StackRadar

CVE-2023-0464

High

Advisory

Published 22 Mar 2023In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.037
89th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,124
of 17,787 indexed, latest versions
Container images
1,136
deployed by those charts
Fix available
4 of 5
affected packages

libopenssl-1_1-devel-1.1.1t-2.1 on GA media

Carried by container images the latest versions of 1,124 of 17,787 indexed charts deploy, on 1,136 images.

Affected packageAffected versionsFixed inImages
opensslapk1.1.1k-r0, 1.1.1l-r0, 1.1.1l-r7, 1.1.1l-r8+12 more1.1.1t-r1, 1.1.1t-r2, 3.0.8-r1624
openssldeb1.0.1f-1ubuntu2.5, 1.0.1f-1ubuntu2.8, 1.0.1f-1ubuntu2.25, 1.0.1f-1ubuntu2.27+56 more1.0.1f-1ubuntu2.27+esm7, 1.0.2g-1ubuntu4.20+esm7, 1.1.1-1ubuntu2.1~18.04.22, 1.1.1-1ubuntu2.fips.2.1~18.04.22+3 more499
openssl1.0deb1.0.2n-1ubuntu5.3, 1.0.2n-1ubuntu5.4, 1.0.2n-1ubuntu5.6, 1.0.2n-1ubuntu5.10+1 more1.0.2n-1ubuntu5.1212
nodejsdeb16.14.2-deb-1nodesource1, 16.18.0-deb-1nodesource1, 20.11.1-1nodesource1, 20.15.0-1nodesource1+1 moreno fix listed5
openssl-1_1rpm1.1.0i-14.6.1, 1.1.0i-lp151.8.3.11.1.0i-150100.14.45.1, 1.1.1t-2.19
OSV records
ALPINE-CVE-2023-0464UBUNTU-CVE-2023-0464openSUSE-SU-2024:12825-1SUSE-SU-2023:1748-1
Also known as
USN-6039-1

Charts affected

1,124 by stars
ChartLatestAffected imagesRadar Score
frpcwenerme1.0.11 of 1See more

frpc wenerme 1.0.1

1 of the 1 container images this version deploys carry CVE-2023-0464.

Container imageDigestPackageFixed in
wener/frpc:v0.37.0cc9fd4da44c0
openssl@1.1.1l-r0
1.1.1t-r1

Open the chart page →

3,359
longhornwenerme1.2.31 of 2See more

longhorn wenerme 1.2.3

1 of the 2 container images this version deploys carry CVE-2023-0464.

Container imageDigestPackageFixed in
longhornio/longhorn-manager:v1.2.3dca34321452c
openssl@1.1.1f-1ubuntu2.10
1.1.1f-1ubuntu2.18

Open the chart page →

15,287
nats-account-serverwenerme0.8.11 of 1See more

nats-account-server wenerme 0.8.1

1 of the 1 container images this version deploys carry CVE-2023-0464.

Container imageDigestPackageFixed in
natsio/nats-account-server:1.0.0a3381560aab6
openssl@1.1.1k-r0
1.1.1t-r1

Open the chart page →

2,634
openebswenerme3.10.03 of 3See more

openebs wenerme 3.10.0

3 of the 3 container images this version deploys carry CVE-2023-0464.

Container imageDigestPackageFixed in
openebs/node-disk-manager:2.1.0f6c18b0f8c8a
openssl@3.0.2-0ubuntu1.7
3.0.2-0ubuntu1.9
openebs/node-disk-operator:2.1.06afe2123c457
openssl@3.0.2-0ubuntu1.7
3.0.2-0ubuntu1.9
openebs/provisioner-localpv:3.5.0aea39e49bb97
openssl@1.1.1q-r0
1.1.1t-r1

Open the chart page →

10,568
csi-driver-host-pathwiremindVerified publisher0.1.11 of 8See more

csi-driver-host-path wiremind 0.1.1

1 of the 8 container images this version deploys carry CVE-2023-0464.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/hostpathplugin:v1.9.092257881c1d6
openssl@1.1.1q-r0
1.1.1t-r1

Open the chart page →

12,607
kibanawiremindVerified publisher8.5.231 of 2See more

kibana wiremind 8.5.23

1 of the 2 container images this version deploys carry CVE-2023-0464.

Container imageDigestPackageFixed in
library/kibana:8.18.004c0fc150f3a
openssl@1.1.1f-1ubuntu2.24
1.1.1f-1ubuntu2.fips.18

Open the chart page →

6,323
kafka-connect-uiwitcom-gmbh0.5.01 of 2See more

kafka-connect-ui witcom-gmbh 0.5.0

1 of the 2 container images this version deploys carry CVE-2023-0464.

Container imageDigestPackageFixed in
quay.io/oauth2-proxy/oauth2-proxy:v7.3.08c21390be87d
openssl@1.1.1n-r0
1.1.1t-r2

Open the chart page →

2,506
mrtg-backendwitcom-gmbh0.7.01 of 2See more

mrtg-backend witcom-gmbh 0.7.0

1 of the 2 container images this version deploys carry CVE-2023-0464.

Container imageDigestPackageFixed in
quay.io/oauth2-proxy/oauth2-proxy:v7.2.1febeebebe762
openssl@1.1.1l-r7
1.1.1t-r2

Open the chart page →

2,616
playwright-synthetic-monitoringwork-adventure1.0.11 of 1See more

playwright-synthetic-monitoring work-adventure 1.0.1

1 of the 1 container images this version deploys carry CVE-2023-0464.

Container imageDigestPackageFixed in
workadventure/playwright-synthetic-monitoring:main92b664c2a06f
nodejs@20.15.0-1nodesource1
no fix listed

Open the chart page →

14,172
workadventureworkadventure1.1.02 of 9See more

workadventure workadventure 1.1.0

2 of the 9 container images this version deploys carry CVE-2023-0464.

Container imageDigestPackageFixed in
thecodingmachine/workadventure-chat:v1.17.7da12f37e6795
openssl@1.1.1n-r0
1.1.1t-r2
thecodingmachine/workadventure-ejabberd:v1.17.701df99622ad3
openssl@1.1.1n-r0
1.1.1t-r2

Open the chart page →

16,083
default-backendwyrihaximusnetVerified publisher1.1.01 of 1See more

default-backend wyrihaximusnet 1.1.0

1 of the 1 container images this version deploys carry CVE-2023-0464.

Container imageDigestPackageFixed in
ghcr.io/wyrihaximusnet/default-backend:randomb24e63efd841
openssl@1.1.1l-r0
1.1.1t-r1

Open the chart page →

2,535
oauth2xdVerified publisher1.0.01 of 1See more

oauth2 xd 1.0.0

1 of the 1 container images this version deploys carry CVE-2023-0464.

Container imageDigestPackageFixed in
lishimeng/hufu:v1.2.13d5752dac834
openssl@3.0.8-r0
3.0.8-r1

Open the chart page →

2,007
owlxdVerified publisher0.5.12 of 2See more

owl xd 0.5.1

2 of the 2 container images this version deploys carry CVE-2023-0464.

Container imageDigestPackageFixed in
lishimeng/owl-console:v0.11.2c79a67657baf
openssl@3.0.8-r0
3.0.8-r1
lishimeng/owl-messager:v0.11.23d00485e64dc
openssl@3.0.8-r0
3.0.8-r1

Open the chart page →

3,880
passportxdVerified publisher0.2.162 of 2See more

passport xd 0.2.16

2 of the 2 container images this version deploys carry CVE-2023-0464.

Container imageDigestPackageFixed in
lishimeng/passport:v0.2.163e7d05ded625
openssl@3.0.8-r0
3.0.8-r1
lishimeng/passport-profile:v0.2.160970dfe5dc8f
openssl@3.0.8-r0
3.0.8-r1

Open the chart page →

3,974
skoonerxdVerified publisher1.1.01 of 1See more

skooner xd 1.1.0

1 of the 1 container images this version deploys carry CVE-2023-0464.

Container imageDigestPackageFixed in
ymuski/skooner:latest67819ca511b5
openssl@1.1.1n-r0
1.1.1t-r2

Open the chart page →

1,752
tabbyxdVerified publisher1.0.61 of 2See more

tabby xd 1.0.6

1 of the 2 container images this version deploys carry CVE-2023-0464.

Container imageDigestPackageFixed in
lishimeng/tabby:v1.0.48145c3dc83c8
openssl@3.0.8-r0
3.0.8-r1

Open the chart page →

7,685
treexdVerified publisher0.1.101 of 1See more

tree xd 0.1.10

1 of the 1 container images this version deploys carry CVE-2023-0464.

Container imageDigestPackageFixed in
lishimeng/tree:v0.2.89b2f8be6c7d3
openssl@3.0.8-r0
3.0.8-r1

Open the chart page →

1,997
zooxdVerified publisher0.4.01 of 1See more

zoo xd 0.4.0

1 of the 1 container images this version deploys carry CVE-2023-0464.

Container imageDigestPackageFixed in
lishimeng/zoo:v0.4.0e0b8d2d8ca28
openssl@3.0.8-r0
3.0.8-r1

Open the chart page →

1,955
pgbounceryasn77-pgbouncer0.0.81 of 1See more

pgbouncer yasn77-pgbouncer 0.0.8

1 of the 1 container images this version deploys carry CVE-2023-0464.

Container imageDigestPackageFixed in
ghcr.io/yasn77/pgbouncer:v0.0.6cc8c13550e44
openssl@1.1.1q-r0
1.1.1t-r1

Open the chart page →

1,152
rawfile-csiymatrixVerified publisher0.2.11 of 4See more

rawfile-csi ymatrix 0.2.1

1 of the 4 container images this version deploys carry CVE-2023-0464.

Container imageDigestPackageFixed in
matrixdb/rawfile-csi:v0.2.195b2e38e913d
openssl@1.1.1n-r0
1.1.1t-r1

Open the chart page →

7,972
zahori-schedulerzahoriVerified publisher1.0.11 of 1See more

zahori-scheduler zahori 1.0.1

1 of the 1 container images this version deploys carry CVE-2023-0464.

Container imageDigestPackageFixed in
zahoriaut/zahori-scheduler:1.0.047d0979b1184
openssl@1.1.1-1ubuntu2.1~18.04.23
1.1.1-1ubuntu2.fips.2.1~18.04.22

Open the chart page →

2,464
zahori-serverzahoriVerified publisher1.0.11 of 2See more

zahori-server zahori 1.0.1

1 of the 2 container images this version deploys carry CVE-2023-0464.

Container imageDigestPackageFixed in
flyway/flyway:9.14.1-alpine80f12c80502b
openssl@3.0.7-r2
3.0.8-r1

Open the chart page →

5,847
alertmanager-matrix-forwarderzloi-space1.0.11 of 2See more

alertmanager-matrix-forwarder zloi-space 1.0.1

1 of the 2 container images this version deploys carry CVE-2023-0464.

Container imageDigestPackageFixed in
zl0i/alertmanager-matrix-forwarder:v1.0.0e94047931739
openssl@1.1.1l-r7
1.1.1t-r2

Open the chart page →

3,118
clickhousezloi-space1.2.02 of 3See more

clickhouse zloi-space 1.2.0

2 of the 3 container images this version deploys carry CVE-2023-0464.

Container imageDigestPackageFixed in
yandex/clickhouse-client:21.3863f94a0f607
openssl@1.1.1-1ubuntu2.1~18.04.14
1.1.1-1ubuntu2.1~18.04.22
yandex/clickhouse-server:21.3.204eccfffb01d7
openssl@1.1.1f-1ubuntu2.10
1.1.1f-1ubuntu2.18

Open the chart page →

9,250

Container images carrying it

1,136 by charts deploying them

A fixed version is listed for 4 of the 5 affected packages.

Container imageDigestPackageFixed inUsed by
istio/install-cni:1.10.32232f365aed6
openssl@1.1.1-1ubuntu2.1~18.04.9
1.1.1-1ubuntu2.1~18.04.22
1
istio/node-agent-k8s:1.2.9268ab879ea51
openssl@1.0.2g-1ubuntu4.15
1.0.2g-1ubuntu4.20+esm7
1
istio/operator:1.10.3655eefa11c84
openssl@1.1.1-1ubuntu2.1~18.04.9
1.1.1-1ubuntu2.1~18.04.22
1
istio/operator:1.12.06cfce8a071b9
openssl@1.1.1f-1ubuntu2.8
1.1.1f-1ubuntu2.18
1
istio/pilot:1.10.0294ca55bd1cc
openssl@1.1.1-1ubuntu2.1~18.04.9
1.1.1-1ubuntu2.1~18.04.22
1
istio/pilot:1.16.0ac0284d75ec9
openssl@3.0.2-0ubuntu1.7
3.0.2-0ubuntu1.9
1
istio/pilot:1.2.9c09319753454
openssl@1.0.2g-1ubuntu4.15
1.0.2g-1ubuntu4.20+esm7
1
istio/pilot:1.17.1ce9d87606701
openssl@3.0.2-0ubuntu1.8
3.0.2-0ubuntu1.9
1
istio/pilot:1.15.2db08d6963975
openssl@3.0.2-0ubuntu1.6
3.0.2-0ubuntu1.9
1
istio/pilot:1.10.3e7e110a421c2
openssl@1.1.1-1ubuntu2.1~18.04.9
1.1.1-1ubuntu2.1~18.04.22
1
istio/proxyv2:1.2.90c78be035e98
openssl@1.0.2g-1ubuntu4.15
1.0.2g-1ubuntu4.20+esm7
1
istio/proxyv2:1.9.687a9db561d2e
openssl@1.1.1-1ubuntu2.1~18.04.9
1.1.1-1ubuntu2.1~18.04.22
1
istio/proxyv2:1.10.088c6c693e67a
openssl@1.1.1-1ubuntu2.1~18.04.9
1.1.1-1ubuntu2.1~18.04.22
1
istio/proxyv2:1.14.1df69c1a7af7c
openssl@1.1.1f-1ubuntu2.13
1.1.1f-1ubuntu2.18
1
itzmanish/ecr-token-renew:latest02154d1c05b5
openssl@1.1.1k-r0
1.1.1t-r1
1
j4ckhunter/consumer:1.00bb7a429e3e75
openssl@1.1.1q-r0
1.1.1t-r1
1
j4ckhunter/producer:1.006ba447609b12
openssl@1.1.1q-r0
1.1.1t-r1
1
jacobalberty/unifi:v7.1.664a3616625dda
openssl@1.1.1-1ubuntu2.1~18.04.17
1.1.1-1ubuntu2.1~18.04.22
1
jacobalberty/unifi:v7.4.162b3edc809a3ff
openssl@1.1.1-1ubuntu2.1~18.04.23
1.1.1-1ubuntu2.fips.2.1~18.04.22
1
jacobalberty/unifi:5.10.19c409924e2463
openssl@1.0.2g-1ubuntu4.14
1.0.2g-1ubuntu4.20+esm7
1
jaegertracing/all-in-one:1.2942822be7888b
openssl@1.1.1l-r0
1.1.1t-r1
1
jaegertracing/all-in-one:1.42.07d32a4eddec7
openssl@1.1.1s-r0
1.1.1t-r1
1
jaegertracing/jaeger-collector:1.41.0ff81f0a9f63c
openssl@1.1.1s-r0
1.1.1t-r1
1
jaegertracing/jaeger-query:1.41.0b636f0f464bc
openssl@1.1.1s-r0
1.1.1t-r1
1
jakowenko/double-take:1.6.0b858bac9e32a
openssl@1.1.1f-1ubuntu2.8
1.1.1f-1ubuntu2.18
1
javaaurelio/dadosfake_web_springboot:latest8541a3cd021a
openssl@1.1.1l-r7
1.1.1t-r2
1
jdvalencia422/observabilitysec:latesta80b6e47a7b8
openssl@1.1.1q-r0
1.1.1t-r2
1
jedi132000/nextapp:latestdc2a81e92f23
openssl@1.1.1f-1ubuntu2.16
1.1.1f-1ubuntu2.18
1
jhipster/jhipster-registry:latest7184525acd4d
openssl@1.1.1f-1ubuntu2.24
1.1.1f-1ubuntu2.fips.18
1
jingking/geonetwork-hnap:4.2.843e74ab234e1
openssl@1.1.1f-1ubuntu2.20
1.1.1f-1ubuntu2.fips.18
1
jmferrer/azure-devops-agent:latest030f68ec6998
openssl@1.0.2g-1ubuntu4.15
1.0.2g-1ubuntu4.20+esm7
1
josh5/unmanic:0.2.64d49c4816260
nodejs@20.11.1-1nodesource1
no fix listed
1
junktext/getting-started:1.0.5a70936c04aed
openssl@1.1.1n-r0
1.1.1t-r2
1
junktext/getting-started:1.0.34d44adf5a4da2
openssl@1.1.1n-r0
1.1.1t-r2
1
jupyterhub/configurable-http-proxy:4.5.1723028bf9b3c
openssl@1.1.1l-r7
1.1.1t-r2
1
jupyterhub/configurable-http-proxy:4.5.39e2c0107c7a3
openssl@1.1.1q-r0
1.1.1t-r1
1
jupyterhub/k8s-hub:0.11.1b6b4a1a34bf0
openssl@1.1.1f-1ubuntu2.1
1.1.1f-1ubuntu2.18
1
jupyterhub/k8s-hub:1.2.0e4770285aaf7
openssl@1.1.1f-1ubuntu2.8
1.1.1f-1ubuntu2.18
1
jupyterhub/k8s-singleuser-sample:0.11.1e3e6f3051df8
openssl@1.1.1f-1ubuntu2
1.1.1f-1ubuntu2.18
1
kennethreitz/httpbin:latest599fe5e50731
openssl@1.1.0g-2ubuntu4.1
1.1.1-1ubuntu2.1~18.04.22
1
keyoxide/keyoxide:stable96f27a71269d
openssl@1.1.1l-r7
1.1.1t-r2
1
kfirfer/phppgadmin:7.13.0-22efb4a5d74a3
openssl@1.1.1f-1ubuntu2.16
1.1.1f-1ubuntu2.18
1
kfirfer/scripts:0.0.2481e5c4e5d70e
openssl@1.1.1q-r0
1.1.1t-r2
1
klausmeyer/docker-registry-browser:1.4.0bdc4c6b8595b
openssl@1.1.1l-r0
1.1.1t-r1
1
krontechnology/aapm-agent:1.1.07feef7d2ab42
openssl@1.1.1f-1ubuntu2.17
1.1.1f-1ubuntu2.18
1
krontechnology/aapm-sidecar-injector:1.1.0e078d54c1711
openssl@1.1.1n-r0
1.1.1t-r2
1
kubebb/ingress-nginx-controller:v1.3.0067673df26a6
openssl@1.1.1q-r0
1.1.1t-r1
1
kubebb/kube-oidc-proxy-ce:v0.3.0-2022100858d5efec568b
openssl@1.1.1q-r0
1.1.1t-r2
1
kubebb/oidc-server:v0.2.02b5894ef1e2f
openssl@1.1.1n-r0
1.1.1t-r2
1
kubebb/resource-viewer:v0.2.065bb40b353db
openssl@1.1.1q-r0
1.1.1t-r2
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.