StackRadar

CVE-2022-4904

High

Advisory

Published 15 Feb 2023In the index since 6 Sept 2026
Severity
High
worst across findings
CVSS
8.6
base score, highest
EPSS
0.012
67th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
8
of 17,781 indexed, latest versions
Container images
9
deployed by those charts
Fix available
1 of 1
affected package

c-ares - security update

Carried by container images the latest versions of 8 of 17,781 indexed charts deploy, on 9 images.

Affected packageAffected versionsFixed inImages
c-aresdeb1.14.0-1, 1.15.0-1ubuntu0.1, 1.18.1-1build11.14.0-1+deb10u2, 1.14.0-1ubuntu0.2, 1.15.0-1ubuntu0.2, 1.18.1-1ubuntu0.22.04.19
OSV records
UBUNTU-CVE-2022-4904DLA-3323-1
Also known as
USN-5907-1

Charts affected

8 by stars
ChartLatestAffected imagesRadar Score
pgbouncerkubernetes-helm-chart-pgbouncer1.0.151 of 1See more

pgbouncer kubernetes-helm-chart-pgbouncer 1.0.15

1 of the 1 container images this version deploys carry CVE-2022-4904.

Container imageDigestPackageFixed in
cradlepoint/pgbouncer:1.0.18f5720b0cd03
c-ares@1.14.0-1
1.14.0-1ubuntu0.2

Open the chart page →

5,802
smarter-demosmarterOfficialVerified publisher0.1.52 of 7See more

smarter-demo smarter 0.1.5

2 of the 7 container images this version deploys carry CVE-2022-4904.

Container imageDigestPackageFixed in
ghcr.io/smarter-project/audio-client:v3.1.23c8375dc5487
c-ares@1.15.0-1ubuntu0.1
1.15.0-1ubuntu0.2
ghcr.io/smarter-project/image-detector:v2.5.31dcca70c6446
c-ares@1.15.0-1ubuntu0.1
1.15.0-1ubuntu0.2

Open the chart page →

45,832
codecovdoubanVerified publisher0.2.41 of 8See more

codecov douban 0.2.4

1 of the 8 container images this version deploys carry CVE-2022-4904.

Container imageDigestPackageFixed in
timescale/timescaledb-ha:pg14.6-ts2.9.1-p1cdb9ae118899
c-ares@1.18.1-1build1
1.18.1-1ubuntu0.22.04.1

Open the chart page →

24,917
drogue-cloud-examplesdrogue-iotVerified publisher0.7.111 of 6See more

drogue-cloud-examples drogue-iot 0.7.11

1 of the 6 container images this version deploys carry CVE-2022-4904.

Container imageDigestPackageFixed in
timescale/timescaledb-ha:pg14-ts2.6-latested719c0cd19d
c-ares@1.18.1-1build1
1.18.1-1ubuntu0.22.04.1

Open the chart page →

30,699
backstageirembo-backstage-helmVerified publisher1.0.51 of 3See more

backstage irembo-backstage-helm 1.0.5

1 of the 3 container images this version deploys carry CVE-2022-4904.

Container imageDigestPackageFixed in
roadiehq/community-backstage-image:latestef355bf5b639
c-ares@1.14.0-1
1.14.0-1+deb10u2

Open the chart page →

7,232
nublado2lsst-sqre0.8.51 of 2See more

nublado2 lsst-sqre 0.8.5

1 of the 2 container images this version deploys carry CVE-2022-4904.

Container imageDigestPackageFixed in
lsstsqre/nublado2:2.0.1b75bf8aaafa4
c-ares@1.15.0-1ubuntu0.1
1.15.0-1ubuntu0.2

Open the chart page →

17,779
openwhiskopenwhisk1.0.01 of 10See more

openwhisk openwhisk 1.0.0

1 of the 10 container images this version deploys carry CVE-2022-4904.

Container imageDigestPackageFixed in
openwhisk/ow-utils:1.0.0c80dba0de3aa
c-ares@1.14.0-1
1.14.0-1ubuntu0.2

Open the chart page →

36,215
testing-multitoolsomeblackmagic0.1.21 of 1See more

testing-multitool someblackmagic 0.1.2

1 of the 1 container images this version deploys carry CVE-2022-4904.

Container imageDigestPackageFixed in
someblackmagic/k8s-testing-multitool:v0.1.06eca64b6b440
c-ares@1.15.0-1ubuntu0.1
1.15.0-1ubuntu0.2

Open the chart page →

30,687

Container images carrying it

9 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
cradlepoint/pgbouncer:1.0.18f5720b0cd03
c-ares@1.14.0-1
1.14.0-1ubuntu0.2
1
lsstsqre/nublado2:2.0.1b75bf8aaafa4
c-ares@1.15.0-1ubuntu0.1
1.15.0-1ubuntu0.2
1
openwhisk/ow-utils:1.0.0c80dba0de3aa
c-ares@1.14.0-1
1.14.0-1ubuntu0.2
1
roadiehq/community-backstage-image:latestef355bf5b639
c-ares@1.14.0-1
1.14.0-1+deb10u2
1
someblackmagic/k8s-testing-multitool:v0.1.06eca64b6b440
c-ares@1.15.0-1ubuntu0.1
1.15.0-1ubuntu0.2
1
timescale/timescaledb-ha:pg14.6-ts2.9.1-p1cdb9ae118899
c-ares@1.18.1-1build1
1.18.1-1ubuntu0.22.04.1
1
timescale/timescaledb-ha:pg14-ts2.6-latested719c0cd19d
c-ares@1.18.1-1build1
1.18.1-1ubuntu0.22.04.1
1
ghcr.io/smarter-project/audio-client:v3.1.23c8375dc5487
c-ares@1.15.0-1ubuntu0.1
1.15.0-1ubuntu0.2
1
ghcr.io/smarter-project/image-detector:v2.5.31dcca70c6446
c-ares@1.15.0-1ubuntu0.1
1.15.0-1ubuntu0.2
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.