CVE-2023-0361

High

Advisory

Published 14 Feb 2023In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.4; base score, highest
EPSS: 0.014; 71st percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 1,216; of 17,787 indexed, latest versions
Container images: 1,192; deployed by those charts
Fix available: 3 of 3; affected packages

Red Hat Security Advisory: gnutls security and bug fix update

Carried by container images the latest versions of 1,216 of 17,787 indexed charts deploy, on 1,192 images.

Affected package	Affected versions	Fixed in	Images
gnutls28deb	3.4.10-4ubuntu1.3, 3.4.10-4ubuntu1.4, 3.4.10-4ubuntu1.5, 3.4.10-4ubuntu1.7+27 more	3.6.7-4+deb10u10, 3.6.13-2ubuntu1.8, 3.7.1-5+deb11u3, 3.7.3-4ubuntu1.2	1,025
gnutlsrpm	3.6.5-2.el8, 3.6.7-lp151.2.3.1, 3.6.8-8.el8, 3.6.8-10.el8_2+10 more	0:3.6.16-6.el8_7, 0:3.7.6-18.el9_1, 3.7.9-1.2	137
gnutlsapk	3.7.1-r0, 3.7.1-r1, 3.7.6-r0, 3.7.7-r0+1 more	3.7.1-r2, 3.7.7-r1, 3.7.8-r3	30

OSV records: ALPINE-CVE-2023-0361 RHSA-2023:1141 RHSA-2023:1569 RLSA-2023:1569 UBUNTU-CVE-2023-0361 DLA-3321-1 DSA-5349-1 openSUSE-SU-2024:12699-1
Also known as: RHSA-2023:3361, USN-5901-1

Charts affected

1,216 by stars

Chart

Latest

Affected images

Radar Score

webresourcecataloguswebresourcecatalogus

1.1.0

1 of 4 See more

webresourcecatalogus webresourcecatalogus 1.1.0

1 of the 4 container images this version deploys carry CVE-2023-0361.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/webresourcecatalogus-nginx :latest	6de60c83128d	gnutls28@3.7.1-5	3.7.1-5+deb11u3

Open the chart page →

7,552

emissary-ingresswenerme

8.12.2

1 of 2 See more

emissary-ingress wenerme 8.12.2

1 of the 2 container images this version deploys carry CVE-2023-0361.

Container image	Digest	Package	Fixed in
istio/kubectl :1.5.10	dbb7726d1bf0	gnutls28@3.5.18-1ubuntu1.4	no fix listed

Open the chart page →

10,857

longhornwenerme

1.2.3

1 of 2 See more

longhorn wenerme 1.2.3

1 of the 2 container images this version deploys carry CVE-2023-0361.

Container image	Digest	Package	Fixed in
longhornio/longhorn-manager :v1.2.3	dca34321452c	gnutls28@3.6.13-2ubuntu1.6	3.6.13-2ubuntu1.8

Open the chart page →

15,287

miniowenerme

8.0.10

1 of 1 See more

minio wenerme 8.0.10

1 of the 1 container images this version deploys carry CVE-2023-0361.

Container image	Digest	Package	Fixed in
minio/minio :RELEASE.2021-02-14T04-01-33Z	bd11edda91f3	gnutls@3.6.14-7.el8_3	0:3.6.16-6.el8_7

Open the chart page →

6,915

minio-standalonewenerme

1.0.2

1 of 1 See more

minio-standalone wenerme 1.0.2

1 of the 1 container images this version deploys carry CVE-2023-0361.

Container image	Digest	Package	Fixed in
minio/minio :RELEASE.2022-01-04T07-41-07Z	1484c87239ea	gnutls@3.6.16-4.el8	0:3.6.16-6.el8_7

Open the chart page →

6,138

openebswenerme

3.10.0

2 of 3 See more

openebs wenerme 3.10.0

2 of the 3 container images this version deploys carry CVE-2023-0361.

Container image	Digest	Package	Fixed in
openebs/node-disk-manager :2.1.0	f6c18b0f8c8a	gnutls28@3.7.3-4ubuntu1.1	3.7.3-4ubuntu1.2
openebs/node-disk-operator :2.1.0	6afe2123c457	gnutls28@3.7.3-4ubuntu1.1	3.7.3-4ubuntu1.2

Open the chart page →

10,568

vaultwardenwitcom-gmbh

0.2.0

1 of 2 See more

vaultwarden witcom-gmbh 0.2.0

1 of the 2 container images this version deploys carry CVE-2023-0361.

Container image	Digest	Package	Fixed in
vaultwarden/server :1.25.2	39f34c5159a2	gnutls28@3.7.1-5+deb11u1	3.7.1-5+deb11u3

Open the chart page →

1,585

wp-gats-helmwordpress-gatsby

0.0.1

1 of 3 See more

wp-gats-helm wordpress-gatsby 0.0.1

1 of the 3 container images this version deploys carry CVE-2023-0361.

Container image	Digest	Package	Fixed in
library/wordpress :6.0.0-php8.0-apache	277c6c25980f	gnutls28@3.7.1-5	3.7.1-5+deb11u3

Open the chart page →

2,021

workadventureworkadventure

1.1.0

4 of 9 See more

workadventure workadventure 1.1.0

4 of the 9 container images this version deploys carry CVE-2023-0361.

Container image	Digest	Package	Fixed in
thecodingmachine/workadventure-back :v1.17.7	64001369dad5	gnutls28@3.6.7-4+deb10u9	3.6.7-4+deb10u10
thecodingmachine/workadventure-map-storage :v1.17.7	5bdab56da2fa	gnutls28@3.6.7-4+deb10u9	3.6.7-4+deb10u10
thecodingmachine/workadventure-play :v1.17.7	d8f66979b9b4	gnutls28@3.6.7-4+deb10u9	3.6.7-4+deb10u10
thecodingmachine/workadventure-uploader :v1.17.7	3ccd467543b3	gnutls28@3.6.7-4+deb10u9	3.6.7-4+deb10u10

Open the chart page →

16,083

workshop-pipelinesworkshop-pipelines

0.1.6

1 of 2 See more

workshop-pipelines workshop-pipelines 0.1.6

1 of the 2 container images this version deploys carry CVE-2023-0361.

Container image	Digest	Package	Fixed in
quay.io/maximilianopizarro/workshop-pipelines :latest	e383ba3e0966	gnutls@3.6.16-4.el8	0:3.6.16-6.el8_7

Open the chart page →

11,592

myfirstchartww-helm-charts-repo

0.1.0

1 of 1 See more

myfirstchart ww-helm-charts-repo 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-0361.

Container image	Digest	Package	Fixed in
ghcr.io/stacksimplify/kubenginx :0.1.0	205961b09a80	gnutls28@3.6.7-4+deb10u3	3.6.7-4+deb10u10

Open the chart page →

1,138

keycloakxzaks

2.2.0

1 of 1 See more

keycloakx zaks 2.2.0

1 of the 1 container images this version deploys carry CVE-2023-0361.

Container image	Digest	Package	Fixed in
quay.io/keycloak/keycloak :20.0.3	b8f2a453a17a	gnutls@3.6.16-5.el8_6	0:3.6.16-6.el8_7

Open the chart page →

6,016

myfirstchartzikilab

0.2.0

1 of 1 See more

myfirstchart zikilab 0.2.0

1 of the 1 container images this version deploys carry CVE-2023-0361.

Container image	Digest	Package	Fixed in
ghcr.io/stacksimplify/kubenginxhelm :0.2.0	ae2268dcc930	gnutls28@3.6.7-4+deb10u3	3.6.7-4+deb10u10

Open the chart page →

1,138

alertmanager-matrix-forwarderzloi-space

1.0.1

1 of 2 See more

alertmanager-matrix-forwarder zloi-space 1.0.1

1 of the 2 container images this version deploys carry CVE-2023-0361.

Container image	Digest	Package	Fixed in
matrixdotorg/pantalaimon :v0.10.4	ba6a587fa508	gnutls28@3.6.7-4+deb10u7	3.6.7-4+deb10u10

Open the chart page →

3,118

clickhousezloi-space

1.2.0

2 of 3 See more

clickhouse zloi-space 1.2.0

2 of the 3 container images this version deploys carry CVE-2023-0361.

Container image	Digest	Package	Fixed in
yandex/clickhouse-client :21.3	863f94a0f607	gnutls28@3.5.18-1ubuntu1.5	no fix listed
yandex/clickhouse-server :21.3.20	4eccfffb01d7	gnutls28@3.6.13-2ubuntu1.6	3.6.13-2ubuntu1.8

Open the chart page →

9,250

grafana-matrix-forwarderzloi-space

1.0.0

1 of 2 See more

grafana-matrix-forwarder zloi-space 1.0.0

1 of the 2 container images this version deploys carry CVE-2023-0361.

Container image	Digest	Package	Fixed in
matrixdotorg/pantalaimon :v0.10.4	ba6a587fa508	gnutls28@3.6.7-4+deb10u7	3.6.7-4+deb10u10

Open the chart page →

1,636

Container images carrying it

1,192 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container image	Digest	Package	Fixed in	Used by
intel/multimodal-data-visualization-streaming :3.0	1a89327e499b	gnutls28@3.6.13-2ubuntu1.6	3.6.13-2ubuntu1.8	1
interlayhq/interbtc-hydra-processor :0.10.5	5b2c414307b9	gnutls28@3.7.1-5+deb11u2	3.7.1-5+deb11u3	1
iofog/router :2.0.1	7260cf861479	gnutls28@3.5.18-1ubuntu1.4	no fix listed	1
iomesh/node-disk-manager :1.8.0	002c4b92fd34	gnutls28@3.6.13-2ubuntu1.6	3.6.13-2ubuntu1.8	1
iomesh/node-disk-operator :1.8.0	f6c76380db34	gnutls28@3.6.13-2ubuntu1.6	3.6.13-2ubuntu1.8	1
iosifache/wazuh-manager-filebeat :latest	85df3f04b5da	gnutls28@3.6.13-2ubuntu1.6	3.6.13-2ubuntu1.8	1
ironmansoftware/universal :3.3.1-ubuntu-20.04	1943c73cce31	gnutls28@3.6.13-2ubuntu1.7	3.6.13-2ubuntu1.8	1
istio/examples-bookinfo-details-v1 :1.17.0	2b081e3c86dd	gnutls28@3.6.7-4+deb10u5	3.6.7-4+deb10u10	1
istio/examples-bookinfo-productpage-v1 :1.17.0	6668bcf42ef0	gnutls28@3.6.7-4+deb10u4	3.6.7-4+deb10u10	1
istio/examples-bookinfo-reviews-v1 :1.17.0	b8f16a765eea	gnutls28@3.6.13-2ubuntu1.6	3.6.13-2ubuntu1.8	1
istio/examples-bookinfo-reviews-v2 :1.17.0	72f25a55f078	gnutls28@3.6.13-2ubuntu1.6	3.6.13-2ubuntu1.8	1
istio/examples-bookinfo-reviews-v3 :1.17.0	8f92fc1b6592	gnutls28@3.6.13-2ubuntu1.6	3.6.13-2ubuntu1.8	1
istio/install-cni :1.10.3	2232f365aed6	gnutls28@3.5.18-1ubuntu1.4	no fix listed	1
istio/node-agent-k8s :1.2.9	268ab879ea51	gnutls28@3.4.10-4ubuntu1.5	no fix listed	1
istio/operator :1.10.3	655eefa11c84	gnutls28@3.5.18-1ubuntu1.4	no fix listed	1
istio/operator :1.12.0	6cfce8a071b9	gnutls28@3.6.13-2ubuntu1.6	3.6.13-2ubuntu1.8	1
istio/pilot :1.10.0	294ca55bd1cc	gnutls28@3.5.18-1ubuntu1.4	no fix listed	1
istio/pilot :1.16.0	ac0284d75ec9	gnutls28@3.7.3-4ubuntu1.1	3.7.3-4ubuntu1.2	1
istio/pilot :1.2.9	c09319753454	gnutls28@3.4.10-4ubuntu1.5	no fix listed	1
istio/pilot :1.17.1	ce9d87606701	gnutls28@3.7.3-4ubuntu1.1	3.7.3-4ubuntu1.2	1
istio/pilot :1.15.2	db08d6963975	gnutls28@3.7.3-4ubuntu1.1	3.7.3-4ubuntu1.2	1
istio/pilot :1.10.3	e7e110a421c2	gnutls28@3.5.18-1ubuntu1.4	no fix listed	1
istio/proxyv2 :1.2.9	0c78be035e98	gnutls28@3.4.10-4ubuntu1.5	no fix listed	1
istio/proxyv2 :1.9.6	87a9db561d2e	gnutls28@3.5.18-1ubuntu1.4	no fix listed	1
istio/proxyv2 :1.10.0	88c6c693e67a	gnutls28@3.5.18-1ubuntu1.4	no fix listed	1
istio/proxyv2 :1.14.1	df69c1a7af7c	gnutls28@3.6.13-2ubuntu1.6	3.6.13-2ubuntu1.8	1
j0113/haven-compliancy-dashboard :1.3	696cb8ca9f4e	gnutls28@3.7.1-5	3.7.1-5+deb11u3	1
jacobalberty/unifi :v7.1.66	4a3616625dda	gnutls28@3.5.18-1ubuntu1.5	no fix listed	1
jacobalberty/unifi :v7.4.162	b3edc809a3ff	gnutls28@3.5.18-1ubuntu1.6	no fix listed	1
jacobalberty/unifi :5.10.19	c409924e2463	gnutls28@3.4.10-4ubuntu1.4	no fix listed	1
jakowenko/double-take :1.6.0	b858bac9e32a	gnutls28@3.6.13-2ubuntu1.6	3.6.13-2ubuntu1.8	1
jakuboskera/guestbook :v0.3.0	4989afa06e74	gnutls28@3.6.7-4+deb10u7	3.6.7-4+deb10u10	1
jedi132000/nextapp :latest	dc2a81e92f23	gnutls28@3.6.13-2ubuntu1.7	3.6.13-2ubuntu1.8	1
jellyfin/jellyfin :10.8.1	ee24f4459a40	gnutls28@3.7.1-5	3.7.1-5+deb11u3	1
jertel/elastalert2 :2.2.3	4dcc0ef93efc	gnutls28@3.6.7-4+deb10u7	3.6.7-4+deb10u10	1
jmferrer/azure-devops-agent :latest	030f68ec6998	gnutls28@3.4.10-4ubuntu1.7	no fix listed	1
julb/http-url-playlist :1.0.2	782ef45279d5	gnutls28@3.6.7-4+deb10u6	3.6.7-4+deb10u10	1
jupyterhub/k8s-hub :0.11.1	b6b4a1a34bf0	gnutls28@3.6.13-2ubuntu1.3	3.6.13-2ubuntu1.8	1
jupyterhub/k8s-hub :1.2.0	e4770285aaf7	gnutls28@3.6.13-2ubuntu1.6	3.6.13-2ubuntu1.8	1
jupyterhub/k8s-singleuser-sample :0.11.1	e3e6f3051df8	gnutls28@3.6.13-2ubuntu1.3	3.6.13-2ubuntu1.8	1
just1not2/streama :1.10.4	8a2305192dec	gnutls28@3.7.1-5	3.7.1-5+deb11u3	1
k8scloudprovider/cinder-csi-plugin :latest	a30c7a2a594a	gnutls28@3.6.7-4+deb10u5	3.6.7-4+deb10u10	1
karatejb/demo-k8s :latest	f11ac24b23b9	gnutls28@3.6.7-4+deb10u6	3.6.7-4+deb10u10	1
kelvinsp/mlflow :1.26.1	cd33e6db2a59	gnutls28@3.6.7-4+deb10u7	3.6.7-4+deb10u10	1
kennethreitz/httpbin :latest	599fe5e50731	gnutls28@3.5.18-1ubuntu1	no fix listed	1
kfirfer/phppgadmin :7.13.0-2	2efb4a5d74a3	gnutls28@3.6.13-2ubuntu1.7	3.6.13-2ubuntu1.8	1
kfserving/models-web-app :v0.6.1	f322d6ffdfa3	gnutls28@3.6.7-4+deb10u7	3.6.7-4+deb10u10	1
kiwigrid/k8s-sidecar :0.1.20	af151f677a63	gnutls28@3.6.7-4	3.6.7-4+deb10u10	1
kobotoolbox/kobocat :2.022.24a	b15679454415	gnutls28@3.7.1-5+deb11u2	3.7.1-5+deb11u3	1
kobotoolbox/kpi :2.022.24d	bcacc01bccd4	gnutls28@3.7.1-5+deb11u2	3.7.1-5+deb11u3	1