CVE-2023-29383
LowAdvisory
Published 14 Apr 2023In the index since 5 Sept 2026
- Severity
- Low
- worst across findings
- CVSS
- 3.3
- base score, highest
- EPSS
- 0.004
- 36th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 1,175
- of 17,790 indexed, latest versions
- Container images
- 1,208
- deployed by those charts
- Fix available
- 2 of 2
- affected packages
libsubid-devel-4.13-6.1 on GA media
Carried by container images the latest versions of 1,175 of 17,790 indexed charts deploy, on 1,208 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| shadowrpm | 4.6-3.5.6, 4.6-lp151.2.3.2 | 4.6-150100.3.8.1, 4.13-6.1 | 10 |
| shadowdeb | 1:4.1.5.1-1ubuntu9, 1:4.1.5.1-1ubuntu9.5, 1:4.2-3.1ubuntu5, 1:4.2-3.1ubuntu5.2+16 more | 1:4.13+dfsg1-1+deb12u1 | 1,198 |
Charts affected
1,175 by stars
Container images carrying it
1,208 by charts deploying them
A fixed version is listed for 2 of the 2 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| ghcr.io/ | 22ae556e0de4 | shadow | 1:4.13+dfsg1-1+deb12u1 | 1 |
| ghcr.io/ | 78a82d810709 | shadow | 1:4.13+dfsg1-1+deb12u1 | 1 |
| ghcr.io/ | ab40c1745534 | shadow | 1:4.13+dfsg1-1+deb12u1 | 1 |
| ghcr.io/ | 923a3f704b21 | shadow | no fix listed | 1 |
| ghcr.io/ | a4d32c2f68b3 | shadow | 1:4.13+dfsg1-1+deb12u1 | 1 |
| ghcr.io/ | 03c1ddbda33b | shadow | no fix listed | 1 |
| ghcr.io/ | 24a0113d5fb0 | shadow | no fix listed | 1 |
| ghcr.io/ | 7c5052aa4e3c | shadow | 1:4.13+dfsg1-1+deb12u1 | 1 |
| ghcr.io/ | 472a25038957 | shadow | 1:4.13+dfsg1-1+deb12u1 | 1 |
| ghcr.io/ | 3fbe4c29d14c | shadow | no fix listed | 1 |
| ghcr.io/ | 39d48995a5bd | shadow | 1:4.13+dfsg1-1+deb12u1 | 1 |
| ghcr.io/ | 66db77d7856c | shadow | 1:4.13+dfsg1-1+deb12u1 | 1 |
| ghcr.io/ | fa7d5cc7fb7d | shadow | 1:4.13+dfsg1-1+deb12u1 | 1 |
| ghcr.io/ | 0e05a7b49c33 | shadow | no fix listed | 1 |
| ghcr.io/ | 10006bc0f309 | shadow | no fix listed | 1 |
| ghcr.io/ | b52ff07f9f0c | shadow | no fix listed | 1 |
| ghcr.io/ | 4d763d58f11d | shadow | 1:4.13+dfsg1-1+deb12u1 | 1 |
| ghcr.io/ | 6047599cd78e | shadow | no fix listed | 1 |
| ghcr.io/ | 984dc4f19162 | shadow | 1:4.13+dfsg1-1+deb12u1 | 1 |
| ghcr.io/ | c9bd82dc5fda | shadow | no fix listed | 1 |
| ghcr.io/ | fdb5501cdfb9 | shadow | no fix listed | 1 |
| ghcr.io/ | 5c6b8f91f1c4 | shadow | no fix listed | 1 |
| ghcr.io/ | 827aa2f2389d | shadow | no fix listed | 1 |
| ghcr.io/ | 3a4715b46aa2 | shadow | no fix listed | 1 |
| ghcr.io/ | 54ebc1f90963 | shadow | no fix listed | 1 |
| ghcr.io/ | cbd5d4cc1245 | shadow | no fix listed | 1 |
| ghcr.io/ | e5571acd10ce | shadow | no fix listed | 1 |
| ghcr.io/ | ef3670f7e0a8 | shadow | no fix listed | 1 |
| ghcr.io/ | ef756c7d784b | shadow | no fix listed | 1 |
| ghcr.io/ | c863aa9875fa | shadow | no fix listed | 1 |
| ghcr.io/ | 61deadd1ec78 | shadow | no fix listed | 1 |
| ghcr.io/ | 4273dfaf0295 | shadow | no fix listed | 1 |
| ghcr.io/ | ad943e9309e4 | shadow | no fix listed | 1 |
| ghcr.io/ | c2d6e775db5a | shadow | no fix listed | 1 |
| ghcr.io/ | 0eb230e2381a | shadow | no fix listed | 1 |
| ghcr.io/ | 4ea617c30397 | shadow | no fix listed | 1 |
| ghcr.io/ | 6011182e3946 | shadow | no fix listed | 1 |
| ghcr.io/ | 448045c4270b | shadow | no fix listed | 1 |
| ghcr.io/ | 292b3614670f | shadow | no fix listed | 1 |
| ghcr.io/ | 779858b5e11d | shadow | no fix listed | 1 |
| ghcr.io/ | 4ed7a896dd2b | shadow | no fix listed | 1 |
| ghcr.io/ | f52e66eff50b | shadow | no fix listed | 1 |
| ghcr.io/ | 865ff4da5686 | shadow | no fix listed | 1 |
| ghcr.io/ | b5ade0d9cc6b | shadow | 1:4.13+dfsg1-1+deb12u1 | 1 |
| ghcr.io/ | 24efef013a53 | shadow | no fix listed | 1 |
| ghcr.io/ | e28e0e7de11b | shadow | no fix listed | 1 |
| ghcr.io/ | 01563adc95fd | shadow | no fix listed | 1 |
| ghcr.io/ | 2b92df1143b9 | shadow | no fix listed | 1 |
| ghcr.io/ | 600221f0f43f | shadow | no fix listed | 1 |
| ghcr.io/ | a85e03d8bc1d | shadow | no fix listed | 1 |