CVE-2023-0361

High

Advisory

Published 14 Feb 2023In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.4; base score, highest
EPSS: 0.014; 71st percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 1,216; of 17,787 indexed, latest versions
Container images: 1,192; deployed by those charts
Fix available: 3 of 3; affected packages

Red Hat Security Advisory: gnutls security and bug fix update

Carried by container images the latest versions of 1,216 of 17,787 indexed charts deploy, on 1,192 images.

Affected package	Affected versions	Fixed in	Images
gnutls28deb	3.4.10-4ubuntu1.3, 3.4.10-4ubuntu1.4, 3.4.10-4ubuntu1.5, 3.4.10-4ubuntu1.7+27 more	3.6.7-4+deb10u10, 3.6.13-2ubuntu1.8, 3.7.1-5+deb11u3, 3.7.3-4ubuntu1.2	1,025
gnutlsrpm	3.6.5-2.el8, 3.6.7-lp151.2.3.1, 3.6.8-8.el8, 3.6.8-10.el8_2+10 more	0:3.6.16-6.el8_7, 0:3.7.6-18.el9_1, 3.7.9-1.2	137
gnutlsapk	3.7.1-r0, 3.7.1-r1, 3.7.6-r0, 3.7.7-r0+1 more	3.7.1-r2, 3.7.7-r1, 3.7.8-r3	30

OSV records: ALPINE-CVE-2023-0361 RHSA-2023:1141 RHSA-2023:1569 RLSA-2023:1569 UBUNTU-CVE-2023-0361 DLA-3321-1 DSA-5349-1 openSUSE-SU-2024:12699-1
Also known as: RHSA-2023:3361, USN-5901-1

Charts affected

1,216 by stars

Chart

Latest

Affected images

Radar Score

webresourcecataloguswebresourcecatalogus

1.1.0

1 of 4 See more

webresourcecatalogus webresourcecatalogus 1.1.0

1 of the 4 container images this version deploys carry CVE-2023-0361.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/webresourcecatalogus-nginx :latest	6de60c83128d	gnutls28@3.7.1-5	3.7.1-5+deb11u3

Open the chart page →

7,552

emissary-ingresswenerme

8.12.2

1 of 2 See more

emissary-ingress wenerme 8.12.2

1 of the 2 container images this version deploys carry CVE-2023-0361.

Container image	Digest	Package	Fixed in
istio/kubectl :1.5.10	dbb7726d1bf0	gnutls28@3.5.18-1ubuntu1.4	no fix listed

Open the chart page →

10,857

longhornwenerme

1.2.3

1 of 2 See more

longhorn wenerme 1.2.3

1 of the 2 container images this version deploys carry CVE-2023-0361.

Container image	Digest	Package	Fixed in
longhornio/longhorn-manager :v1.2.3	dca34321452c	gnutls28@3.6.13-2ubuntu1.6	3.6.13-2ubuntu1.8

Open the chart page →

15,287

miniowenerme

8.0.10

1 of 1 See more

minio wenerme 8.0.10

1 of the 1 container images this version deploys carry CVE-2023-0361.

Container image	Digest	Package	Fixed in
minio/minio :RELEASE.2021-02-14T04-01-33Z	bd11edda91f3	gnutls@3.6.14-7.el8_3	0:3.6.16-6.el8_7

Open the chart page →

6,915

minio-standalonewenerme

1.0.2

1 of 1 See more

minio-standalone wenerme 1.0.2

1 of the 1 container images this version deploys carry CVE-2023-0361.

Container image	Digest	Package	Fixed in
minio/minio :RELEASE.2022-01-04T07-41-07Z	1484c87239ea	gnutls@3.6.16-4.el8	0:3.6.16-6.el8_7

Open the chart page →

6,138

openebswenerme

3.10.0

2 of 3 See more

openebs wenerme 3.10.0

2 of the 3 container images this version deploys carry CVE-2023-0361.

Container image	Digest	Package	Fixed in
openebs/node-disk-manager :2.1.0	f6c18b0f8c8a	gnutls28@3.7.3-4ubuntu1.1	3.7.3-4ubuntu1.2
openebs/node-disk-operator :2.1.0	6afe2123c457	gnutls28@3.7.3-4ubuntu1.1	3.7.3-4ubuntu1.2

Open the chart page →

10,568

vaultwardenwitcom-gmbh

0.2.0

1 of 2 See more

vaultwarden witcom-gmbh 0.2.0

1 of the 2 container images this version deploys carry CVE-2023-0361.

Container image	Digest	Package	Fixed in
vaultwarden/server :1.25.2	39f34c5159a2	gnutls28@3.7.1-5+deb11u1	3.7.1-5+deb11u3

Open the chart page →

1,585

wp-gats-helmwordpress-gatsby

0.0.1

1 of 3 See more

wp-gats-helm wordpress-gatsby 0.0.1

1 of the 3 container images this version deploys carry CVE-2023-0361.

Container image	Digest	Package	Fixed in
library/wordpress :6.0.0-php8.0-apache	277c6c25980f	gnutls28@3.7.1-5	3.7.1-5+deb11u3

Open the chart page →

2,021

workadventureworkadventure

1.1.0

4 of 9 See more

workadventure workadventure 1.1.0

4 of the 9 container images this version deploys carry CVE-2023-0361.

Container image	Digest	Package	Fixed in
thecodingmachine/workadventure-back :v1.17.7	64001369dad5	gnutls28@3.6.7-4+deb10u9	3.6.7-4+deb10u10
thecodingmachine/workadventure-map-storage :v1.17.7	5bdab56da2fa	gnutls28@3.6.7-4+deb10u9	3.6.7-4+deb10u10
thecodingmachine/workadventure-play :v1.17.7	d8f66979b9b4	gnutls28@3.6.7-4+deb10u9	3.6.7-4+deb10u10
thecodingmachine/workadventure-uploader :v1.17.7	3ccd467543b3	gnutls28@3.6.7-4+deb10u9	3.6.7-4+deb10u10

Open the chart page →

16,083

workshop-pipelinesworkshop-pipelines

0.1.6

1 of 2 See more

workshop-pipelines workshop-pipelines 0.1.6

1 of the 2 container images this version deploys carry CVE-2023-0361.

Container image	Digest	Package	Fixed in
quay.io/maximilianopizarro/workshop-pipelines :latest	e383ba3e0966	gnutls@3.6.16-4.el8	0:3.6.16-6.el8_7

Open the chart page →

11,592

myfirstchartww-helm-charts-repo

0.1.0

1 of 1 See more

myfirstchart ww-helm-charts-repo 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-0361.

Container image	Digest	Package	Fixed in
ghcr.io/stacksimplify/kubenginx :0.1.0	205961b09a80	gnutls28@3.6.7-4+deb10u3	3.6.7-4+deb10u10

Open the chart page →

1,138

keycloakxzaks

2.2.0

1 of 1 See more

keycloakx zaks 2.2.0

1 of the 1 container images this version deploys carry CVE-2023-0361.

Container image	Digest	Package	Fixed in
quay.io/keycloak/keycloak :20.0.3	b8f2a453a17a	gnutls@3.6.16-5.el8_6	0:3.6.16-6.el8_7

Open the chart page →

6,016

myfirstchartzikilab

0.2.0

1 of 1 See more

myfirstchart zikilab 0.2.0

1 of the 1 container images this version deploys carry CVE-2023-0361.

Container image	Digest	Package	Fixed in
ghcr.io/stacksimplify/kubenginxhelm :0.2.0	ae2268dcc930	gnutls28@3.6.7-4+deb10u3	3.6.7-4+deb10u10

Open the chart page →

1,138

alertmanager-matrix-forwarderzloi-space

1.0.1

1 of 2 See more

alertmanager-matrix-forwarder zloi-space 1.0.1

1 of the 2 container images this version deploys carry CVE-2023-0361.

Container image	Digest	Package	Fixed in
matrixdotorg/pantalaimon :v0.10.4	ba6a587fa508	gnutls28@3.6.7-4+deb10u7	3.6.7-4+deb10u10

Open the chart page →

3,118

clickhousezloi-space

1.2.0

2 of 3 See more

clickhouse zloi-space 1.2.0

2 of the 3 container images this version deploys carry CVE-2023-0361.

Container image	Digest	Package	Fixed in
yandex/clickhouse-client :21.3	863f94a0f607	gnutls28@3.5.18-1ubuntu1.5	no fix listed
yandex/clickhouse-server :21.3.20	4eccfffb01d7	gnutls28@3.6.13-2ubuntu1.6	3.6.13-2ubuntu1.8

Open the chart page →

9,250

grafana-matrix-forwarderzloi-space

1.0.0

1 of 2 See more

grafana-matrix-forwarder zloi-space 1.0.0

1 of the 2 container images this version deploys carry CVE-2023-0361.

Container image	Digest	Package	Fixed in
matrixdotorg/pantalaimon :v0.10.4	ba6a587fa508	gnutls28@3.6.7-4+deb10u7	3.6.7-4+deb10u10

Open the chart page →

1,636

Container images carrying it

1,192 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container image	Digest	Package	Fixed in	Used by
gotson/komga :0.99.4	9b15ea6bfc30	gnutls28@3.5.18-1ubuntu1.4	no fix listed	1
gradiant/hdfs :3.2.2	e3bf364fe713	gnutls28@3.7.1-5	3.7.1-5+deb11u3	1
grafana/agent :v0.20.0	825c09373d27	gnutls28@3.6.7-4+deb10u7	3.6.7-4+deb10u10	1
grafana/promtail :2.6.1	072527b12cdf	gnutls28@3.7.1-5+deb11u1	3.7.1-5+deb11u3	1
grafana/promtail :2.7.0	c16c710f7333	gnutls28@3.7.1-5+deb11u2	3.7.1-5+deb11u3	1
gresearchdev/siembol-config-editor-rest :latest	91863a50afb7	gnutls28@3.7.1-5+deb11u1	3.7.1-5+deb11u3	1
gresearchdev/siembol-storm-topology-manager :latest	8dad36a05ebf	gnutls28@3.7.1-5+deb11u1	3.7.1-5+deb11u3	1
gristlabs/grist :0.7.9	6e71b1914a7e	gnutls28@3.6.7-4+deb10u7	3.6.7-4+deb10u10	1
guacamole/guacamole :1.3.0	739cb6820ae8	gnutls28@3.6.7-4+deb10u5	3.6.7-4+deb10u10	1
guacamole/guacd :1.1.0	2288530a4d1c	gnutls28@3.6.7-4	3.6.7-4+deb10u10	1
guacamole/guacd :1.3.0	49d43948140f	gnutls28@3.6.7-4+deb10u5	3.6.7-4+deb10u10	1
gustavostingelin/floresta :0.8.0	82dcb2fbef58	gnutls28@3.7.1-5+deb11u2	3.7.1-5+deb11u3	1
ha33ona/python :test	6affdfc644d0	gnutls28@3.7.1-5	3.7.1-5+deb11u3	1
halkeye/matrix-ircd :latest	1ddae9d0f1c7	gnutls28@3.6.7-4+deb10u2	3.6.7-4+deb10u10	1
halkeye/self-service-password :latest	3c734dde4052	gnutls28@3.6.7-4+deb10u5	3.6.7-4+deb10u10	1
haugene/transmission-openvpn :4.0	059216cfae4b	gnutls28@3.6.13-2ubuntu1.6	3.6.13-2ubuntu1.8	1
haveagitgat/tdarr :2.00.18	1256348872ce	gnutls28@3.6.13-2ubuntu1.6	3.6.13-2ubuntu1.8	1
haveagitgat/tdarr_node :2.00.10	1e3f9328327d	gnutls28@3.6.13-2ubuntu1.3	3.6.13-2ubuntu1.8	1
hazelcast/hazelcast-jet :4.5.3	a825ecbe9fda	gnutls28@3.7.1-5	3.7.1-5+deb11u3	1
hiboxsystems/marge-bot :0.11.0	7235809b43b3	gnutls28@3.7.1-5+deb11u2	3.7.1-5+deb11u3	1
hiboxsystems/marge-bot :0.12.1	a96c10b61a59	gnutls28@3.7.1-5+deb11u2	3.7.1-5+deb11u3	1
hivemq/hivemq4 :dns-4.5.14	4d194450d48e	gnutls28@3.7.1-5	3.7.1-5+deb11u3	1
hjacobs/kube-downscaler :23.2.0	5d328c003efe	gnutls28@3.7.1-5+deb11u2	3.7.1-5+deb11u3	1
hjacobs/kube-resource-report :21.2.1	45f93491c434	gnutls28@3.6.7-4+deb10u5	3.6.7-4+deb10u10	1
hjacobs/kube-resource-report :22.11.0	c173cd02f5af	gnutls28@3.7.1-5+deb11u2	3.7.1-5+deb11u3	1
hjacobs/kube-web-view :20.10.0	b44a9cf81a2f	gnutls28@3.6.7-4+deb10u5	3.6.7-4+deb10u10	1
hkotel/mealie :api-v1.0.0beta-2	a7e6b6abe087	gnutls28@3.7.1-5	3.7.1-5+deb11u3	1
hon95/prometheus-nut-exporter :1.1.1	f4b2e5deb6a7	gnutls28@3.6.7-4+deb10u6	3.6.7-4+deb10u10	1
honoki/bbrf-server :latest	07c4ea597019	gnutls28@3.6.7-4+deb10u7	3.6.7-4+deb10u10	1
hotavneesh/eclipse-jdtls :latest	a4579b163414	gnutls28@3.7.1-5	3.7.1-5+deb11u3	1
housewrecker/gaps :latest	f417dd0a7547	gnutls28@3.6.13-2ubuntu1.6	3.6.13-2ubuntu1.8	1
huertaslopez/i.huertas.2021-v.martinp.2021-planner :2.0.0	e2c18bd65472	gnutls28@3.7.1-5	3.7.1-5+deb11u3	1
huginn/huginn-single-process :4d17829cf6b15b004ad3f4be196303dca4944810	c794eddc7b47	gnutls28@3.5.18-1ubuntu1.4	no fix listed	1
hugohg34/planner :0.0.2	171f61e8d7e2	gnutls28@3.7.1-5	3.7.1-5+deb11u3	1
hugohg34/server :0.0.2	503e5d8960ff	gnutls28@3.7.1-5	3.7.1-5+deb11u3	1
hugohg34/toposervice :0.0.2	812a03b3f274	gnutls28@3.6.13-2ubuntu1.6	3.6.13-2ubuntu1.8	1
hyperledger/fabric-couchdb :0.4.10	c65891b6c237	gnutls28@3.4.10-4ubuntu1.4	no fix listed	1
hyperledgerk8s/minio-mc :RELEASE.2023-01-28T20-29-38Z	729b3d128487	gnutls@3.6.16-5.el8_6	0:3.6.16-6.el8_7	1
hyperledgerk8s/minio-minio :RELEASE.2023-02-10T18-48-39Z	ed0b0c56f1ea	gnutls@3.6.16-5.el8_6	0:3.6.16-6.el8_7	1
iamdorsah/bastillion :v0.1	db83a0254d81	gnutls28@3.7.1-5+deb11u2	3.7.1-5+deb11u3	1
ibmcom/ibmcloud-object-storage-driver :1.8.16	c796a4c693b4	gnutls@3.6.8-10.el8_2	0:3.6.16-6.el8_7	1
ibmcom/ibmcloud-object-storage-plugin :1.8.16	9c73804b37a3	gnutls@3.6.8-10.el8_2	0:3.6.16-6.el8_7	1
ibmcom/ibm-enterprise-mongodb-ppc64le :4.4	d28bf361327a	gnutls@3.6.14-7.el8_3	0:3.6.16-6.el8_7	1
ibmcom/ibm-workload-scheduler-agent-dynamic-dev :9.4.0.04	7e4dc1e27cdf	gnutls28@3.4.10-4ubuntu1.4	no fix listed	1
ibmcom/icp-swift-sample :latest	b5d8c6714dbc	gnutls28@3.4.10-4ubuntu1.4	no fix listed	1
ibmcom/microclimate-theia :latest	e17bdccc5030	gnutls28@3.4.10-4ubuntu1.4	no fix listed	1
ibmcom/opencontent-common-utils :1.1.2	cd5065df7304	gnutls@3.6.5-2.el8	0:3.6.16-6.el8_7	1
ibmcom/skydive :0.22.0	395e60cc6e3d	gnutls28@3.5.18-1ubuntu1	no fix listed	1
improwised/erpnext-worker :v13.4.1	97280b55cbd4	gnutls28@3.6.7-4+deb10u6	3.6.7-4+deb10u10	1
intel/dlstreamer-pipeline-server :2022.1.1-ubuntu20	aa8f5483a2ef	gnutls28@3.6.13-2ubuntu1.6	3.6.13-2ubuntu1.8	1