CVE-2023-0767

High

Advisory

Published 15 Feb 2023In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 8.8; base score, highest
EPSS: 0.008; 55th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 105; of 17,781 indexed, latest versions
Container images: 103; deployed by those charts
Fix available: 2 of 3; affected packages

Red Hat Security Advisory: nss security update

Carried by container images the latest versions of 105 of 17,781 indexed charts deploy, on 103 images.

Affected package	Affected versions	Fixed in	Images
nssdeb	2:3.17.1-0ubuntu0.14.04.1, 2:3.28.4-0ubuntu0.14.04.3, 2:3.28.4-0ubuntu0.16.04.3, 2:3.28.4-0ubuntu0.16.04.4+16 more	2:3.28.4-0ubuntu0.14.04.5+esm12, 2:3.28.4-0ubuntu0.16.04.14+esm4, 2:3.35-2ubuntu2.16, 2:3.49.1-1ubuntu1.9+2 more	53
nssrpm	3.36.0-7.1.el7_6, 3.44.0-4.el7, 3.44.0-7.el7_7, 3.53.1-3.el7_9+5 more	0:3.79.0-5.el7_9, 0:3.79.0-11.el8_7	49
mozjs68deb	68.6.0-1ubuntu1	no fix listed	1

OSV records: RHSA-2023:1252 RHSA-2023:1332 UBUNTU-CVE-2023-0767 DSA-5353-1
Also known as: RHSA-2023:1369, RHSA-2023:1370, USN-5892-1, USN-5892-2

Charts affected

105 by stars

Chart

Latest

Affected images

Radar Score

hermestouk

0.6.0

1 of 3 See more

hermes touk 0.6.0

1 of the 3 container images this version deploys carry CVE-2023-0767.

Container image	Digest	Package	Fixed in
apicurio/apicurio-registry-kafkasql :2.1.0.Final	a97d67487532	nss@3.53.1-17.el8_3	0:3.79.0-11.el8_7

Open the chart page →

12,455

webhookiewebhookie

0.1.2

1 of 1 See more

webhookie webhookie 0.1.2

1 of the 1 container images this version deploys carry CVE-2023-0767.

Container image	Digest	Package	Fixed in
hookiesolutions/webhookie :latest	0629694246ba	nss@2:3.49.1-1ubuntu1.5	2:3.49.1-1ubuntu1.9

Open the chart page →

14,364

webhookie-allwebhookie

0.1.2

2 of 3 See more

webhookie-all webhookie 0.1.2

2 of the 3 container images this version deploys carry CVE-2023-0767.

Container image	Digest	Package	Fixed in
hookiesolutions/webhookie :latest	0629694246ba	nss@2:3.49.1-1ubuntu1.5	2:3.49.1-1ubuntu1.9
quay.io/keycloak/keycloak :14.0.0	3029dc0f1d38	nss@3.53.1-17.el8_3	0:3.79.0-11.el8_7

Open the chart page →

28,605

workshop-pipelinesworkshop-pipelines

0.1.6

1 of 2 See more

workshop-pipelines workshop-pipelines 0.1.6

1 of the 2 container images this version deploys carry CVE-2023-0767.

Container image	Digest	Package	Fixed in
quay.io/maximilianopizarro/workshop-pipelines :latest	e383ba3e0966	nss@3.67.0-7.el8_5	0:3.79.0-11.el8_7

Open the chart page →

11,577

keycloakxzaks

2.2.0

1 of 1 See more

keycloakx zaks 2.2.0

1 of the 1 container images this version deploys carry CVE-2023-0767.

Container image	Digest	Package	Fixed in
quay.io/keycloak/keycloak :20.0.3	b8f2a453a17a	nss@3.79.0-10.el8_6	0:3.79.0-11.el8_7

Open the chart page →

6,016

Container images carrying it

103 by charts deploying them

A fixed version is listed for 2 of the 3 affected packages.

Container image	Digest	Package	Fixed in	Used by
codeurjc/server :v1.0	310bea5b1ee7	nss@3.79.0-10.el8_6	0:3.79.0-11.el8_7	8
hyperledger/fabric-ca-tools :latest	4ce6f43ded2e	nss@2:3.28.4-0ubuntu0.16.04.3	2:3.28.4-0ubuntu0.16.04.14+esm4	4
hyperledger/fabric-couchdb :0.4.15	f6c724592abf	nss@2:3.28.4-0ubuntu0.16.04.5	2:3.28.4-0ubuntu0.16.04.14+esm4	4
mastercloudapps/server :v2.23	f3d24dfe2686	nss@3.79.0-10.el8_6	0:3.79.0-11.el8_7	4
selenium/hub :3.141.59	02f251d48d5f	nss@2:3.49.1-1ubuntu1.5	2:3.49.1-1ubuntu1.9	3
hookiesolutions/webhookie :latest	0629694246ba	nss@2:3.49.1-1ubuntu1.5	2:3.49.1-1ubuntu1.9	2
hyperledger/besu :22.4-openjdk-latest	a674d35eec9a	nss@2:3.49.1-1ubuntu1.8	2:3.49.1-1ubuntu1.9	2
stakater/stakater-nordmart-review :1.0.35	954d2be66e95	nss@3.67.0-7.el8_5	0:3.79.0-11.el8_7	2
wurstmeister/zookeeper :latest	7a7fd44a7210	nss@2:3.17.1-0ubuntu0.14.04.1	2:3.28.4-0ubuntu0.14.04.5+esm12	2
ghcr.io/games-on-whales/retroarch :1.0.0	103fbcec2314	nss@2:3.49.1-1ubuntu1.5	2:3.49.1-1ubuntu1.9	2
quay.io/keycloak/keycloak :20.0	054ef67eb7da	nss@3.79.0-10.el8_6	0:3.79.0-11.el8_7	2
quay.io/keycloak/keycloak :17.0.1-legacy	68f9f38c8f30	nss@3.67.0-7.el8_5	0:3.79.0-11.el8_7	2
altinity/clickhouse-operator :0.16.1	db7dde971407	nss@3.67.0-3.el7_9	0:3.79.0-5.el7_9	1
altinity/metrics-exporter :0.16.1	85b4fdbae053	nss@3.67.0-3.el7_9	0:3.79.0-5.el7_9	1
apachepulsar/pulsar :2.10.0	3b262ab7a7d9	nss@2:3.49.1-1ubuntu1.6	2:3.49.1-1ubuntu1.9	1
apachepulsar/pulsar :2.9.0	d056c89b7131	nss@2:3.49.1-1ubuntu1.5	2:3.49.1-1ubuntu1.9	1
apachepulsar/pulsar :2.8.2	d538416d5afe	nss@2:3.49.1-1ubuntu1.6	2:3.49.1-1ubuntu1.9	1
apicurio/apicurio-registry-kafkasql :2.1.0.Final	a97d67487532	nss@3.53.1-17.el8_3	0:3.79.0-11.el8_7	1
assistiot/identity-manager_kc :latest	0df4b4fa899a	nss@3.79.0-10.el8_6	0:3.79.0-11.el8_7	1
browserless/chrome :1.48.0-chrome-stable	c81ae5585b47	nss@2:3.49.1-1ubuntu1.5	2:3.49.1-1ubuntu1.9	1
cheyang/distributed-tf :1.6.0	46cc34755493	nss@2:3.28.4-0ubuntu0.16.04.3	2:3.28.4-0ubuntu0.16.04.14+esm4	1
crowdfox/external-service-operator :v1.1.0	6fa7e8063d27	nss@3.53.1-3.el7_9	0:3.79.0-5.el7_9	1
datadog/operator :0.3.1	17f08a860090	nss@3.44.0-7.el7_7	0:3.79.0-5.el7_9	1
fiware/biz-ecosystem-charging-backend :11.7.0	29456835bb2c	mozjs68@68.6.0-1ubuntu1	no fix listed	1
fiware/mintaka :0.7.0	92a3c5cf43c0	nss@3.67.0-7.el8_5	0:3.79.0-11.el8_7	1
fiware/mintaka :latest	efc6793388cc	nss@3.67.0-7.el8_5	0:3.79.0-11.el8_7	1
galaxy/galaxy-init :v18.01	0267bad550e6	nss@2:3.28.4-0ubuntu0.14.04.3	2:3.28.4-0ubuntu0.14.04.5+esm12	1
galaxy/galaxy-stable :v18.01	8e577a626dfd	nss@2:3.28.4-0ubuntu0.14.04.3	2:3.28.4-0ubuntu0.14.04.5+esm12	1
hyperledger/fabric-couchdb :0.4.10	c65891b6c237	nss@2:3.28.4-0ubuntu0.16.04.3	2:3.28.4-0ubuntu0.16.04.14+esm4	1
iamdorsah/bastillion :v0.1	db83a0254d81	nss@2:3.61-1+deb11u2	2:3.61-1+deb11u3	1
ibmcom/app-nav-api :1.0.1	ce9d2a564273	nss@3.36.0-7.1.el7_6	0:3.79.0-5.el7_9	1
ibmcom/app-nav-controller :1.0.1	ee4624ba513d	nss@3.36.0-7.1.el7_6	0:3.79.0-5.el7_9	1
ibmcom/app-nav-init :1.0.1	240ff499eb5b	nss@3.36.0-7.1.el7_6	0:3.79.0-5.el7_9	1
ibmcom/app-nav-ui :1.0.1	e2a86997b36b	nss@3.36.0-7.1.el7_6	0:3.79.0-5.el7_9	1
ibmcom/app-nav-was-controller :1.0.1	a6748792da26	nss@3.36.0-7.1.el7_6	0:3.79.0-5.el7_9	1
ibmcom/bai-admin-dev :19.0.2	02d882f2836e	nss@3.44.0-4.el7	0:3.79.0-5.el7_9	1
ibmcom/bai-elasticsearch-dev :19.0.2	5441dba2fa00	nss@3.44.0-4.el7	0:3.79.0-5.el7_9	1
ibmcom/bai-flink-dev :19.0.2	e31ff09e8aad	nss@3.44.0-4.el7	0:3.79.0-5.el7_9	1
ibmcom/bai-flink-zookeeper-dev :19.0.2	58548034cf55	nss@3.44.0-4.el7	0:3.79.0-5.el7_9	1
ibmcom/bai-init-dev :19.0.2	b138f1eac0b1	nss@3.44.0-4.el7	0:3.79.0-5.el7_9	1
ibmcom/bai-setup-dev :19.0.2	b8e8df11072d	nss@3.44.0-4.el7	0:3.79.0-5.el7_9	1
ibmcom/voice-gateway-mr :1.0.5.0	0762ab1df6c1	nss@3.44.0-7.el7_7	0:3.79.0-5.el7_9	1
ibmcom/websphere-liberty :javaee8-ubi-min	28ae40e05980	nss@3.44.0-4.el7	0:3.79.0-5.el7_9	1
jacobalberty/unifi :v7.1.66	4a3616625dda	nss@2:3.35-2ubuntu2.14	2:3.35-2ubuntu2.16	1
jacobalberty/unifi :5.10.19	c409924e2463	nss@2:3.28.4-0ubuntu0.16.04.4	2:3.28.4-0ubuntu0.16.04.14+esm4	1
kobotoolbox/kobocat :2.022.24a	b15679454415	nss@2:3.61-1+deb11u2	2:3.61-1+deb11u3	1
kobotoolbox/kpi :2.022.24d	bcacc01bccd4	nss@2:3.61-1+deb11u2	2:3.61-1+deb11u3	1
kubedex/helm-controller :v1.0.1	4f1008c51ef9	nss@3.36.0-7.1.el7_6	0:3.79.0-5.el7_9	1
library/kibana :7.17.8	c5781ba340ef	nss@2:3.49.1-1ubuntu1.8	2:3.49.1-1ubuntu1.9	1
library/kibana :7.17.3	e2e2031c15be	nss@2:3.49.1-1ubuntu1.6	2:3.49.1-1ubuntu1.9	1