CVE-2023-0361

High

Advisory

Published 14 Feb 2023In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.4; base score, highest
EPSS: 0.014; 71st percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 1,216; of 17,787 indexed, latest versions
Container images: 1,192; deployed by those charts
Fix available: 3 of 3; affected packages

Red Hat Security Advisory: gnutls security and bug fix update

Carried by container images the latest versions of 1,216 of 17,787 indexed charts deploy, on 1,192 images.

Affected package	Affected versions	Fixed in	Images
gnutls28deb	3.4.10-4ubuntu1.3, 3.4.10-4ubuntu1.4, 3.4.10-4ubuntu1.5, 3.4.10-4ubuntu1.7+27 more	3.6.7-4+deb10u10, 3.6.13-2ubuntu1.8, 3.7.1-5+deb11u3, 3.7.3-4ubuntu1.2	1,025
gnutlsrpm	3.6.5-2.el8, 3.6.7-lp151.2.3.1, 3.6.8-8.el8, 3.6.8-10.el8_2+10 more	0:3.6.16-6.el8_7, 0:3.7.6-18.el9_1, 3.7.9-1.2	137
gnutlsapk	3.7.1-r0, 3.7.1-r1, 3.7.6-r0, 3.7.7-r0+1 more	3.7.1-r2, 3.7.7-r1, 3.7.8-r3	30

OSV records: ALPINE-CVE-2023-0361 RHSA-2023:1141 RHSA-2023:1569 RLSA-2023:1569 UBUNTU-CVE-2023-0361 DLA-3321-1 DSA-5349-1 openSUSE-SU-2024:12699-1
Also known as: RHSA-2023:3361, USN-5901-1

Charts affected

1,216 by stars

Chart

Latest

Affected images

Radar Score

webresourcecataloguswebresourcecatalogus

1.1.0

1 of 4 See more

webresourcecatalogus webresourcecatalogus 1.1.0

1 of the 4 container images this version deploys carry CVE-2023-0361.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/webresourcecatalogus-nginx :latest	6de60c83128d	gnutls28@3.7.1-5	3.7.1-5+deb11u3

Open the chart page →

7,552

emissary-ingresswenerme

8.12.2

1 of 2 See more

emissary-ingress wenerme 8.12.2

1 of the 2 container images this version deploys carry CVE-2023-0361.

Container image	Digest	Package	Fixed in
istio/kubectl :1.5.10	dbb7726d1bf0	gnutls28@3.5.18-1ubuntu1.4	no fix listed

Open the chart page →

10,857

longhornwenerme

1.2.3

1 of 2 See more

longhorn wenerme 1.2.3

1 of the 2 container images this version deploys carry CVE-2023-0361.

Container image	Digest	Package	Fixed in
longhornio/longhorn-manager :v1.2.3	dca34321452c	gnutls28@3.6.13-2ubuntu1.6	3.6.13-2ubuntu1.8

Open the chart page →

15,287

miniowenerme

8.0.10

1 of 1 See more

minio wenerme 8.0.10

1 of the 1 container images this version deploys carry CVE-2023-0361.

Container image	Digest	Package	Fixed in
minio/minio :RELEASE.2021-02-14T04-01-33Z	bd11edda91f3	gnutls@3.6.14-7.el8_3	0:3.6.16-6.el8_7

Open the chart page →

6,915

minio-standalonewenerme

1.0.2

1 of 1 See more

minio-standalone wenerme 1.0.2

1 of the 1 container images this version deploys carry CVE-2023-0361.

Container image	Digest	Package	Fixed in
minio/minio :RELEASE.2022-01-04T07-41-07Z	1484c87239ea	gnutls@3.6.16-4.el8	0:3.6.16-6.el8_7

Open the chart page →

6,138

openebswenerme

3.10.0

2 of 3 See more

openebs wenerme 3.10.0

2 of the 3 container images this version deploys carry CVE-2023-0361.

Container image	Digest	Package	Fixed in
openebs/node-disk-manager :2.1.0	f6c18b0f8c8a	gnutls28@3.7.3-4ubuntu1.1	3.7.3-4ubuntu1.2
openebs/node-disk-operator :2.1.0	6afe2123c457	gnutls28@3.7.3-4ubuntu1.1	3.7.3-4ubuntu1.2

Open the chart page →

10,568

vaultwardenwitcom-gmbh

0.2.0

1 of 2 See more

vaultwarden witcom-gmbh 0.2.0

1 of the 2 container images this version deploys carry CVE-2023-0361.

Container image	Digest	Package	Fixed in
vaultwarden/server :1.25.2	39f34c5159a2	gnutls28@3.7.1-5+deb11u1	3.7.1-5+deb11u3

Open the chart page →

1,585

wp-gats-helmwordpress-gatsby

0.0.1

1 of 3 See more

wp-gats-helm wordpress-gatsby 0.0.1

1 of the 3 container images this version deploys carry CVE-2023-0361.

Container image	Digest	Package	Fixed in
library/wordpress :6.0.0-php8.0-apache	277c6c25980f	gnutls28@3.7.1-5	3.7.1-5+deb11u3

Open the chart page →

2,021

workadventureworkadventure

1.1.0

4 of 9 See more

workadventure workadventure 1.1.0

4 of the 9 container images this version deploys carry CVE-2023-0361.

Container image	Digest	Package	Fixed in
thecodingmachine/workadventure-back :v1.17.7	64001369dad5	gnutls28@3.6.7-4+deb10u9	3.6.7-4+deb10u10
thecodingmachine/workadventure-map-storage :v1.17.7	5bdab56da2fa	gnutls28@3.6.7-4+deb10u9	3.6.7-4+deb10u10
thecodingmachine/workadventure-play :v1.17.7	d8f66979b9b4	gnutls28@3.6.7-4+deb10u9	3.6.7-4+deb10u10
thecodingmachine/workadventure-uploader :v1.17.7	3ccd467543b3	gnutls28@3.6.7-4+deb10u9	3.6.7-4+deb10u10

Open the chart page →

16,083

workshop-pipelinesworkshop-pipelines

0.1.6

1 of 2 See more

workshop-pipelines workshop-pipelines 0.1.6

1 of the 2 container images this version deploys carry CVE-2023-0361.

Container image	Digest	Package	Fixed in
quay.io/maximilianopizarro/workshop-pipelines :latest	e383ba3e0966	gnutls@3.6.16-4.el8	0:3.6.16-6.el8_7

Open the chart page →

11,592

myfirstchartww-helm-charts-repo

0.1.0

1 of 1 See more

myfirstchart ww-helm-charts-repo 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-0361.

Container image	Digest	Package	Fixed in
ghcr.io/stacksimplify/kubenginx :0.1.0	205961b09a80	gnutls28@3.6.7-4+deb10u3	3.6.7-4+deb10u10

Open the chart page →

1,138

keycloakxzaks

2.2.0

1 of 1 See more

keycloakx zaks 2.2.0

1 of the 1 container images this version deploys carry CVE-2023-0361.

Container image	Digest	Package	Fixed in
quay.io/keycloak/keycloak :20.0.3	b8f2a453a17a	gnutls@3.6.16-5.el8_6	0:3.6.16-6.el8_7

Open the chart page →

6,016

myfirstchartzikilab

0.2.0

1 of 1 See more

myfirstchart zikilab 0.2.0

1 of the 1 container images this version deploys carry CVE-2023-0361.

Container image	Digest	Package	Fixed in
ghcr.io/stacksimplify/kubenginxhelm :0.2.0	ae2268dcc930	gnutls28@3.6.7-4+deb10u3	3.6.7-4+deb10u10

Open the chart page →

1,138

alertmanager-matrix-forwarderzloi-space

1.0.1

1 of 2 See more

alertmanager-matrix-forwarder zloi-space 1.0.1

1 of the 2 container images this version deploys carry CVE-2023-0361.

Container image	Digest	Package	Fixed in
matrixdotorg/pantalaimon :v0.10.4	ba6a587fa508	gnutls28@3.6.7-4+deb10u7	3.6.7-4+deb10u10

Open the chart page →

3,118

clickhousezloi-space

1.2.0

2 of 3 See more

clickhouse zloi-space 1.2.0

2 of the 3 container images this version deploys carry CVE-2023-0361.

Container image	Digest	Package	Fixed in
yandex/clickhouse-client :21.3	863f94a0f607	gnutls28@3.5.18-1ubuntu1.5	no fix listed
yandex/clickhouse-server :21.3.20	4eccfffb01d7	gnutls28@3.6.13-2ubuntu1.6	3.6.13-2ubuntu1.8

Open the chart page →

9,250

grafana-matrix-forwarderzloi-space

1.0.0

1 of 2 See more

grafana-matrix-forwarder zloi-space 1.0.0

1 of the 2 container images this version deploys carry CVE-2023-0361.

Container image	Digest	Package	Fixed in
matrixdotorg/pantalaimon :v0.10.4	ba6a587fa508	gnutls28@3.6.7-4+deb10u7	3.6.7-4+deb10u10

Open the chart page →

1,636

Container images carrying it

1,192 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container image	Digest	Package	Fixed in	Used by
library/neo4j :4.4.4	3c9fea42bd5a	gnutls28@3.7.1-5+deb11u1	3.7.1-5+deb11u3	1
library/nextcloud :17.0.0-apache	96104cb965fc	gnutls28@3.6.7-4	3.6.7-4+deb10u10	1
library/nginx :1.23.0	3536d368b898	gnutls28@3.7.1-5	3.7.1-5+deb11u3	1
library/nginx :1.19.6	8e1095642250	gnutls28@3.6.7-4+deb10u6	3.6.7-4+deb10u10	1
library/nginx :1.23.2	ab589a3c466e	gnutls28@3.7.1-5+deb11u2	3.7.1-5+deb11u3	1
library/nginx :1.17.6	b2d89d0a2103	gnutls28@3.6.7-4	3.6.7-4+deb10u10	1
library/nginx :1.16.1	d20aa6d1cae5	gnutls28@3.6.7-4+deb10u3	3.6.7-4+deb10u10	1
library/nginx :1.18.0	e90ac5331fe0	gnutls28@3.6.7-4+deb10u6	3.6.7-4+deb10u10	1
library/php :7.3-apache	b9872cd287ef	gnutls28@3.7.1-5	3.7.1-5+deb11u3	1
library/postgres :13.7	03652c675ae1	gnutls28@3.7.1-5+deb11u1	3.7.1-5+deb11u3	1
library/postgres :14.3	2d1e636f0778	gnutls28@3.7.1-5	3.7.1-5+deb11u3	1
library/postgres :12.2	d96835c90329	gnutls28@3.6.7-4+deb10u3	3.6.7-4+deb10u10	1
library/postgres :14.0	db927beee892	gnutls28@3.7.1-5	3.7.1-5+deb11u3	1
library/postgres :14.6	f565573d74ae	gnutls28@3.7.1-5+deb11u2	3.7.1-5+deb11u3	1
library/rabbitmq :3.11.5-management	1b0f675d2f24	gnutls28@3.6.13-2ubuntu1.7	3.6.13-2ubuntu1.8	1
library/rabbitmq :3.7-management	b6dd45cc35b3	gnutls28@3.5.18-1ubuntu1.4	no fix listed	1
library/redis :7.0.4	091a7b5de688	gnutls28@3.7.1-5+deb11u2	3.7.1-5+deb11u3	1
library/redis :6.0.6	09c33840ec47	gnutls28@3.6.7-4+deb10u5	3.6.7-4+deb10u10	1
library/redis :4.0	2e03fdd159f4	gnutls28@3.6.7-4+deb10u3	3.6.7-4+deb10u10	1
library/redis :6.0.9	48c1431bed43	gnutls28@3.6.7-4+deb10u5	3.6.7-4+deb10u10	1
library/redis :6.2.4	6bc98f513258	gnutls28@3.6.7-4+deb10u7	3.6.7-4+deb10u10	1
library/redis :6.0.10	f29bcfb89167	gnutls28@3.6.7-4+deb10u6	3.6.7-4+deb10u10	1
library/solr :8.7.0	d124efd81fbb	gnutls28@3.7.1-5	3.7.1-5+deb11u3	1
library/sonarqube :8.2-community	a246bc64207e	gnutls28@3.6.7-4+deb10u3	3.6.7-4+deb10u10	1
library/storm :2.4.0	bd5d420506d6	gnutls28@3.7.1-5+deb11u1	3.7.1-5+deb11u3	1
library/telegraf :1.20.4	28e98eece020	gnutls28@3.7.1-5	3.7.1-5+deb11u3	1
library/ubuntu :bionic	152dc042452c	gnutls28@3.5.18-1ubuntu1.6	no fix listed	1
library/varnish :6.6.0	5b41623edd33	gnutls28@3.6.7-4+deb10u6	3.6.7-4+deb10u10	1
library/wordpress :6.0.0-php8.0-apache	277c6c25980f	gnutls28@3.7.1-5	3.7.1-5+deb11u3	1
library/zookeeper :3.4	3882d9493d38	gnutls28@3.6.7-4+deb10u6	3.6.7-4+deb10u10	1
library/zookeeper :3.6.2	4c8a6d3b2338	gnutls28@3.6.7-4+deb10u6	3.6.7-4+deb10u10	1
librenms/librenms :22.4.1	4f1f3d667cc7	gnutls@3.7.1-r0	3.7.1-r2	1
lightbend/curl :7.47.0	b0c9894ac8dd	gnutls28@3.4.10-4ubuntu1.4	no fix listed	1
linuxserver/calibre :version-v5.21.0	a847b5b2d860	gnutls28@3.5.18-1ubuntu1.4	no fix listed	1
linuxserver/calibre-web :version-0.6.12	938810eca3d3	gnutls28@3.6.13-2ubuntu1.6	3.6.13-2ubuntu1.8	1
linuxserver/cloud9 :latest	45c5fe102ff3	gnutls28@3.5.18-1ubuntu1.5	no fix listed	1
linuxserver/codimd :latest	b801bbcf6386	gnutls28@3.5.18-1ubuntu1.4	no fix listed	1
linuxserver/deluge :18.04.1	0ac871624394	gnutls28@3.5.18-1ubuntu1.5	no fix listed	1
linuxserver/deluge :version-2.0.3-2201906121747ubuntu18.04.1	2ce561a95e7b	gnutls28@3.5.18-1ubuntu1.5	no fix listed	1
linuxserver/jellyfin :10.7.7	2427dde159a2	gnutls28@3.6.13-2ubuntu1.6	3.6.13-2ubuntu1.8	1
linuxserver/lazylibrarian :version-1152df82	f93d2560e233	gnutls28@3.5.18-1ubuntu1.4	no fix listed	1
linuxserver/ombi :3.0.4572-ls45	2fbb21fb4903	gnutls28@3.5.18-1ubuntu1	no fix listed	1
linuxserver/plex :1.25.2	4a13ced2326c	gnutls28@3.6.13-2ubuntu1.6	3.6.13-2ubuntu1.8	1
litmuschaos/mongo :4.2.8	99961210d467	gnutls28@3.5.18-1ubuntu1.4	no fix listed	1
lncm/specter-desktop :v0.10.4	bca14d04397d	gnutls28@3.6.7-4+deb10u5	3.6.7-4+deb10u10	1
loftsh/jspolicy :0.2.2	25deb9bd2683	gnutls28@3.6.7-4+deb10u9	3.6.7-4+deb10u10	1
loicsharma/baget :0b46f0ec87216e1dc6839277712ee07c1c2b611a	a880c78ae80b	gnutls28@3.6.7-4+deb10u5	3.6.7-4+deb10u10	1
longhornio/longhorn-manager :v1.2.3	dca34321452c	gnutls28@3.6.13-2ubuntu1.6	3.6.13-2ubuntu1.8	1
longhornio/longhorn-manager :v1.1.1	ede61fe2a472	gnutls28@3.5.18-1ubuntu1.4	no fix listed	1
louislam/uptime-kuma :1.17.1	a4eab252e5a2	gnutls28@3.6.7-4+deb10u7	3.6.7-4+deb10u10	1