CVE-2022-43552
MediumAdvisory
Published 21 Dec 2022In the index since 5 Sept 2026
- Severity
- Medium
- worst across findings
- CVSS
- 5.9
- base score, highest
- EPSS
- 0.025
- 84th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 525
- of 17,787 indexed, latest versions
- Container images
- 439
- deployed by those charts
- Fix available
- 3 of 3
- affected packages
Red Hat Security Advisory: curl security update
Carried by container images the latest versions of 525 of 17,787 indexed charts deploy, on 439 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| curldeb | 7.35.0-1ubuntu2.1, 7.35.0-1ubuntu2.3, 7.35.0-1ubuntu2.16, 7.35.0-1ubuntu2.19+43 more | 7.35.0-1ubuntu2.20+esm14, 7.47.0-1ubuntu2.19+esm7, 7.58.0-2ubuntu3.22, 7.68.0-1ubuntu2.15+1 more | 277 |
| curlapk | 7.77.0-r1, 7.78.0-r0, 7.79.1-r0, 7.79.1-r1+11 more | 7.79.1-r4, 7.80.0-r5, 7.83.1-r5, 7.87.0-r0 | 134 |
| curlrpm | 7.29.0-51.el7, 7.29.0-51.el7_6.3, 7.29.0-54.el7, 7.29.0-54.el7_7.2+3 more | 0:7.29.0-59.el7_9.2 | 28 |
- OSV records
- ALPINE-CVE-2022-43552RHSA-2023:7743UBUNTU-CVE-2022-43552
- Also known as
- USN-5788-1, USN-5894-1
Charts affected
525 by stars
Container images carrying it
439 by charts deploying them
A fixed version is listed for 3 of the 3 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| ghcr.io/ | 600221f0f43f | curl | 7.68.0-1ubuntu2.15 | 1 |
| ghcr.io/ | a85e03d8bc1d | curl | 7.68.0-1ubuntu2.15 | 1 |
| ghcr.io/ | baa4fa9549dc | curl | 7.58.0-2ubuntu3.22 | 1 |
| ghcr.io/ | 4c1b67cf39af | curl | 7.81.0-1ubuntu1.7 | 1 |
| ghcr.io/ | 605b6d544028 | curl | 7.58.0-2ubuntu3.22 | 1 |
| ghcr.io/ | 4f08e2823756 | curl | 7.83.1-r5 | 1 |
| ghcr.io/ | 48890a52b327 | curl | 7.79.1-r4 | 1 |
| ghcr.io/ | a9618107fa50 | curl | 7.79.1-r4 | 1 |
| ghcr.io/ | ff2af53897e7 | curl | 7.68.0-1ubuntu2.15 | 1 |
| ghcr.io/ | e7a8afe6e6eb | curl | 7.80.0-r5 | 1 |
| ghcr.io/ | 3c8375dc5487 | curl | 7.68.0-1ubuntu2.15 | 1 |
| ghcr.io/ | 5ecb16015aa8 | curl | 7.68.0-1ubuntu2.15 | 1 |
| ghcr.io/ | 1dcca70c6446 | curl | 7.68.0-1ubuntu2.15 | 1 |
| ghcr.io/ | f25ebb9c6788 | curl | 7.80.0-r5 | 1 |
| ghcr.io/ | 056bb4271626 | curl | 7.83.1-r5 | 1 |
| ghcr.io/ | bc79fbb50230 | curl | 7.80.0-r5 | 1 |
| ghcr.io/ | b01f67faadf1 | curl | 7.80.0-r5 | 1 |
| ghcr.io/ | 8e6a9516eac0 | curl | 7.58.0-2ubuntu3.22 | 1 |
| ghcr.io/ | b24e63efd841 | curl | 7.79.1-r4 | 1 |
| public.ecr.aws/ | efcecf98b912 | curl | 7.58.0-2ubuntu3.22 | 1 |
| public.ecr.aws/ | 573779e57fae | curl | 7.68.0-1ubuntu2.15 | 1 |
| quay.io/ | 5b6701d8fb31 | curl | 7.81.0-1ubuntu1.7 | 1 |
| quay.io/ | d6fd2a9e3273 | curl | 7.83.1-r5 | 1 |
| quay.io/ | a2d3a4c67b0f | curl | 7.58.0-2ubuntu3.22 | 1 |
| quay.io/ | 60950ef63764 | curl | 7.81.0-1ubuntu1.7 | 1 |
| quay.io/ | 93889c3d8a34 | curl | 7.81.0-1ubuntu1.7 | 1 |
| quay.io/ | c7a9987f2ac5 | curl | 7.83.1-r5 | 1 |
| quay.io/ | a1c3843b03bc | curl | 7.47.0-1ubuntu2.19+esm7 | 1 |
| quay.io/ | becd3e39360a | curl | 7.80.0-r5 | 1 |
| quay.io/ | 0d21ba756f44 | curl | 7.80.0-r5 | 1 |
| quay.io/ | 15a6faada3d4 | curl | 7.79.1-r4 | 1 |
| quay.io/ | f0c5bebaec96 | curl | 7.83.1-r5 | 1 |
| quay.io/ | c6a934439421 | curl | 7.47.0-1ubuntu2.19+esm7 | 1 |
| quay.io/ | 3207f957e80c | curl | 7.79.1-r4 | 1 |
| quay.io/ | 4b188259267e | curl | 7.79.1-r4 | 1 |
| registry.gitlab.com/ | f6385712935f | curl | 7.68.0-1ubuntu2.15 | 1 |
| registry.k8s.io/ | 54f7fe2c6c5a | curl | 7.83.1-r5 | 1 |
| registry.k8s.io/ | 5516d103a9c2 | curl | 7.79.1-r4 | 1 |
| registry.k8s.io/ | d1707ca76d3b | curl | 7.83.1-r5 | 1 |