CVE-2023-0361

High

Advisory

Published 14 Feb 2023In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.4; base score, highest
EPSS: 0.014; 71st percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 1,216; of 17,787 indexed, latest versions
Container images: 1,192; deployed by those charts
Fix available: 3 of 3; affected packages

Red Hat Security Advisory: gnutls security and bug fix update

Carried by container images the latest versions of 1,216 of 17,787 indexed charts deploy, on 1,192 images.

Affected package	Affected versions	Fixed in	Images
gnutls28deb	3.4.10-4ubuntu1.3, 3.4.10-4ubuntu1.4, 3.4.10-4ubuntu1.5, 3.4.10-4ubuntu1.7+27 more	3.6.7-4+deb10u10, 3.6.13-2ubuntu1.8, 3.7.1-5+deb11u3, 3.7.3-4ubuntu1.2	1,025
gnutlsrpm	3.6.5-2.el8, 3.6.7-lp151.2.3.1, 3.6.8-8.el8, 3.6.8-10.el8_2+10 more	0:3.6.16-6.el8_7, 0:3.7.6-18.el9_1, 3.7.9-1.2	137
gnutlsapk	3.7.1-r0, 3.7.1-r1, 3.7.6-r0, 3.7.7-r0+1 more	3.7.1-r2, 3.7.7-r1, 3.7.8-r3	30

OSV records: ALPINE-CVE-2023-0361 RHSA-2023:1141 RHSA-2023:1569 RLSA-2023:1569 UBUNTU-CVE-2023-0361 DLA-3321-1 DSA-5349-1 openSUSE-SU-2024:12699-1
Also known as: RHSA-2023:3361, USN-5901-1

Charts affected

1,216 by stars

Chart

Latest

Affected images

Radar Score

webresourcecataloguswebresourcecatalogus

1.1.0

1 of 4 See more

webresourcecatalogus webresourcecatalogus 1.1.0

1 of the 4 container images this version deploys carry CVE-2023-0361.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/webresourcecatalogus-nginx :latest	6de60c83128d	gnutls28@3.7.1-5	3.7.1-5+deb11u3

Open the chart page →

7,552

emissary-ingresswenerme

8.12.2

1 of 2 See more

emissary-ingress wenerme 8.12.2

1 of the 2 container images this version deploys carry CVE-2023-0361.

Container image	Digest	Package	Fixed in
istio/kubectl :1.5.10	dbb7726d1bf0	gnutls28@3.5.18-1ubuntu1.4	no fix listed

Open the chart page →

10,857

longhornwenerme

1.2.3

1 of 2 See more

longhorn wenerme 1.2.3

1 of the 2 container images this version deploys carry CVE-2023-0361.

Container image	Digest	Package	Fixed in
longhornio/longhorn-manager :v1.2.3	dca34321452c	gnutls28@3.6.13-2ubuntu1.6	3.6.13-2ubuntu1.8

Open the chart page →

15,287

miniowenerme

8.0.10

1 of 1 See more

minio wenerme 8.0.10

1 of the 1 container images this version deploys carry CVE-2023-0361.

Container image	Digest	Package	Fixed in
minio/minio :RELEASE.2021-02-14T04-01-33Z	bd11edda91f3	gnutls@3.6.14-7.el8_3	0:3.6.16-6.el8_7

Open the chart page →

6,915

minio-standalonewenerme

1.0.2

1 of 1 See more

minio-standalone wenerme 1.0.2

1 of the 1 container images this version deploys carry CVE-2023-0361.

Container image	Digest	Package	Fixed in
minio/minio :RELEASE.2022-01-04T07-41-07Z	1484c87239ea	gnutls@3.6.16-4.el8	0:3.6.16-6.el8_7

Open the chart page →

6,138

openebswenerme

3.10.0

2 of 3 See more

openebs wenerme 3.10.0

2 of the 3 container images this version deploys carry CVE-2023-0361.

Container image	Digest	Package	Fixed in
openebs/node-disk-manager :2.1.0	f6c18b0f8c8a	gnutls28@3.7.3-4ubuntu1.1	3.7.3-4ubuntu1.2
openebs/node-disk-operator :2.1.0	6afe2123c457	gnutls28@3.7.3-4ubuntu1.1	3.7.3-4ubuntu1.2

Open the chart page →

10,568

vaultwardenwitcom-gmbh

0.2.0

1 of 2 See more

vaultwarden witcom-gmbh 0.2.0

1 of the 2 container images this version deploys carry CVE-2023-0361.

Container image	Digest	Package	Fixed in
vaultwarden/server :1.25.2	39f34c5159a2	gnutls28@3.7.1-5+deb11u1	3.7.1-5+deb11u3

Open the chart page →

1,585

wp-gats-helmwordpress-gatsby

0.0.1

1 of 3 See more

wp-gats-helm wordpress-gatsby 0.0.1

1 of the 3 container images this version deploys carry CVE-2023-0361.

Container image	Digest	Package	Fixed in
library/wordpress :6.0.0-php8.0-apache	277c6c25980f	gnutls28@3.7.1-5	3.7.1-5+deb11u3

Open the chart page →

2,021

workadventureworkadventure

1.1.0

4 of 9 See more

workadventure workadventure 1.1.0

4 of the 9 container images this version deploys carry CVE-2023-0361.

Container image	Digest	Package	Fixed in
thecodingmachine/workadventure-back :v1.17.7	64001369dad5	gnutls28@3.6.7-4+deb10u9	3.6.7-4+deb10u10
thecodingmachine/workadventure-map-storage :v1.17.7	5bdab56da2fa	gnutls28@3.6.7-4+deb10u9	3.6.7-4+deb10u10
thecodingmachine/workadventure-play :v1.17.7	d8f66979b9b4	gnutls28@3.6.7-4+deb10u9	3.6.7-4+deb10u10
thecodingmachine/workadventure-uploader :v1.17.7	3ccd467543b3	gnutls28@3.6.7-4+deb10u9	3.6.7-4+deb10u10

Open the chart page →

16,083

workshop-pipelinesworkshop-pipelines

0.1.6

1 of 2 See more

workshop-pipelines workshop-pipelines 0.1.6

1 of the 2 container images this version deploys carry CVE-2023-0361.

Container image	Digest	Package	Fixed in
quay.io/maximilianopizarro/workshop-pipelines :latest	e383ba3e0966	gnutls@3.6.16-4.el8	0:3.6.16-6.el8_7

Open the chart page →

11,592

myfirstchartww-helm-charts-repo

0.1.0

1 of 1 See more

myfirstchart ww-helm-charts-repo 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-0361.

Container image	Digest	Package	Fixed in
ghcr.io/stacksimplify/kubenginx :0.1.0	205961b09a80	gnutls28@3.6.7-4+deb10u3	3.6.7-4+deb10u10

Open the chart page →

1,138

keycloakxzaks

2.2.0

1 of 1 See more

keycloakx zaks 2.2.0

1 of the 1 container images this version deploys carry CVE-2023-0361.

Container image	Digest	Package	Fixed in
quay.io/keycloak/keycloak :20.0.3	b8f2a453a17a	gnutls@3.6.16-5.el8_6	0:3.6.16-6.el8_7

Open the chart page →

6,016

myfirstchartzikilab

0.2.0

1 of 1 See more

myfirstchart zikilab 0.2.0

1 of the 1 container images this version deploys carry CVE-2023-0361.

Container image	Digest	Package	Fixed in
ghcr.io/stacksimplify/kubenginxhelm :0.2.0	ae2268dcc930	gnutls28@3.6.7-4+deb10u3	3.6.7-4+deb10u10

Open the chart page →

1,138

alertmanager-matrix-forwarderzloi-space

1.0.1

1 of 2 See more

alertmanager-matrix-forwarder zloi-space 1.0.1

1 of the 2 container images this version deploys carry CVE-2023-0361.

Container image	Digest	Package	Fixed in
matrixdotorg/pantalaimon :v0.10.4	ba6a587fa508	gnutls28@3.6.7-4+deb10u7	3.6.7-4+deb10u10

Open the chart page →

3,118

clickhousezloi-space

1.2.0

2 of 3 See more

clickhouse zloi-space 1.2.0

2 of the 3 container images this version deploys carry CVE-2023-0361.

Container image	Digest	Package	Fixed in
yandex/clickhouse-client :21.3	863f94a0f607	gnutls28@3.5.18-1ubuntu1.5	no fix listed
yandex/clickhouse-server :21.3.20	4eccfffb01d7	gnutls28@3.6.13-2ubuntu1.6	3.6.13-2ubuntu1.8

Open the chart page →

9,250

grafana-matrix-forwarderzloi-space

1.0.0

1 of 2 See more

grafana-matrix-forwarder zloi-space 1.0.0

1 of the 2 container images this version deploys carry CVE-2023-0361.

Container image	Digest	Package	Fixed in
matrixdotorg/pantalaimon :v0.10.4	ba6a587fa508	gnutls28@3.6.7-4+deb10u7	3.6.7-4+deb10u10

Open the chart page →

1,636

Container images carrying it

1,192 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container image	Digest	Package	Fixed in	Used by
dellcloud/pages :monitor	6ba7b22caacd	gnutls28@3.6.13-2ubuntu1.3	3.6.13-2ubuntu1.8	79
flyway/flyway :6.4.4	22d97ceb0c47	gnutls28@3.5.18-1ubuntu1.3	no fix listed	79
ghcr.io/stacksimplify/kubenginxhelm :0.2.0	ae2268dcc930	gnutls28@3.6.7-4+deb10u3	3.6.7-4+deb10u10	33
codeurjc/toposervice :v1.0 :v1.23	9fb4c11e6a49	gnutls28@3.5.18-1ubuntu1.6	no fix listed	13
library/mysql :8.0.28	fc77d54cacef	gnutls28@3.6.7-4+deb10u7	3.6.7-4+deb10u10	11
oomk8s/readiness-check :2.0.2	875814cc853d	gnutls28@3.4.10-4ubuntu1.4	no fix listed	11
codeurjc/weatherservice :v1.0	b9e2f7234349	gnutls@3.6.16-5.el8_6	0:3.6.16-6.el8_7	10
library/mongo :5.0.6-focal	8e70544b6c76	gnutls28@3.6.13-2ubuntu1.6	3.6.13-2ubuntu1.8	10
codeurjc/server :v1.0	310bea5b1ee7	gnutls@3.6.16-5.el8_6	0:3.6.16-6.el8_7	8
gradiant/hdfs :2.7.7	3b28784ba41f	gnutls28@3.6.7-4+deb10u3	3.6.7-4+deb10u10	7
osixia/openldap :1.5.0	18742e9c449c	gnutls28@3.6.7-4+deb10u6	3.6.7-4+deb10u10	7
wurstmeister/kafka :latest	2d4bbf9cc83d	gnutls28@3.7.1-5	3.7.1-5+deb11u3	7
library/nginx :1.21 :1.21.6	2bcabc23b454	gnutls28@3.7.1-5	3.7.1-5+deb11u3	6
library/zookeeper :3.5.5	b7a76ec06f68	gnutls28@3.6.7-4	3.6.7-4+deb10u10	6
oomk8s/readiness-check :2.0.0	7daa08b81954	gnutls28@3.4.10-4ubuntu1.4	no fix listed	6
quay.io/devtron/kubectl :latest	2ad610626658	gnutls@3.7.7-r0	3.7.7-r1	6
library/mysql :8.0.22	0fd2898dc1c9	gnutls28@3.6.7-4+deb10u5	3.6.7-4+deb10u10	5
library/nginx :1.19	df13abe416e3	gnutls28@3.6.7-4+deb10u6	3.6.7-4+deb10u10	5
library/redis :5 :5.0	fc5ecd863862	gnutls28@3.7.1-5+deb11u2	3.7.1-5+deb11u3	5
osixia/phpldapadmin :0.9.0	d112b82be133	gnutls28@3.6.7-4	3.6.7-4+deb10u10	5
solsson/kafka :latest	41e5d8f6f290	gnutls28@3.6.13-2ubuntu1.7	3.6.13-2ubuntu1.8	5
ghcr.io/stacksimplify/kubenginx :0.1.0 :1.0.0	205961b09a80	gnutls28@3.6.7-4+deb10u3	3.6.7-4+deb10u10	5
hyperledger/fabric-ca :1.4.9	28f50c6aa4f4	gnutls28@3.6.7-4+deb10u4	3.6.7-4+deb10u10	4
hyperledger/fabric-ca-tools :latest	4ce6f43ded2e	gnutls28@3.4.10-4ubuntu1.4	no fix listed	4
hyperledger/fabric-couchdb :0.4.15	f6c724592abf	gnutls28@3.4.10-4ubuntu1.4	no fix listed	4
kodekloud/examplevotingapp_result :v1	e510023fdf38	gnutls28@3.7.1-5+deb11u2	3.7.1-5+deb11u3	4
library/memcached :1.5.20	2f561d372672	gnutls28@3.6.7-4	3.6.7-4+deb10u10	4
library/mongo :4.2.12-bionic	628741415fc9	gnutls28@3.5.18-1ubuntu1.4	no fix listed	4
library/mongo :4.4.6	6efa05203990	gnutls28@3.5.18-1ubuntu1.4	no fix listed	4
mastercloudapps/server :v2.23	f3d24dfe2686	gnutls@3.6.16-5.el8_6	0:3.6.16-6.el8_7	4
mastercloudapps/weatherservice :v1.23	de859d29c116	gnutls@3.6.16-5.el8_6	0:3.6.16-6.el8_7	4
ncsa/checks :1.0.1	cc46a03e16ed	gnutls28@3.7.1-5+deb11u1	3.7.1-5+deb11u3	4
oscarsotosanchez/weatherservice :v1.0	911ec961d10b	gnutls28@3.5.18-1ubuntu1.4	no fix listed	4
argoproj/argocd :v1.8.1	830e86cacefd	gnutls28@3.6.7-4+deb10u5	3.6.7-4+deb10u10	3
bitnamilegacy/kubectl :1.19	804725facf91	gnutls28@3.6.7-4+deb10u7	3.6.7-4+deb10u10	3
ciscolabs/rtsp-client :latest	a7b60ec88285	gnutls28@3.6.13-2ubuntu1.7	3.6.13-2ubuntu1.8	3
ciscolabs/rtsp-server :latest	b59fc10bb821	gnutls28@3.6.13-2ubuntu1.7	3.6.13-2ubuntu1.8	3
cloudve/cloudlaunch-server :latest	4a3d7fae90bb	gnutls28@3.6.13-2ubuntu1.6	3.6.13-2ubuntu1.8	3
conduction/openwebconcept :4.8	ee2121b569ac	gnutls28@3.6.7-4+deb10u5	3.6.7-4+deb10u10	3
dgraph/dgraph :v21.12.0	3b55ea83fffe	gnutls28@3.6.13-2ubuntu1.3	3.6.13-2ubuntu1.8	3
frankescobar/allure-docker-service-ui :7.0.3 :latest	4ebd8b4ef340	gnutls28@3.6.7-4+deb10u5	3.6.7-4+deb10u10	3
grafana/promtail :2.4.2	626900031c4e	gnutls28@3.7.1-5	3.7.1-5+deb11u3	3
library/nginx :1.22.0	f0d28f204785	gnutls28@3.7.1-5+deb11u2	3.7.1-5+deb11u3	3
library/postgres :14.1	3162a6ead070	gnutls28@3.7.1-5	3.7.1-5+deb11u3	3
library/solr :8.11.1	8c5f7881cebb	gnutls28@3.7.1-5	3.7.1-5+deb11u3	3
lmenezes/cerebro :0.9.4	7d9e2b77e459	gnutls28@3.6.7-4+deb10u6	3.6.7-4+deb10u10	3
minio/minio :RELEASE.2021-02-14T04-01-33Z	bd11edda91f3	gnutls@3.6.14-7.el8_3	0:3.6.16-6.el8_7	3
omecproject/cdn-video-repo :1.0.0 :remote-v3	d59ccb138ffb	gnutls28@3.4.10-4ubuntu1.4	no fix listed	3
phpmyadmin/phpmyadmin :5.2.0	ae6dadd9cf3c	gnutls28@3.7.1-5	3.7.1-5+deb11u3	3
selenium/hub :3.141.59	02f251d48d5f	gnutls28@3.6.13-2ubuntu1.3	3.6.13-2ubuntu1.8	3