StackRadar

CVE-2023-3446

Medium

Advisory

Published 19 Jul 2023In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.3
base score, highest
EPSS
0.065
93rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,202
of 17,790 indexed, latest versions
Container images
1,218
deployed by those charts
Fix available
4 of 5
affected packages

libopenssl-1_1-devel-1.1.1u-5.1 on GA media

Carried by container images the latest versions of 1,202 of 17,790 indexed charts deploy, on 1,218 images.

Affected packageAffected versionsFixed inImages
opensslapk1.1.1l-r7, 1.1.1l-r8, 1.1.1m-r1, 1.1.1n-r0+20 more1.1.1u-r2, 3.0.9-r3, 3.1.1-r3627
openssldeb1.0.1f-1ubuntu2.5, 1.0.1f-1ubuntu2.8, 1.0.1f-1ubuntu2.25, 1.0.1f-1ubuntu2.27+60 more1.0.1f-1ubuntu2.27+esm10, 1.0.2g-1ubuntu4.20+esm10, 1.1.1-1ubuntu2.1~18.04.23+esm3, 1.1.1f-1ubuntu2.20+4 more580
openssl1.0deb1.0.2n-1ubuntu5.3, 1.0.2n-1ubuntu5.4, 1.0.2n-1ubuntu5.6, 1.0.2n-1ubuntu5.10+2 more1.0.2n-1ubuntu5.13+esm115
nodejsdeb16.14.2-deb-1nodesource1, 16.18.0-deb-1nodesource1, 20.11.1-1nodesource1, 20.15.0-1nodesource1+1 moreno fix listed5
openssl-1_1rpm1.1.0i-14.6.1, 1.1.0i-lp151.8.3.11.1.0i-150100.14.59.1, 1.1.1u-5.19
OSV records
ALPINE-CVE-2023-3446DEBIAN-CVE-2023-3446UBUNTU-CVE-2023-3446openSUSE-SU-2024:13064-1SUSE-SU-2023:2961-1
Also known as
USN-6435-1, USN-6435-2, USN-6450-1, USN-6709-1, USN-7018-1

Charts affected

1,202 by stars
ChartLatestAffected imagesRadar Score
alertmanager-matrix-forwarderzloi-space1.0.11 of 2See more

alertmanager-matrix-forwarder zloi-space 1.0.1

1 of the 2 container images this version deploys carry CVE-2023-3446.

Container imageDigestPackageFixed in
zl0i/alertmanager-matrix-forwarder:v1.0.0e94047931739
openssl@1.1.1l-r7
1.1.1u-r2

Open the chart page →

3,118
clickhousezloi-space1.2.02 of 3See more

clickhouse zloi-space 1.2.0

2 of the 3 container images this version deploys carry CVE-2023-3446.

Container imageDigestPackageFixed in
yandex/clickhouse-client:21.3863f94a0f607
openssl@1.1.1-1ubuntu2.1~18.04.14
1.1.1-1ubuntu2.1~18.04.23+esm3
yandex/clickhouse-server:21.3.204eccfffb01d7
openssl@1.1.1f-1ubuntu2.10
1.1.1f-1ubuntu2.20

Open the chart page →

9,256

Container images carrying it

1,218 by charts deploying them

A fixed version is listed for 4 of the 5 affected packages.

Container imageDigestPackageFixed inUsed by
library/elasticsearch:8.15.0310b9fc03b06
openssl@1.1.1f-1ubuntu2.23
1.1.1f-1ubuntu2.fips.20
1
library/elasticsearch:7.17.0332c6d416808
openssl@1.1.1f-1ubuntu2.10
1.1.1f-1ubuntu2.20
1
library/elasticsearch:7.17.1588c2ec10c7f2
openssl@1.1.1f-1ubuntu2.20
1.1.1f-1ubuntu2.fips.20
1
library/elasticsearch:7.17.8fdc73b3249c1
openssl@1.1.1f-1ubuntu2.16
1.1.1f-1ubuntu2.20
1
library/flink:1.14.6-scala_2.122461f02672b3
openssl@3.0.2-0ubuntu1.6
3.0.2-0ubuntu1.12
1
library/kibana:7.17.150172f1c538e7
openssl@1.1.1f-1ubuntu2.20
1.1.1f-1ubuntu2.fips.20
1
library/kibana:8.18.004c0fc150f3a
openssl@1.1.1f-1ubuntu2.24
1.1.1f-1ubuntu2.fips.20
1
library/kibana:7.17.8c5781ba340ef
openssl@1.1.1f-1ubuntu2.16
1.1.1f-1ubuntu2.20
1
library/kibana:7.17.3e2e2031c15be
openssl@1.1.1f-1ubuntu2.12
1.1.1f-1ubuntu2.20
1
library/logstash:7.17.817a4f64e9cf5
openssl@1.1.1f-1ubuntu2.16
1.1.1f-1ubuntu2.20
1
library/mariadb:10.7.307e06f2e7ae9
openssl@1.1.1f-1ubuntu2.12
1.1.1f-1ubuntu2.20
1
library/mariadb:10.11.21c33370a599c
openssl@3.0.2-0ubuntu1.9
3.0.2-0ubuntu1.12
1
library/mariadb:10.422edfe1c7834
openssl@1.1.1f-1ubuntu2.22
1.1.1f-1ubuntu2.fips.20
1
library/mariadb:10.8.2-focal490f01279be1
openssl@1.1.1f-1ubuntu2.10
1.1.1f-1ubuntu2.20
1
library/mariadb:10.6.218a16204dc96c
openssl@1.1.1f-1ubuntu2.24
1.1.1f-1ubuntu2.fips.20
1
library/mariadb:10.79a48ac9f196f
openssl@1.1.1f-1ubuntu2.17
1.1.1f-1ubuntu2.20
1
library/mariadb:10.10.2bfc25a68e113
openssl@3.0.2-0ubuntu1.7
3.0.2-0ubuntu1.12
1
library/mariadb:10.6.15e22328f4d714
openssl@1.1.1f-1ubuntu2.19
1.1.1f-1ubuntu2.20
1
library/mariadb:10.9.4fbb8456ebdb1
openssl@3.0.2-0ubuntu1.7
3.0.2-0ubuntu1.12
1
library/mongo:4.4.1305678ae4e5e1
openssl@1.1.1f-1ubuntu2.12
1.1.1f-1ubuntu2.20
1
library/mongo:3.6146c1fd999a6
openssl@1.0.2g-1ubuntu4.19
1.0.2g-1ubuntu4.20+esm10
1
library/mongo:5.0.32-focal3b6c281e1c08
openssl@1.1.1f-1ubuntu2.24
1.1.1f-1ubuntu2.fips.20
1
library/mongo:4.4-bionic3d0e6df9fd5b
openssl@1.1.1-1ubuntu2.1~18.04.9
1.1.1-1ubuntu2.1~18.04.23+esm3
1
library/mongo:5.0.14-focal50cae5081ab4
openssl@1.1.1f-1ubuntu2.16
1.1.1f-1ubuntu2.20
1
library/mongo:6.0.12646902910d6a
openssl@3.0.2-0ubuntu1.12
3.0.2-0ubuntu1.12+Fips1
1
library/mongo:4.2699d652ed674
openssl@1.1.1-1ubuntu2.1~18.04.23
1.1.1-1ubuntu2.1~18.04.23+esm3
1
library/mongo:4.2.16ca49afbcb2b
openssl@1.1.1-1ubuntu2.1~18.04.4
1.1.1-1ubuntu2.1~18.04.23+esm3
1
library/mongo:6.0.271a63fc2438e
openssl@1.1.1f-1ubuntu2.16
1.1.1f-1ubuntu2.20
1
library/mongo:5.0.217c81758cb295
openssl@1.1.1f-1ubuntu2.19
1.1.1f-1ubuntu2.20
1
library/mongo:4.2.21-bionic9cb28f7291d9
openssl@1.1.1-1ubuntu2.1~18.04.20
1.1.1-1ubuntu2.1~18.04.23+esm3
1
library/mongo:4.4.18d23ec07162ca
openssl@1.1.1f-1ubuntu2.16
1.1.1f-1ubuntu2.20
1
library/nats:2.9.11-alpineccbe811b8575
openssl@3.0.7-r2
3.0.9-r3
1
library/nats:2.9.20-alpined6c6ae7df4a0
openssl@3.1.1-r1
3.1.1-r3
1
library/nats:2.9.6-alpine3.16f576cdc17cc3
openssl@1.1.1s-r0
1.1.1u-r2
1
library/nginx:1.23.2-alpine455c39afebd4
openssl@1.1.1s-r0
1.1.1u-r2
1
library/nginx:1.25.167f9a4f10d14
openssl@3.0.9-1
3.0.10-1~deb12u1
1
library/php:7-fpm-alpine0aeb129a60da
openssl@1.1.1s-r0
1.1.1u-r2
1
library/postgres:12.14-alpine3.174b100eafe128
openssl@3.0.8-r3
3.0.9-r3
1
library/postgres:14.1-alpine578ca5c8452c
openssl@1.1.1l-r7
1.1.1u-r2
1
library/postgres:13.6-alpine8522c9920d88
openssl@1.1.1n-r0
1.1.1u-r2
1
library/postgres:15.38775adb39f0d
openssl@3.0.9-1
3.0.10-1~deb12u1
1
library/rabbitmq:3.12.100742852455ad
openssl@3.0.2-0ubuntu1.12
3.0.2-0ubuntu1.12+Fips1
1
library/rabbitmq:3.11.5-management1b0f675d2f24
openssl@1.1.1f-1ubuntu2.16
1.1.1f-1ubuntu2.20
1
library/rabbitmq:3.8.34-alpine711d76bc8d98
openssl@1.1.1o-r0
1.1.1u-r2
1
library/rabbitmq:3.7-managementb6dd45cc35b3
openssl@1.1.1-1ubuntu2.1~18.04.6
1.1.1-1ubuntu2.1~18.04.23+esm3
1
library/rabbitmq:3.8-management-alpinec3e526769bfd
openssl@1.1.1o-r0
1.1.1u-r2
1
library/redis:6.0.16-alpine0f0e2fa71653
openssl@3.0.7-r2
3.0.9-r3
1
library/redis:6.2.6-alpine3.15132337b9d774
openssl@1.1.1n-r0
1.1.1u-r2
1
library/redis:alpine3.162700d5097763
openssl@1.1.1s-r0
1.1.1u-r2
1
library/sonarqube:10.0.0-communityef9723cf4fe4
openssl@3.0.2-0ubuntu1.10
3.0.2-0ubuntu1.12
1

syft 1.42.1 · advisories as of 16 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.