CVE-2023-1255
MediumAdvisory
Published 20 Apr 2023In the index since 5 Sept 2026
- Severity
- Medium
- worst across findings
- CVSS
- 5.9
- base score, highest
- EPSS
- 0.010
- 59th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 222
- of 17,781 indexed, latest versions
- Container images
- 218
- deployed by those charts
- Fix available
- 2 of 3
- affected packages
The matching OSV records carry no description.
Carried by container images the latest versions of 222 of 17,781 indexed charts deploy, on 218 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| opensslapk | 3.0.7-r0, 3.0.7-r2, 3.0.8-r0, 3.0.8-r1+1 more | 3.0.8-r4 | 136 |
| openssldeb | 3.0.2-0ubuntu1, 3.0.2-0ubuntu1.2, 3.0.2-0ubuntu1.5, 3.0.2-0ubuntu1.6+4 more | 3.0.2-0ubuntu1.10, 3.0.2-0ubuntu1.10+Fips1 | 80 |
| nodejsdeb | 16.14.2-deb-1nodesource1, 16.18.0-deb-1nodesource1, 20.11.1-1nodesource1, 20.15.0-1nodesource1+1 more | no fix listed | 5 |
- OSV records
- ALPINE-CVE-2023-1255UBUNTU-CVE-2023-1255
- Also known as
- USN-6119-1
Charts affected
222 by stars
Container images carrying it
218 by charts deploying them
A fixed version is listed for 2 of the 3 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| ciscolabs/ | 36d02faad958 | openssl | 3.0.2-0ubuntu1.10+Fips1 | 1 |
| clickhouse/ | dc5658853ce1 | openssl | 3.0.2-0ubuntu1.10 | 1 |
| coldatom/ | eae9e82da080 | openssl | 3.0.8-r4 | 1 |
| coldatom/ | 7c2fbbb41bcf | openssl | 3.0.8-r4 | 1 |
| crazymax/ | fb307f5b87bf | openssl | 3.0.8-r4 | 1 |
| danny1dockerhub/ | e434683fcc89 | openssl | 3.0.8-r4 | 1 |
| dblaci/ | eea697611af4 | openssl | 3.0.2-0ubuntu1.10+Fips1 | 1 |
| deepflowce/ | 29332fee7fc2 | openssl | 3.0.2-0ubuntu1.10 | 1 |
| deluan/ | 11a24da08977 | openssl | 3.0.8-r4 | 1 |
| devopstales/ | 75136aa7a26e | openssl | 3.0.8-r4 | 1 |
| dnsforge/ | 4d9a685c8c28 | openssl | 3.0.8-r4 | 1 |
| dongjiang1989/ | 451f7823723c | openssl | 3.0.8-r4 | 1 |
| dremio/ | 80ed2e3b7c43 | openssl | 3.0.2-0ubuntu1.10+Fips1 | 1 |
| drpcorg/ | 8858fae1859d | openssl | 3.0.2-0ubuntu1.10+Fips1 | 1 |
| dtzar/ | a1041bb0f1d1 | openssl | 3.0.8-r4 | 1 |
| duck1123/ | 0e29f19fa67c | openssl | 3.0.2-0ubuntu1.10+Fips1 | 1 |
| duck1123/ | 9d6fb247b714 | openssl | 3.0.2-0ubuntu1.10+Fips1 | 1 |
| ethpandaops/ | c58eb9ffe446 | openssl | 3.0.8-r4 | 1 |
| evgkrsk/ | 37f0e1f435c3 | openssl | 3.0.8-r4 | 1 |
| fedodo/ | 28dada8e3216 | openssl | 3.0.8-r4 | 1 |
| fedodo/ | 8f8eb7a1207e | openssl | 3.0.8-r4 | 1 |
| felipecs8/ | 4e51693fcdf5 | openssl | 3.0.8-r4 | 1 |
| felipecs8/ | d5f4f17cb066 | openssl | 3.0.8-r4 | 1 |
| flanksource/ | 1dacc3195bf9 | openssl | 3.0.2-0ubuntu1.10+Fips1 | 1 |
| flyway/ | 80f12c80502b | openssl | 3.0.8-r4 | 1 |
| folioci/ | 3028f333778f | openssl | 3.0.8-r4 | 1 |
| gethue/ | 7d5c1b9f8a79 | nodejs | no fix listed | 1 |
| glasskube/ | be5133100d63 | openssl | 3.0.2-0ubuntu1.10+Fips1 | 1 |
| grafana/ | 1a359d92f40e | openssl | 3.0.8-r4 | 1 |
| grafana/ | 39c849cebccc | openssl | 3.0.8-r4 | 1 |
| hashicorp/ | 4500e988b7ce | openssl | 3.0.8-r4 | 1 |
| hashicorp/ | 97d521a27498 | openssl | 3.0.8-r4 | 1 |
| hasura/ | 0111b0204136 | openssl | 3.0.2-0ubuntu1.10+Fips1 | 1 |
| hivemq/ | 241d6a8e1963 | openssl | 3.0.2-0ubuntu1.10 | 1 |
| iomesh/ | 376577ed98ac | openssl | 3.0.8-r4 | 1 |
| iomesh/ | d86dab5611a7 | openssl | 3.0.8-r4 | 1 |
| iomesh/ | 026a1d87f6e9 | openssl | 3.0.8-r4 | 1 |
| iomesh/ | 584dbe19db7e | openssl | 3.0.8-r4 | 1 |
| istio/ | 70f9d1fe5fff | openssl | 3.0.2-0ubuntu1.10+Fips1 | 1 |
| istio/ | ac0284d75ec9 | openssl | 3.0.2-0ubuntu1.10 | 1 |
| istio/ | ce9d87606701 | openssl | 3.0.2-0ubuntu1.10 | 1 |
| istio/ | db08d6963975 | openssl | 3.0.2-0ubuntu1.10 | 1 |
| josh5/ | 4d49c4816260 | nodejs openssl | no fix listed 3.0.2-0ubuntu1.10+Fips1 | 1 |
| kubesec/ | c0f3b0673578 | openssl | 3.0.8-r4 | 1 |
| kubevious/ | 9bf567704de2 | openssl | 3.0.8-r4 | 1 |
| kubevious/ | 0b0f4c507eb6 | openssl | 3.0.8-r4 | 1 |
| kusionstack/ | b707d3bf0abd | openssl | 3.0.8-r4 | 1 |
| kvalitetsit/ | e89e351733ad | openssl | 3.0.8-r4 | 1 |
| kyleslugg/ | ba8c36dfdfbd | openssl | 3.0.8-r4 | 1 |
| kyso/ | 68091eace89c | openssl | 3.0.8-r4 | 1 |