StackRadar

CVE-2022-4900

Medium

Advisory

Published 2 Nov 2023In the index since 6 Sept 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
0.004
30th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
17
of 17,781 indexed, latest versions
Container images
13
deployed by those charts
Fix available
4 of 4
affected packages

Potential buffer overflow in php_cli_server_startup_workers

Carried by container images the latest versions of 17 of 17,781 indexed charts deploy, on 13 images.

Affected packageAffected versionsFixed inImages
php7.4deb7.4.3-4ubuntu2.6, 7.4.3-4ubuntu2.12, 7.4.3-4ubuntu2.13, 7.4.3-4ubuntu2.15+6 more7.4.3-4ubuntu2.22, 7.4.33-1+deb11u610
php8.1deb8.1.2-1ubuntu2.3, 8.1.2-1ubuntu2.148.1.2-1ubuntu2.172
libphpbitnami7.4.33-18.0.221
phpbitnami7.4.33-28.0.221
OSV records
BIT-libphp-2022-4900BIT-php-2022-4900DEBIAN-CVE-2022-4900UBUNTU-CVE-2022-4900
Also known as
BIT-php-min-2022-4900, USN-6757-1, USN-6757-2

Charts affected

17 by stars
ChartLatestAffected imagesRadar Score
zabbixcetic3.1.31 of 5See more

zabbix cetic 3.1.3

1 of the 5 container images this version deploys carry CVE-2022-4900.

Container imageDigestPackageFixed in
zabbix/zabbix-web-nginx-pgsql:ubuntu-6.0.899e9a090b516
php8.1@8.1.2-1ubuntu2.3
8.1.2-1ubuntu2.17

Open the chart page →

33,725
snipeitt3n3.4.11 of 2See more

snipeit t3n 3.4.1

1 of the 2 container images this version deploys carry CVE-2022-4900.

Container imageDigestPackageFixed in
snipe/snipe-it:v6.0.1455fb7636a98c
php7.4@7.4.3-4ubuntu2.13
7.4.3-4ubuntu2.22

Open the chart page →

18,509
adminercetic0.2.11 of 1See more

adminer cetic 0.2.1

1 of the 1 container images this version deploys carry CVE-2022-4900.

Container imageDigestPackageFixed in
library/adminer:4.8.1-standalone34d37131366c
php7.4@7.4.33-1+deb11u5
7.4.33-1+deb11u6

Open the chart page →

461
zabbix-serveraekondratievVerified publisher1.0.61 of 4See more

zabbix-server aekondratiev 1.0.6

1 of the 4 container images this version deploys carry CVE-2022-4900.

Container imageDigestPackageFixed in
zabbix/zabbix-web-nginx-pgsql:ubuntu-5.4.601de79c31391
php7.4@7.4.3-4ubuntu2.6
7.4.3-4ubuntu2.22

Open the chart page →

30,668
passboltcnieg1.1.171 of 2See more

passbolt cnieg 1.1.17

1 of the 2 container images this version deploys carry CVE-2022-4900.

Container imageDigestPackageFixed in
passbolt/passbolt:3.4.0-ce-non-root655547e17263
php7.4@7.4.25-1+deb11u1
7.4.33-1+deb11u6

Open the chart page →

3,543
fadicetic0.3.11 of 25See more

fadi cetic 0.3.1

1 of the 25 container images this version deploys carry CVE-2022-4900.

Container imageDigestPackageFixed in
library/adminer:4.8.1-standalone34d37131366c
php7.4@7.4.33-1+deb11u5
7.4.33-1+deb11u6

Open the chart page →

52,919
piholesavepointsamVerified publisher0.2.01 of 1See more

pihole savepointsam 0.2.0

1 of the 1 container images this version deploys carry CVE-2022-4900.

Container imageDigestPackageFixed in
pihole/pihole:2023.05.0b83258064f54
php7.4@7.4.33-1+deb11u3
7.4.33-1+deb11u6

Open the chart page →

1,048
passbolt-hachristianhuthVerified publisher6.0.11 of 4See more

passbolt-ha christianhuth 6.0.1

1 of the 4 container images this version deploys carry CVE-2022-4900.

Container imageDigestPackageFixed in
passbolt/passbolt:3.4.0-ce-non-root655547e17263
php7.4@7.4.25-1+deb11u1
7.4.33-1+deb11u6

Open the chart page →

10,817
openldapcsic-charts0.1.11 of 2See more

openldap csic-charts 0.1.1

1 of the 2 container images this version deploys carry CVE-2022-4900.

Container imageDigestPackageFixed in
ldapaccountmanager/lam:8.0.1d46cf25d1dda
php7.4@7.4.30-1+deb11u1
7.4.33-1+deb11u6

Open the chart page →

5,293
equizequiz0.0.11 of 3See more

equiz equiz 0.0.1

1 of the 3 container images this version deploys carry CVE-2022-4900.

Container imageDigestPackageFixed in
yzhou442/equiz:latesta3f7ca69e28d
libphp@7.4.33-1
php@7.4.33-2
8.0.22
8.0.22

Open the chart page →

7,541
equizequiz-chart0.0.11 of 3See more

equiz equiz-chart 0.0.1

1 of the 3 container images this version deploys carry CVE-2022-4900.

Container imageDigestPackageFixed in
yzhou442/equiz:latesta3f7ca69e28d
libphp@7.4.33-1
php@7.4.33-2
8.0.22
8.0.22

Open the chart page →

7,541
passboltg0dscookie0.5.21 of 2See more

passbolt g0dscookie 0.5.2

1 of the 2 container images this version deploys carry CVE-2022-4900.

Container imageDigestPackageFixed in
passbolt/passbolt:3.9.0-2-ce-non-rootec046e112d5c
php7.4@7.4.33-1+deb11u1
7.4.33-1+deb11u6

Open the chart page →

7,940
nominatimheywood8-helm-chartsVerified publisher3.10.81 of 3See more

nominatim heywood8-helm-charts 3.10.8

1 of the 3 container images this version deploys carry CVE-2022-4900.

Container imageDigestPackageFixed in
mediagis/nominatim:4.2d0eae7b51374
php8.1@8.1.2-1ubuntu2.14
8.1.2-1ubuntu2.17

Open the chart page →

14,290
phppgadminkfirfer0.1.121 of 1See more

phppgadmin kfirfer 0.1.12

1 of the 1 container images this version deploys carry CVE-2022-4900.

Container imageDigestPackageFixed in
kfirfer/phppgadmin:7.13.0-22efb4a5d74a3
php7.4@7.4.3-4ubuntu2.15
7.4.3-4ubuntu2.22

Open the chart page →

10,248
nominatimnominatim-chart1.3.01 of 3See more

nominatim nominatim-chart 1.3.0

1 of the 3 container images this version deploys carry CVE-2022-4900.

Container imageDigestPackageFixed in
mediagis/nominatim:3.7c15e941485ef
php7.4@7.4.3-4ubuntu2.12
7.4.3-4ubuntu2.22

Open the chart page →

22,658
openldapopenldap0.1.11 of 2See more

openldap openldap 0.1.1

1 of the 2 container images this version deploys carry CVE-2022-4900.

Container imageDigestPackageFixed in
ldapaccountmanager/lam:8.0.1d46cf25d1dda
php7.4@7.4.30-1+deb11u1
7.4.33-1+deb11u6

Open the chart page →

5,293
icingawebsvtech-public-helm-charts1.0.01 of 2See more

icingaweb svtech-public-helm-charts 1.0.0

1 of the 2 container images this version deploys carry CVE-2022-4900.

Container imageDigestPackageFixed in
svtechnmaa/svtech_icingaweb2:v1.0.2a59d0b81dde2
php7.4@7.4.33-1+deb11u4
7.4.33-1+deb11u6

Open the chart page →

2,038

Container images carrying it

13 by charts deploying them

A fixed version is listed for 4 of the 4 affected packages.

Container imageDigestPackageFixed inUsed by
ldapaccountmanager/lam:8.0.1d46cf25d1dda
php7.4@7.4.30-1+deb11u1
7.4.33-1+deb11u6
2
library/adminer:4.8.1-standalone34d37131366c
php7.4@7.4.33-1+deb11u5
7.4.33-1+deb11u6
2
passbolt/passbolt:3.4.0-ce-non-root655547e17263
php7.4@7.4.25-1+deb11u1
7.4.33-1+deb11u6
2
yzhou442/equiz:latesta3f7ca69e28d
libphp@7.4.33-1
php@7.4.33-2
8.0.22
8.0.22
2
kfirfer/phppgadmin:7.13.0-22efb4a5d74a3
php7.4@7.4.3-4ubuntu2.15
7.4.3-4ubuntu2.22
1
mediagis/nominatim:3.7c15e941485ef
php7.4@7.4.3-4ubuntu2.12
7.4.3-4ubuntu2.22
1
mediagis/nominatim:4.2d0eae7b51374
php8.1@8.1.2-1ubuntu2.14
8.1.2-1ubuntu2.17
1
passbolt/passbolt:3.9.0-2-ce-non-rootec046e112d5c
php7.4@7.4.33-1+deb11u1
7.4.33-1+deb11u6
1
pihole/pihole:2023.05.0b83258064f54
php7.4@7.4.33-1+deb11u3
7.4.33-1+deb11u6
1
snipe/snipe-it:v6.0.1455fb7636a98c
php7.4@7.4.3-4ubuntu2.13
7.4.3-4ubuntu2.22
1
svtechnmaa/svtech_icingaweb2:v1.0.2a59d0b81dde2
php7.4@7.4.33-1+deb11u4
7.4.33-1+deb11u6
1
zabbix/zabbix-web-nginx-pgsql:ubuntu-5.4.601de79c31391
php7.4@7.4.3-4ubuntu2.6
7.4.3-4ubuntu2.22
1
zabbix/zabbix-web-nginx-pgsql:ubuntu-6.0.899e9a090b516
php8.1@8.1.2-1ubuntu2.3
8.1.2-1ubuntu2.17
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.