CVE-2023-26604

High

Advisory

Published 3 Mar 2023In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.8; base score, highest
EPSS: 0.011; 62nd percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 1,006; of 17,787 indexed, latest versions
Container images: 943; deployed by those charts
Fix available: 2 of 2; affected packages

Moderate: systemd security and bug fix update

Carried by container images the latest versions of 1,006 of 17,787 indexed charts deploy, on 943 images.

Affected package	Affected versions	Fixed in	Images
systemddeb	204-5ubuntu20.7, 204-5ubuntu20.10, 204-5ubuntu20.24, 204-5ubuntu20.28+68 more	241-7~deb10u9	802
systemdrpm	219-62.el7_6.6, 219-67.el7_7.1, 219-67.el7_7.3, 219-73.el7_8.9+30 more	0:219-78.el7_9.11, 0:239-74.el8_8.2	141

OSV records: RLSA-2023:3837 UBUNTU-CVE-2023-26604 RHSA-2023:3837 RHSA-2024:7705 DLA-3377-1

Charts affected

1,006 by stars

Chart

Latest

Affected images

Radar Score

keycloakxzaks

2.2.0

1 of 1 See more

keycloakx zaks 2.2.0

1 of the 1 container images this version deploys carry CVE-2023-26604.

Container image	Digest	Package	Fixed in
quay.io/keycloak/keycloak :20.0.3	b8f2a453a17a	systemd@239-68.el8_7.2	0:239-74.el8_8.2

Open the chart page →

6,016

posthogzeet

0.23.2

1 of 9 See more

posthog zeet 0.23.2

1 of the 9 container images this version deploys carry CVE-2023-26604.

Container image	Digest	Package	Fixed in
altinity/clickhouse-operator :0.19.0	7a85f522c5bc	systemd@239-68.el8_7.4	0:239-74.el8_8.2

Open the chart page →

3,697

myfirstchartzikilab

0.2.0

1 of 1 See more

myfirstchart zikilab 0.2.0

1 of the 1 container images this version deploys carry CVE-2023-26604.

Container image	Digest	Package	Fixed in
ghcr.io/stacksimplify/kubenginxhelm :0.2.0	ae2268dcc930	systemd@241-7~deb10u4	241-7~deb10u9

Open the chart page →

1,138

alertmanager-matrix-forwarderzloi-space

1.0.1

1 of 2 See more

alertmanager-matrix-forwarder zloi-space 1.0.1

1 of the 2 container images this version deploys carry CVE-2023-26604.

Container image	Digest	Package	Fixed in
matrixdotorg/pantalaimon :v0.10.4	ba6a587fa508	systemd@241-7~deb10u8	241-7~deb10u9

Open the chart page →

3,118

clickhousezloi-space

1.2.0

2 of 3 See more

clickhouse zloi-space 1.2.0

2 of the 3 container images this version deploys carry CVE-2023-26604.

Container image	Digest	Package	Fixed in
yandex/clickhouse-client :21.3	863f94a0f607	systemd@237-3ubuntu10.53	no fix listed
yandex/clickhouse-server :21.3.20	4eccfffb01d7	systemd@245.4-4ubuntu3.15	no fix listed

Open the chart page →

9,250

grafana-matrix-forwarderzloi-space

1.0.0

1 of 2 See more

grafana-matrix-forwarder zloi-space 1.0.0

1 of the 2 container images this version deploys carry CVE-2023-26604.

Container image	Digest	Package	Fixed in
matrixdotorg/pantalaimon :v0.10.4	ba6a587fa508	systemd@241-7~deb10u8	241-7~deb10u9

Open the chart page →

1,636

Container images carrying it

943 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
anchore/anchore-engine :v0.10.0	bde9eedf639d	systemd@239-45.el8	0:239-74.el8_8.2	1
anchore/anchore-engine :v0.7.1	ed9b3badd17c	systemd@239-18.el8_1.5	0:239-74.el8_8.2	1
anguda/ant-media :2.5	c435285fc241	systemd@245.4-4ubuntu3.20	no fix listed	1
aolde/bredbandskollen-prometheus-exporter :1.0.2	dc61ee713720	systemd@241-7~deb10u7	241-7~deb10u9	1
apache/camel-k :1.10.4	3bb13d14f64a	systemd@239-58.el8_6.8	0:239-74.el8_8.2	1
apache/iotdb :0.11.2	8647309f95d1	systemd@241-7~deb10u5	241-7~deb10u9	1
apache/iotdb :0.13.3-node	afa47bf1692a	systemd@245.4-4ubuntu3.18	no fix listed	1
apache/nifi-registry :1.14.0	090b7f87ec7f	systemd@241-7~deb10u4	241-7~deb10u9	1
apache/nifi-registry :0.8.0	974efa2f21da	systemd@241-7~deb10u4	241-7~deb10u9	1
apachepulsar/pulsar :2.10.0	3b262ab7a7d9	systemd@245.4-4ubuntu3.15	no fix listed	1
apachepulsar/pulsar :2.6.1	4db6ff0b4045	systemd@241-7~deb10u3	241-7~deb10u9	1
apachepulsar/pulsar :2.9.0	d056c89b7131	systemd@245.4-4ubuntu3.13	no fix listed	1
apachepulsar/pulsar :2.8.2	d538416d5afe	systemd@245.4-4ubuntu3.13	no fix listed	1
apache/skywalking-oap-server :8.9.1	b4ec8c18d079	systemd@245.4-4ubuntu3.13	no fix listed	1
apache/skywalking-ui :8.9.1	80530f0308a5	systemd@245.4-4ubuntu3.13	no fix listed	1
apicurio/apicurio-registry-kafkasql :2.1.0.Final	a97d67487532	systemd@239-45.el8_4.3	0:239-74.el8_8.2	1
arilot/docker-bitcoind :0.17.1	27a4f7e0f9f1	systemd@229-4ubuntu21.15	no fix listed	1
arturisimo/server-urjc :v1.0	d8dc4430531e	systemd@241-7~deb10u8	241-7~deb10u9	1
asdkant/fastapi-hello-world :latest	a23d8bf7c885	systemd@241-7~deb10u5	241-7~deb10u9	1
assistiot/authorization_svr :latest	db9361dad79b	systemd@241-7~deb10u7	241-7~deb10u9	1
assistiot/cybersecurity-monitoring_ir-cas :latest	6a107f224c34	systemd@245.4-4ubuntu3.22	no fix listed	1
assistiot/fl_orchestrator :dbmongo4-latest	d157fbe150e3	systemd@245.4-4ubuntu3.17	no fix listed	1
assistiot/fl_repository :latest	0fce3ea719a5	systemd@241-7~deb10u4	241-7~deb10u9	1
assistiot/fl_training_collector :latest	792715dd3084	systemd@241-7~deb10u4	241-7~deb10u9	1
assistiot/identity-manager_kc :latest	0df4b4fa899a	systemd@239-58.el8_6.7	0:239-74.el8_8.2	1
assistiot/sdn_controller :2.4.0	ea254b6d8a31	systemd@245.4-4ubuntu3.17	no fix listed	1
assistiot/video_augmentation :runner-cpu-latest	e5ae539ce2cb	systemd@245.4-4ubuntu3.20	no fix listed	1
badsmoke/wunderground_exporter :0.0.5	c54c004f24cc	systemd@241-7~deb10u6	241-7~deb10u9	1
bastilimbach/docker-magicmirror :v2.15.0	41b0835ab31e	systemd@241-7~deb10u7	241-7~deb10u9	1
bbernhard/signal-cli-rest-api :0.57	549ad08d7e14	systemd@245.4-4ubuntu3.15	no fix listed	1
beastob/foldingathome-arm64 :7.6.21	a90086a2c53e	systemd@241-7~deb10u6	241-7~deb10u9	1
benbusby/whoogle-search :0.5.4	f77f7e6e4ad2	systemd@241-7~deb10u7	241-7~deb10u9	1
bicarus/elrond-rosetta :v1.3.50.0	b1dab0721e1c	systemd@245.4-4ubuntu3.17	no fix listed	1
bicarus/mx-api-service :1.0.2-hf1	dab88659ae3b	systemd@241-7~deb10u8	241-7~deb10u9	1
bicarus/mx-notifier :1.1.8	bed688d16762	systemd@245.4-4ubuntu3.17	no fix listed	1
bitnamilegacy/jmx-exporter :0.16.1	d81bfc40888f	systemd@241-7~deb10u8	241-7~deb10u9	1
bitnamilegacy/kafka-exporter-archived :1.3.2	e527fbf75dce	systemd@241-7~deb10u8	241-7~deb10u9	1
bitnamilegacy/kubectl :1.18.8	50c5c23d5e8c	systemd@241-7~deb10u4	241-7~deb10u9	1
bitnamilegacy/mongodb :4.4.5	e3c9d6b4bc92	systemd@241-7~deb10u7	241-7~deb10u9	1
bitnamilegacy/mysqld-exporter :0.13.0	a7e14cc919cb	systemd@241-7~deb10u8	241-7~deb10u9	1
bitnamilegacy/postgresql :11.8.0	c3f10b41989f	systemd@241-7~deb10u4	241-7~deb10u9	1
blakeblackshear/frigate :0.10.0-amd64	ae269270ad9e	systemd@245.4-4ubuntu3.15	no fix listed	1
brannondorsey/fah :7.5.1	7bd011904534	systemd@241-7~deb10u3	241-7~deb10u9	1
brannondorsey/mprime :p95v303b6	2f957f0839c2	systemd@241-7~deb10u4	241-7~deb10u9	1
browserless/chrome :1.48.0-chrome-stable	c81ae5585b47	systemd@245.4-4ubuntu3.11	no fix listed	1
bsgrigorov/helm-operator :latest	45ab095f09c8	systemd@239-41.el8_3.2	0:239-74.el8_8.2	1
cadmusthefounder/lnd :take-the-helm-0.1.0	e596c5fbf80f	systemd@241-7~deb10u8	241-7~deb10u9	1
camptocamp/bucket-cloner :latest	acfafc308d88	systemd@241-7~deb10u8	241-7~deb10u9	1
camptocamp/ekorre :0.1.0	35c91d5fda04	systemd@241-7~deb10u2	241-7~deb10u9	1
camptocamp/puppet-catalog-diff-viewer :0.6.0	78b77c838569	systemd@241-7~deb10u3	241-7~deb10u9	1