CVE-2022-48174
CriticalAdvisory
Published 22 Aug 2023In the index since 5 Sept 2026
- Severity
- Critical
- worst across findings
- CVSS
- 9.8
- base score, highest
- EPSS
- 0.032
- 87th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 106
- of 17,781 indexed, latest versions
- Container images
- 88
- deployed by those charts
- Fix available
- 2 of 2
- affected packages
The matching OSV records carry no description.
Carried by container images the latest versions of 106 of 17,781 indexed charts deploy, on 88 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| busyboxapk | 1.36.0-r9, 1.36.1-r0 | 1.36.1-r1 | 73 |
| busyboxdeb | 1:1.21.0-1ubuntu1, 1:1.21.0-1ubuntu1.4, 1:1.30.1-4ubuntu6.4, 1:1.30.1-7ubuntu3+2 more | 1:1.21.0-1ubuntu1.4+esm1, 1:1.30.1-4ubuntu6.5, 1:1.30.1-7ubuntu3.1, 1:1.35.0-4+deb12u1 | 15 |
- OSV records
- ALPINE-CVE-2022-48174DEBIAN-CVE-2022-48174UBUNTU-CVE-2022-48174
- Also known as
- USN-6335-1, USN-6961-1
Charts affected
106 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| temporaltemporal | 0.28.9 | 3 of 13See more | 21,005 |
| nextcloudth-chartsVerified publisher | 0.4.0 | 1 of 1See more | 10,086 |
| posteetrivy-operator | 2.14.0 | 2 of 3See more | 4,815 |
| tfy-distributortruefoundryVerified publisher | 0.0.1 | 1 of 4See more | 17,323 |
| wiremind-baremetalwiremindVerified publisher | 2.0.2 | 1 of 1See more | 487 |
| zahori-processzahoriVerified publisher | 1.0.1 | 1 of 1See more | 3,480 |
Container images carrying it
88 by charts deploying them
A fixed version is listed for 2 of the 2 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| library/ | d6c6ae7df4a0 | busybox | 1.36.1-r1 | 1 |
| library/ | 588609d76b21 | busybox | 1:1.35.0-4+deb12u1 | 1 |
| mesosphere/ | b093d78a21ed | busybox | 1.36.1-r1 | 1 |
| mintproject/ | 222e3b941a36 | busybox | 1.36.1-r1 | 1 |
| natsio/ | 8c28b75bc416 | busybox | 1.36.1-r1 | 1 |
| natsio/ | c3a755eab2cc | busybox | 1.36.1-r1 | 1 |
| opencsghq/ | bdd2c58b9744 | busybox | 1:1.35.0-4+deb12u1 | 1 |
| opencsghq/ | f6d7e7d6be5d | busybox | 1:1.35.0-4+deb12u1 | 1 |
| opsmx11/ | 5c50ca123d88 | busybox | 1:1.21.0-1ubuntu1.4+esm1 | 1 |
| phntom/ | 53883b65d9b7 | busybox | 1.36.1-r1 | 1 |
| phsmith/ | 0265a7616ae8 | busybox | 1.36.1-r1 | 1 |
| pinclr/ | f37f250b7091 | busybox | 1.36.1-r1 | 1 |
| portainer/ | 3e61aaee1341 | busybox | 1.36.1-r1 | 1 |
| rclone/ | 08e1af3c8814 | busybox | 1.36.1-r1 | 1 |
| resouer/ | e2f198b49ba7 | busybox | 1:1.21.0-1ubuntu1.4+esm1 | 1 |
| semitechnologies/ | 7a00d226f063 | busybox | 1.36.1-r1 | 1 |
| su541/ | 371ee33f83c1 | busybox | 1.36.1-r1 | 1 |
| temporalio/ | 836af062af30 | busybox | 1.36.1-r1 | 1 |
| temporalio/ | ddeebf8bad8f | busybox | 1.36.1-r1 | 1 |
| udhos/ | 12e120d39fdb | busybox | 1.36.1-r1 | 1 |
| voltha/ | 59ab2a00f712 | busybox | 1:1.21.0-1ubuntu1.4+esm1 | 1 |
| zahoriaut/ | 351f8a220ed7 | busybox | 1.36.1-r1 | 1 |
| ghcr.io/ | a608b798fda5 | busybox | 1.36.1-r1 | 1 |
| ghcr.io/ | a06c8ebef427 | busybox | 1.36.1-r1 | 1 |
| ghcr.io/ | 435518f49e23 | busybox | 1.36.1-r1 | 1 |
| ghcr.io/ | 503c00321502 | busybox | 1.36.1-r1 | 1 |
| ghcr.io/ | a8d40779eeae | busybox | 1.36.1-r1 | 1 |
| ghcr.io/ | f579d00721b0 | busybox | 1.36.1-r1 | 1 |
| ghcr.io/ | e3552fa0c68a | busybox | 1.36.1-r1 | 1 |
| ghcr.io/ | f9063e20b1f6 | busybox | 1.36.1-r1 | 1 |
| ghcr.io/ | 71d1f1c0179e | busybox | 1.36.1-r1 | 1 |
| ghcr.io/ | 31030fd2f192 | busybox | 1.36.1-r1 | 1 |
| ghcr.io/ | 24efef013a53 | busybox | 1:1.30.1-4ubuntu6.5 | 1 |
| ghcr.io/ | 0efdd8d3ef39 | busybox | 1.36.1-r1 | 1 |
| quay.io/ | d53cb940196c | busybox | 1.36.1-r1 | 1 |
| quay.io/ | cd36290dc849 | busybox | 1.36.1-r1 | 1 |
| quay.io/ | d7d93debf1f4 | busybox | 1.36.1-r1 | 1 |
| registry.k8s.io/ | 744ae2afd433 | busybox | 1.36.1-r1 | 1 |