witcom-gmbh 0.7.0

1 of the 2 container images this version deploys carry CVE-2022-4304.

Container image	Digest	Package	Fixed in
quay.io/oauth2-proxy/oauth2-proxy :v7.2.1	febeebebe762	openssl@1.1.1l-r7	1.1.1t-r0

Open the chart page →

2,616

workadventureworkadventure

1.1.0

2 of 9 See more

workadventure workadventure 1.1.0

2 of the 9 container images this version deploys carry CVE-2022-4304.

Container image	Digest	Package	Fixed in
thecodingmachine/workadventure-chat :v1.17.7	da12f37e6795	openssl@1.1.1n-r0	1.1.1t-r0
thecodingmachine/workadventure-ejabberd :v1.17.7	01df99622ad3	openssl@1.1.1n-r0	1.1.1t-r0

Open the chart page →

16,083

default-backendwyrihaximusnet

1.1.0

1 of 1 See more

default-backend wyrihaximusnet 1.1.0

1 of the 1 container images this version deploys carry CVE-2022-4304.

Container image	Digest	Package	Fixed in
ghcr.io/wyrihaximusnet/default-backend :random	b24e63efd841	openssl@1.1.1l-r0	1.1.1t-r0

Open the chart page →

2,535

skoonerxd

1.1.0

1 of 1 See more

skooner xd 1.1.0

1 of the 1 container images this version deploys carry CVE-2022-4304.

Container image	Digest	Package	Fixed in
ymuski/skooner :latest	67819ca511b5	openssl@1.1.1n-r0	1.1.1t-r0

Open the chart page →

1,752

pgbounceryasn77-pgbouncer

0.0.8

1 of 1 See more

pgbouncer yasn77-pgbouncer 0.0.8

1 of the 1 container images this version deploys carry CVE-2022-4304.

Container image	Digest	Package	Fixed in
ghcr.io/yasn77/pgbouncer :v0.0.6	cc8c13550e44	openssl@1.1.1q-r0	1.1.1t-r0

Open the chart page →

1,152

rawfile-csiymatrix

0.2.1

1 of 4 See more

rawfile-csi ymatrix 0.2.1

1 of the 4 container images this version deploys carry CVE-2022-4304.

Container image	Digest	Package	Fixed in
matrixdb/rawfile-csi :v0.2.1	95b2e38e913d	openssl@1.1.1n-r0	1.1.1t-r0

Open the chart page →

7,972

zahori-schedulerzahori

1.0.1

1 of 1 See more

zahori-scheduler zahori 1.0.1

1 of the 1 container images this version deploys carry CVE-2022-4304.

Container image	Digest	Package	Fixed in
zahoriaut/zahori-scheduler :1.0.0	47d0979b1184	openssl@1.1.1-1ubuntu2.1~18.04.23	1.1.1-1ubuntu2.fips.2.1~18.04.21

Open the chart page →

2,464

zahori-serverzahori

1.0.1

1 of 2 See more

zahori-server zahori 1.0.1

1 of the 2 container images this version deploys carry CVE-2022-4304.

Container image	Digest	Package	Fixed in
flyway/flyway :9.14.1-alpine	80f12c80502b	openssl@3.0.7-r2	3.0.8-r0

Open the chart page →

5,847

alertmanager-matrix-forwarderzloi-space

1.0.1

1 of 2 See more

alertmanager-matrix-forwarder zloi-space 1.0.1

1 of the 2 container images this version deploys carry CVE-2022-4304.

Container image	Digest	Package	Fixed in
zl0i/alertmanager-matrix-forwarder :v1.0.0	e94047931739	openssl@1.1.1l-r7	1.1.1t-r0

Open the chart page →

3,118

clickhousezloi-space

1.2.0

2 of 3 See more

clickhouse zloi-space 1.2.0

2 of the 3 container images this version deploys carry CVE-2022-4304.

Container image	Digest	Package	Fixed in
yandex/clickhouse-client :21.3	863f94a0f607	openssl@1.1.1-1ubuntu2.1~18.04.14	1.1.1-1ubuntu2.1~18.04.21
yandex/clickhouse-server :21.3.20	4eccfffb01d7	openssl@1.1.1f-1ubuntu2.10	1.1.1f-1ubuntu2.17

Open the chart page →

9,250

Container images carrying it

1,063 by charts deploying them

A fixed version is listed for 3 of the 4 affected packages.

Container image	Digest	Package	Fixed in	Used by
quay.io/solo-io/certgen :0.0.0-fork	b17a8c7d1f32	openssl@1.1.1q-r0	1.1.1t-r0	1
quay.io/solo-io/discovery :0.0.0-fork	5b62aaade3c9	openssl@1.1.1q-r0	1.1.1t-r0	1
quay.io/solo-io/gloo :0.0.0-fork	9a6c84560d44	openssl@1.1.1q-r0	1.1.1t-r0	1
quay.io/solo-io/gloo-envoy-wrapper :0.0.0-fork	26ae185e835a	openssl@1.1.1q-r0	1.1.1t-r0	1
quay.io/solo-io/kubectl :0.0.0-fork	2d5404e61625	openssl@1.1.1q-r0	1.1.1t-r0	1
quay.io/wi_stefan/dsba-db-migrations :0.0.12	5b986cd14a08	openssl@3.0.7-r0	3.0.8-r0	1
registry.gitlab.com/autokubeops/kube-image-webhook :v0.2.0	fcf464708a21	openssl@1.1.1-1ubuntu2.1~18.04.17	1.1.1-1ubuntu2.1~18.04.21	1
registry.gitlab.com/infinitydon/registry/open5gs-aio :v2.2.2	f6385712935f	openssl@1.1.1f-1ubuntu2.2	1.1.1f-1ubuntu2.17	1
registry.gitlab.com/radiology/infrastructure/study-governor :8.0.0	4e7faf6f8d5f	openssl@1.1.1q-r0	1.1.1t-r0	1
registry.k8s.io/ingress-nginx/controller :v1.3.1	54f7fe2c6c5a	openssl@1.1.1q-r0	1.1.1t-r0	1
registry.k8s.io/ingress-nginx/controller :v1.2.1	5516d103a9c2	openssl@1.1.1o-r0	1.1.1t-r0	1
registry.k8s.io/ingress-nginx/controller :v1.3.0	d1707ca76d3b	openssl@1.1.1q-r0	1.1.1t-r0	1
registry.k8s.io/sig-storage/hostpathplugin :v1.9.0	92257881c1d6	openssl@1.1.1q-r0	1.1.1t-r0	1