StackRadar

CVE-2023-28842

Medium

Advisory

Published 4 Apr 2023In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
6.8
base score, highest
EPSS
0.014
72nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
172
of 17,781 indexed, latest versions
Container images
156
deployed by those charts
Fix available
1 of 1
affected package

Docker Swarm encrypted overlay network with a single endpoint is unauthenticated

Carried by container images the latest versions of 172 of 17,781 indexed charts deploy, on 156 images.

Affected packageAffected versionsFixed inImages
github.com/docker/dockergolangv1.13.1, v17.12.0-ce-rc1.0.20190628135806-70f67c6240bb+incompatible, v17.12.0-ce-rc1.0.20200204220554-5f6d6f3f2203+incompatible, v17.12.0-ce-rc1.0.20200309214505-aa6a9891b09c+incompatible+27 more20.10.24, 23.0.3156
OSV records
GHSA-6wrf-mxfj-pf5p
Also known as
GO-2023-1701

Charts affected

172 by stars
ChartLatestAffected imagesRadar Score
kiaekiae0.1.63 of 9See more

kiae kiae 0.1.6

3 of the 9 container images this version deploys carry CVE-2023-28842.

Container imageDigestPackageFixed in
grafana/promtail:2.6.1072527b12cdf
github.com/docker/docker@v20.10.12+incompatible
20.10.24
istio/pilot:1.15.2db08d6963975
github.com/docker/docker@v20.10.17+incompatible
20.10.24
otel/opentelemetry-collector-contrib:0.63.1dfb3a55ea8c9
github.com/docker/docker@v20.10.20+incompatible
20.10.24

Open the chart page →

19,168
cadvisorkrakazyabraVerified publisher1.0.11 of 1See more

cadvisor krakazyabra 1.0.1

1 of the 1 container images this version deploys carry CVE-2023-28842.

Container imageDigestPackageFixed in
gcr.io/cadvisor/cadvisor:v0.40.0135327c978de
github.com/docker/docker@v20.10.7+incompatible
20.10.24

Open the chart page →

3,176
bc-depositorykubebb0.0.31 of 1See more

bc-depository kubebb 0.0.3

1 of the 1 container images this version deploys carry CVE-2023-28842.

Container imageDigestPackageFixed in
hyperledgerk8s/bc-saas:v0.0.1-20230524d8bc31176257
github.com/docker/docker@v20.10.12+incompatible
20.10.24

Open the chart page →

1,940
bc-explorerkubebb0.0.31 of 1See more

bc-explorer kubebb 0.0.3

1 of the 1 container images this version deploys carry CVE-2023-28842.

Container imageDigestPackageFixed in
hyperledgerk8s/bc-explorer:v202305041f1a06b61f18
github.com/docker/docker@v20.10.12+incompatible
20.10.24

Open the chart page →

1,940
fabric-operatorkubebb0.1.01 of 1See more

fabric-operator kubebb 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-28842.

Container imageDigestPackageFixed in
hyperledgerk8s/fabric-operator:7776e7129a8af8be270
github.com/docker/docker@v20.10.12+incompatible
20.10.24

Open the chart page →

3,988
kubebbkubebb0.0.11 of 1See more

kubebb kubebb 0.0.1

1 of the 1 container images this version deploys carry CVE-2023-28842.

Container imageDigestPackageFixed in
kubebb/core:lateste366c34a9b8d
github.com/docker/docker@v20.10.17+incompatible
20.10.24

Open the chart page →

1,749
kubebb-corekubebb0.1.271 of 1See more

kubebb-core kubebb 0.1.27

1 of the 1 container images this version deploys carry CVE-2023-28842.

Container imageDigestPackageFixed in
kubebb/core:v0.1.62b9e7f451d6b
github.com/docker/docker@v20.10.17+incompatible
20.10.24

Open the chart page →

1,938
tdsfkubebb5.7.01 of 3See more

tdsf kubebb 5.7.0

1 of the 3 container images this version deploys carry CVE-2023-28842.

Container imageDigestPackageFixed in
kubebb/mesh-operator:v5.7.0163ebbfc7a82
github.com/docker/docker@v20.10.17+incompatible
20.10.24

Open the chart page →

6,490
u4a-componentkubebb0.2.101 of 8See more

u4a-component kubebb 0.2.10

1 of the 8 container images this version deploys carry CVE-2023-28842.

Container imageDigestPackageFixed in
kubebb/kube-oidc-proxy-ce:v0.3.0-2022100858d5efec568b
github.com/docker/docker@v20.10.17+incompatible
20.10.24

Open the chart page →

13,819
prometheuskubeblocksVerified publisher15.16.11 of 6See more

prometheus kubeblocks 15.16.1

1 of the 6 container images this version deploys carry CVE-2023-28842.

Container imageDigestPackageFixed in
quay.io/prometheus/prometheus:v2.39.14748e26f9369
github.com/docker/docker@v20.10.18+incompatible
20.10.24

Open the chart page →

10,302
promtailkube-opsVerified publisher1.5.11 of 2See more

promtail kube-ops 1.5.1

1 of the 2 container images this version deploys carry CVE-2023-28842.

Container imageDigestPackageFixed in
quay.io/kube-ops/promtail:2.2.134de6387233b
github.com/docker/docker@v20.10.1+incompatible
20.10.24

Open the chart page →

4,149
harborkubesphereVerified publisher1.9.34 of 11See more

harbor kubesphere 1.9.3

4 of the 11 container images this version deploys carry CVE-2023-28842.

Container imageDigestPackageFixed in
goharbor/chartmuseum-photon:v2.5.36ab3ca28e9e5
github.com/docker/docker@v20.10.12+incompatible
20.10.24
goharbor/harbor-core:v2.5.386bf3031f4a7
github.com/docker/docker@v20.10.9+incompatible
20.10.24
goharbor/harbor-jobservice:v2.5.38d5339ff2d74
github.com/docker/docker@v20.10.9+incompatible
20.10.24
goharbor/trivy-adapter-photon:v2.5.3b9522c3f5056
github.com/docker/docker@v20.10.3-0.20220224222438-c78f6963a1c0+incompatible
20.10.24

Open the chart page →

17,798
chaos-meshkubesphere-stable2.5.13 of 3See more

chaos-mesh kubesphere-stable 2.5.1

3 of the 3 container images this version deploys carry CVE-2023-28842.

Container imageDigestPackageFixed in
ghcr.io/chaos-mesh/chaos-daemon:v2.5.1cf78fdf7403a
github.com/docker/docker@v20.10.17+incompatible
20.10.24
ghcr.io/chaos-mesh/chaos-dashboard:v2.5.1448cb346b12c
github.com/docker/docker@v20.10.17+incompatible
20.10.24
ghcr.io/chaos-mesh/chaos-mesh:v2.5.1700bb42ac21d
github.com/docker/docker@v20.10.17+incompatible
20.10.24

Open the chart page →

8,555
cranekubesphere-stable0.5.21 of 3See more

crane kubesphere-stable 0.5.2

1 of the 3 container images this version deploys carry CVE-2023-28842.

Container imageDigestPackageFixed in
gocrane/craned:v0.5.1a1400909118c
github.com/docker/docker@v20.10.2+incompatible
20.10.24

Open the chart page →

8,883
prometheuslectures-k8sinfra15.8.51 of 6See more

prometheus lectures-k8sinfra 15.8.5

1 of the 6 container images this version deploys carry CVE-2023-28842.

Container imageDigestPackageFixed in
quay.io/prometheus/prometheus:v2.37.056e7f18e05dd
github.com/docker/docker@v20.10.17+incompatible
20.10.24

Open the chart page →

9,092
trivy-serverlemontechVerified publisher0.1.01 of 1See more

trivy-server lemontech 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-28842.

Container imageDigestPackageFixed in
aquasec/trivy:0.32.0973d0df16189
github.com/docker/docker@v20.10.3-0.20220224222438-c78f6963a1c0+incompatible
20.10.24

Open the chart page →

4,271
loft-agentloftVerified publisher3.2.41 of 1See more

loft-agent loft 3.2.4

1 of the 1 container images this version deploys carry CVE-2023-28842.

Container imageDigestPackageFixed in
ghcr.io/loft-sh/agent:3.2.45c109914ff73
github.com/docker/docker@v20.10.21+incompatible
20.10.24

Open the chart page →

2,444
vcluster-proloftVerified publisher0.0.0-ci-run.102 of 2See more

vcluster-pro loft 0.0.0-ci-run.10

2 of the 2 container images this version deploys carry CVE-2023-28842.

Container imageDigestPackageFixed in
rancher/k3s:v1.26.0-k3s19380f5dbae9a
github.com/docker/docker@v20.10.12+incompatible
20.10.24
ghcr.io/loft-sh/vcluster-pro:0.0.0-ci-run.10ab2e1fa19dd4
github.com/docker/docker@v20.10.21+incompatible
20.10.24

Open the chart page →

5,085
vcluster-pro-eksloftVerified publisher0.0.0-ci-run.101 of 4See more

vcluster-pro-eks loft 0.0.0-ci-run.10

1 of the 4 container images this version deploys carry CVE-2023-28842.

Container imageDigestPackageFixed in
ghcr.io/loft-sh/vcluster-pro:0.0.0-ci-run.10ab2e1fa19dd4
github.com/docker/docker@v20.10.21+incompatible
20.10.24

Open the chart page →

5,936
vcluster-pro-k0sloftVerified publisher0.0.0-ci-run.102 of 2See more

vcluster-pro-k0s loft 0.0.0-ci-run.10

2 of the 2 container images this version deploys carry CVE-2023-28842.

Container imageDigestPackageFixed in
k0sproject/k0s:v1.26.0-k0s.0f04635825d51
github.com/docker/docker@v20.10.17+incompatible
20.10.24
ghcr.io/loft-sh/vcluster-pro:0.0.0-ci-run.10ab2e1fa19dd4
github.com/docker/docker@v20.10.21+incompatible
20.10.24

Open the chart page →

5,768
vcluster-pro-k8sloftVerified publisher0.0.0-ci-run.101 of 4See more

vcluster-pro-k8s loft 0.0.0-ci-run.10

1 of the 4 container images this version deploys carry CVE-2023-28842.

Container imageDigestPackageFixed in
ghcr.io/loft-sh/vcluster-pro:0.0.0-ci-run.10ab2e1fa19dd4
github.com/docker/docker@v20.10.21+incompatible
20.10.24

Open the chart page →

8,202
sasquatchlsst-sqre0.1.131 of 6See more

sasquatch lsst-sqre 0.1.13

1 of the 6 container images this version deploys carry CVE-2023-28842.

Container imageDigestPackageFixed in
library/kapacitor:1.6.37232f6388a4d
github.com/docker/docker@v20.10.5+incompatible
20.10.24

Open the chart page →

9,332
telegraf-dslsst-sqre1.0.231 of 1See more

telegraf-ds lsst-sqre 1.0.23

1 of the 1 container images this version deploys carry CVE-2023-28842.

Container imageDigestPackageFixed in
library/telegraf:1.19-alpineaddb86c0c520
github.com/docker/docker@v20.10.7+incompatible
20.10.24

Open the chart page →

3,764
mattermost-calls-offloadermattermostVerified publisher0.2.11 of 1See more

mattermost-calls-offloader mattermost 0.2.1

1 of the 1 container images this version deploys carry CVE-2023-28842.

Container imageDigestPackageFixed in
mattermost/calls-offloader:v0.9.0b440b282599e
github.com/docker/docker@v20.10.9+incompatible
20.10.24

Open the chart page →

1,414
traefik2mesosphere9.18.01 of 1See more

traefik2 mesosphere 9.18.0

1 of the 1 container images this version deploys carry CVE-2023-28842.

Container imageDigestPackageFixed in
library/traefik:2.4.8eda951fd29a8
github.com/docker/docker@v17.12.0-ce-rc1.0.20200204220554-5f6d6f3f2203+incompatible
20.10.24

Open the chart page →

3,341
cert-manager-setupmesosphere-stable0.2.101 of 5See more

cert-manager-setup mesosphere-stable 0.2.10

1 of the 5 container images this version deploys carry CVE-2023-28842.

Container imageDigestPackageFixed in
quay.io/jetstack/cert-manager-ctl:v1.11.074611761f052
github.com/docker/docker@v20.10.17+incompatible
20.10.24

Open the chart page →

7,179
knativemesosphere-stable1.10.81 of 7See more

knative mesosphere-stable 1.10.8

1 of the 7 container images this version deploys carry CVE-2023-28842.

Container imageDigestPackageFixed in
gcr.io/knative-releases/knative.dev/serving/cmd/controller:v1.10.298a2cc7fd62e
github.com/docker/docker@v20.10.20+incompatible
20.10.24

Open the chart page →

7,479
kommandermesosphere-stable0.39.23 of 29See more

kommander mesosphere-stable 0.39.2

3 of the 29 container images this version deploys carry CVE-2023-28842.

Container imageDigestPackageFixed in
mesosphere/kommander-federation-utility-apiserver:v0.21.2f9b769c65e24
github.com/docker/docker@v20.10.2+incompatible
20.10.24
mesosphere/kubeaddons-addon-initializer:v0.2.8c10011f866f2
github.com/docker/docker@v1.13.1
20.10.24
thanosio/thanos:v0.15.0b12d5c31bf5a
github.com/docker/docker@v17.12.0-ce-rc1.0.20200706150819-a40b877fbb9e+incompatible
20.10.24

Open the chart page →

68,284
opsportalmesosphere-stable0.9.51 of 3See more

opsportal mesosphere-stable 0.9.5

1 of the 3 container images this version deploys carry CVE-2023-28842.

Container imageDigestPackageFixed in
mesosphere/kubeaddons-addon-initializer:v0.2.09f863160127b
github.com/docker/docker@v1.13.1
20.10.24

Open the chart page →

7,027
wg-access-servermglants0.4.71 of 1See more

wg-access-server mglants 0.4.7

1 of the 1 container images this version deploys carry CVE-2023-28842.

Container imageDigestPackageFixed in
place1/wg-access-server:v0.4.62b2f3ea80ed6
github.com/docker/docker@v1.13.1
20.10.24

Open the chart page →

2,745
kube-agent-chartmiddleware-labsVerified publisher0.1.21 of 1See more

kube-agent-chart middleware-labs 0.1.2

1 of the 1 container images this version deploys carry CVE-2023-28842.

Container imageDigestPackageFixed in
ghcr.io/middleware-labs/agent-kube-go:dev17369c4cd390
github.com/docker/docker@v20.10.22+incompatible
20.10.24

Open the chart page →

1,799
sshportalmidokura-communityVerified publisher0.1.41 of 2See more

sshportal midokura-community 0.1.4

1 of the 2 container images this version deploys carry CVE-2023-28842.

Container imageDigestPackageFixed in
moul/sshportal:v1.19.3332b603727c3
github.com/docker/docker@v20.10.12+incompatible
20.10.24

Open the chart page →

2,338
kafka-helm-chartnotesprojectchart0.1.01 of 1See more

kafka-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-28842.

Container imageDigestPackageFixed in
wurstmeister/kafka:latest2d4bbf9cc83d
github.com/docker/docker@v20.10.3-0.20220121014307-40bb9831756f+incompatible
20.10.24

Open the chart page →

4,547
example-dev-toolsnoygal0.2.81 of 3See more

example-dev-tools noygal 0.2.8

1 of the 3 container images this version deploys carry CVE-2023-28842.

Container imageDigestPackageFixed in
linuxserver/cloud9:latest45c5fe102ff3
github.com/docker/docker@v20.10.3-0.20220121014307-40bb9831756f+incompatible
20.10.24

Open the chart page →

27,465
nai-knative-servingnutanix-helm-releasesVerified publisher1.13.11 of 4See more

nai-knative-serving nutanix-helm-releases 1.13.1

1 of the 4 container images this version deploys carry CVE-2023-28842.

Container imageDigestPackageFixed in
gcr.io/knative-releases/knative.dev/serving/cmd/controller:v1.13.153d9aa4d2c7a
github.com/docker/docker@v20.10.20+incompatible
20.10.24

Open the chart page →

3,738
multicluster-meshocm-helm-chartsVerified publisher0.0.21 of 1See more

multicluster-mesh ocm-helm-charts 0.0.2

1 of the 1 container images this version deploys carry CVE-2023-28842.

Container imageDigestPackageFixed in
quay.io/open-cluster-management/multicluster-mesh-addon:latest3e010e1188f1
github.com/docker/docker@v20.10.12+incompatible
20.10.24

Open the chart page →

2,124
one-green-coreone-green-coreVerified publisher0.0.71 of 8See more

one-green-core one-green-core 0.0.7

1 of the 8 container images this version deploys carry CVE-2023-28842.

Container imageDigestPackageFixed in
library/telegraf:1.20.428e98eece020
github.com/docker/docker@v20.10.9+incompatible
20.10.24

Open the chart page →

9,558
anchore-engineopencloudcx1.13.01 of 2See more

anchore-engine opencloudcx 1.13.0

1 of the 2 container images this version deploys carry CVE-2023-28842.

Container imageDigestPackageFixed in
anchore/anchore-engine:v0.10.0bde9eedf639d
github.com/docker/docker@v17.12.0-ce-rc1.0.20200309214505-aa6a9891b09c+incompatible
20.10.24

Open the chart page →

18,023
voltha-infraopencord2.14.01 of 10See more

voltha-infra opencord 2.14.0

1 of the 10 container images this version deploys carry CVE-2023-28842.

Container imageDigestPackageFixed in
opencord/onos-classic-helm-utils:0.1.00d693ba85fd6
github.com/docker/docker@v17.12.0-ce-rc1.0.20200618181300-9dc6525e6118+incompatible
20.10.24

Open the chart page →

41,044
probuilderopenfaas0.2.01 of 2See more

probuilder openfaas 0.2.0

1 of the 2 container images this version deploys carry CVE-2023-28842.

Container imageDigestPackageFixed in
moby/buildkit:v0.10.0c2aeafaed434
github.com/docker/docker@v20.10.3-0.20220224222438-c78f6963a1c0+incompatible
20.10.24

Open the chart page →

4,751
fsmopenshift0.1.8-ubi.61 of 6See more

fsm openshift 0.1.8-ubi.6

1 of the 6 container images this version deploys carry CVE-2023-28842.

Container imageDigestPackageFixed in
quay.io/flomesh/fsm-manager-ubi8:0.1.8-ubi.63590af73f65a
github.com/docker/docker@v20.10.2+incompatible
20.10.24

Open the chart page →

16,556
opscruiseopenshift0.35.1002 of 11See more

opscruise openshift 0.35.100

2 of the 11 container images this version deploys carry CVE-2023-28842.

Container imageDigestPackageFixed in
grafana/promtail:2.0.05fd12edcc694
github.com/docker/docker@v17.12.0-ce-rc1.0.20201009160326-9c15e82f19b0+incompatible
20.10.24
quay.io/prometheus/prometheus:v2.36.2df0cd5887887
github.com/docker/docker@v20.10.16+incompatible
20.10.24

Open the chart page →

8,201
redhat-trusted-application-pipelineopenshift1.0.21 of 2See more

redhat-trusted-application-pipeline openshift 1.0.2

1 of the 2 container images this version deploys carry CVE-2023-28842.

Container imageDigestPackageFixed in
quay.io/redhat-appstudio/appstudio-utils:dbbdd82734232e6289e8fbae5b4c858481a7c0577b4202c25b67
github.com/docker/docker@v20.10.8+incompatible
20.10.24

Open the chart page →

8,599
openvscode-serveropenvscode-server-helmVerified publisher2.7.371 of 2See more

openvscode-server openvscode-server-helm 2.7.37

1 of the 2 container images this version deploys carry CVE-2023-28842.

Container imageDigestPackageFixed in
library/docker:23.0.1-dindd9a0fd8bdd15
github.com/docker/docker@v23.0.1+incompatible
23.0.3

Open the chart page →

4,237
pet-battle-infrapetbattle1.0.321 of 2See more

pet-battle-infra petbattle 1.0.32

1 of the 2 container images this version deploys carry CVE-2023-28842.

Container imageDigestPackageFixed in
quay.io/openshift/origin-cli:4.8bb5e052770e5
github.com/docker/docker@v20.10.3+incompatible
20.10.24

Open the chart page →

15,466
pet-battle-tournamentpetbattle1.0.401 of 3See more

pet-battle-tournament petbattle 1.0.40

1 of the 3 container images this version deploys carry CVE-2023-28842.

Container imageDigestPackageFixed in
quay.io/openshift/origin-cli:4.8bb5e052770e5
github.com/docker/docker@v20.10.3+incompatible
20.10.24

Open the chart page →

15,466
loki-stackphntom2.10.21 of 2See more

loki-stack phntom 2.10.2

1 of the 2 container images this version deploys carry CVE-2023-28842.

Container imageDigestPackageFixed in
grafana/promtail:2.4.2626900031c4e
github.com/docker/docker@v20.10.8+incompatible
20.10.24

Open the chart page →

5,708
npre-essentialsphntom0.1.602 of 22See more

npre-essentials phntom 0.1.60

2 of the 22 container images this version deploys carry CVE-2023-28842.

Container imageDigestPackageFixed in
grafana/promtail:2.7.0c16c710f7333
github.com/docker/docker@v20.10.18+incompatible
20.10.24
phntom/chartmuseum:v0.15.29242b4df9e65
github.com/docker/docker@v20.10.17+incompatible
20.10.24

Open the chart page →

26,840
pixie-operator-helm2-chartpixie0.1.21 of 2See more

pixie-operator-helm2-chart pixie 0.1.2

1 of the 2 container images this version deploys carry CVE-2023-28842.

Container imageDigestPackageFixed in
quay.io/operator-framework/olmdigest-pinnedf9ea8cef95ac
github.com/docker/docker@v20.10.21+incompatible
20.10.24

Open the chart page →

1,753
loki-stackpyalive-cdmswebappVerified publisher2.6.51 of 4See more

loki-stack pyalive-cdmswebapp 2.6.5

1 of the 4 container images this version deploys carry CVE-2023-28842.

Container imageDigestPackageFixed in
grafana/promtail:2.4.2626900031c4e
github.com/docker/docker@v20.10.8+incompatible
20.10.24

Open the chart page →

6,525

Container images carrying it

156 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
quay.io/prometheus/prometheus:v2.37.056e7f18e05dd
github.com/docker/docker@v20.10.17+incompatible
20.10.24
1
quay.io/prometheus/prometheus:v2.33.591100b06e86d
github.com/docker/docker@v20.10.12+incompatible
20.10.24
1
quay.io/prometheus/prometheus:v2.34.0b37103e03399
github.com/docker/docker@v20.10.12+incompatible
20.10.24
1
quay.io/redhat-appstudio/appstudio-utils:dbbdd82734232e6289e8fbae5b4c858481a7c0577b4202c25b67
github.com/docker/docker@v20.10.8+incompatible
20.10.24
1
quay.io/rht-labs/stack-do500:3.0.86ba82beff18e
github.com/docker/docker@v20.10.3+incompatible
20.10.24
1
registry.gitlab.com/gitlab-org/cloud-native/gitlab-operator:0.5.136b19b72120e
github.com/docker/docker@v17.12.1-ce+incompatible
20.10.24
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.