StackRadar

CVE-2023-3446

Medium

Advisory

Published 19 Jul 2023In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.3
base score, highest
EPSS
0.065
93rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,202
of 17,787 indexed, latest versions
Container images
1,218
deployed by those charts
Fix available
4 of 5
affected packages

libopenssl-1_1-devel-1.1.1u-5.1 on GA media

Carried by container images the latest versions of 1,202 of 17,787 indexed charts deploy, on 1,218 images.

Affected packageAffected versionsFixed inImages
opensslapk1.1.1l-r7, 1.1.1l-r8, 1.1.1m-r1, 1.1.1n-r0+20 more1.1.1u-r2, 3.0.9-r3, 3.1.1-r3627
openssldeb1.0.1f-1ubuntu2.5, 1.0.1f-1ubuntu2.8, 1.0.1f-1ubuntu2.25, 1.0.1f-1ubuntu2.27+60 more1.0.1f-1ubuntu2.27+esm10, 1.0.2g-1ubuntu4.20+esm10, 1.1.1-1ubuntu2.1~18.04.23+esm3, 1.1.1f-1ubuntu2.20+4 more580
openssl1.0deb1.0.2n-1ubuntu5.3, 1.0.2n-1ubuntu5.4, 1.0.2n-1ubuntu5.6, 1.0.2n-1ubuntu5.10+2 more1.0.2n-1ubuntu5.13+esm115
nodejsdeb16.14.2-deb-1nodesource1, 16.18.0-deb-1nodesource1, 20.11.1-1nodesource1, 20.15.0-1nodesource1+1 moreno fix listed5
openssl-1_1rpm1.1.0i-14.6.1, 1.1.0i-lp151.8.3.11.1.0i-150100.14.59.1, 1.1.1u-5.19
OSV records
ALPINE-CVE-2023-3446DEBIAN-CVE-2023-3446UBUNTU-CVE-2023-3446openSUSE-SU-2024:13064-1SUSE-SU-2023:2961-1
Also known as
USN-6435-1, USN-6435-2, USN-6450-1, USN-6709-1, USN-7018-1

Charts affected

1,202 by stars
ChartLatestAffected imagesRadar Score
alertmanager-matrix-forwarderzloi-space1.0.11 of 2See more

alertmanager-matrix-forwarder zloi-space 1.0.1

1 of the 2 container images this version deploys carry CVE-2023-3446.

Container imageDigestPackageFixed in
zl0i/alertmanager-matrix-forwarder:v1.0.0e94047931739
openssl@1.1.1l-r7
1.1.1u-r2

Open the chart page →

3,118
clickhousezloi-space1.2.02 of 3See more

clickhouse zloi-space 1.2.0

2 of the 3 container images this version deploys carry CVE-2023-3446.

Container imageDigestPackageFixed in
yandex/clickhouse-client:21.3863f94a0f607
openssl@1.1.1-1ubuntu2.1~18.04.14
1.1.1-1ubuntu2.1~18.04.23+esm3
yandex/clickhouse-server:21.3.204eccfffb01d7
openssl@1.1.1f-1ubuntu2.10
1.1.1f-1ubuntu2.20

Open the chart page →

9,250

Container images carrying it

1,218 by charts deploying them

A fixed version is listed for 4 of the 5 affected packages.

Container imageDigestPackageFixed inUsed by
quay.io/devtron/bats:v1.4.1488cf079f415
openssl@1.1.1n-r0
1.1.1u-r2
3
quay.io/devtron/google-chat-alert-manager:v2.0.239f2c6e0af38
openssl@1.1.1f-1ubuntu2.12
1.1.1f-1ubuntu2.20
3
quay.io/devtron/inception:7beef376-948-313784c3b91bebd3d
openssl@1.0.2g-1ubuntu4.20
1.0.2g-1ubuntu4.20+esm10
3
quay.io/devtron/k8s-utils:tutum-curl38b970c84cce
openssl@1.1.1q-r0
1.1.1u-r2
3
quay.io/devtron/k8s-utils:807ca3c2-488-14005f296c2ec5db7
openssl@3.0.2-0ubuntu1.10
3.0.2-0ubuntu1.12
3
quay.io/devtron/nats:2.9.3-alpinef0cf3c3ab495
openssl@1.1.1q-r0
1.1.1u-r2
3
quay.io/devtron/nats-box:latest48cdd3054b20
openssl@1.1.1q-r0
1.1.1u-r2
3
quay.io/devtron/svn-git-sync:v78e54bc2d261f
openssl@1.1.1o-r0
1.1.1u-r2
3
quay.io/metallb/controller:v0.13.101b33357b3595
openssl@3.1.0-r4
3.1.1-r3
3
registry.k8s.io/ingress-nginx/controller:v1.5.14ba73c697770
openssl@1.1.1s-r0
1.1.1u-r2
3
registry.k8s.io/ingress-nginx/controller:v1.8.1e5c4824e7375
openssl@3.1.1-r1
3.1.1-r3
3
agoldis/sorry-cypress-dashboard:2.5.11e061e5714238
openssl@3.0.8-r3
3.0.9-r3
2
aquasec/kube-hunter:0.6.8e64fe49f059f
openssl@1.1.1n-r0
1.1.1u-r2
2
clickhouse/clickhouse-server:24.2ed9640bfff07
openssl@1.1.1f-1ubuntu2.22
1.1.1f-1ubuntu2.fips.20
2
cs3org/revad:v1.24.0e80a4d67b352
openssl@1.1.1t-r2
1.1.1u-r2
2
cs3org/wopiserver:v9.4.202a9e78757b4
openssl@3.0.8-r0
3.0.9-r3
2
daniacobext/airports-frontend:latest9eae4d39fc33
openssl@3.0.9-r1
3.0.9-r3
2
dependencytrack/frontend:4.6.124422d762e08
openssl@1.1.1q-r0
1.1.1u-r2
2
devopsjourney1/mywebapp:latestbd1ec6838570
openssl@1.1.1q-r0
1.1.1u-r2
2
eqalpha/keydb:latest6537505c4235
openssl@1.1.1f-1ubuntu2.20
1.1.1f-1ubuntu2.fips.20
2
eqalpha/keydb:x86_64_v6.3.4eceb1806730c
openssl@1.1.1f-1ubuntu2.20
1.1.1f-1ubuntu2.fips.20
2
filebrowser/filebrowser:v2.23.086e8449ff8ff
openssl@1.1.1q-r0
1.1.1u-r2
2
freeradius/freeradius-server:3.0.2121c8bfa904d8
openssl@1.1.1-1ubuntu2.1~18.04.5
1.1.1-1ubuntu2.1~18.04.23+esm3
2
geoservercloud/geoserver-cloud-gateway:1.0-RC3756559ee788a
openssl@1.1.1f-1ubuntu2.8
1.1.1f-1ubuntu2.20
2
geoservercloud/geoserver-cloud-rest:1.0-RC399540eef78ad
openssl@1.1.1f-1ubuntu2.8
1.1.1f-1ubuntu2.20
2
geoservercloud/geoserver-cloud-wcs:1.0-RC35c254c53a357
openssl@1.1.1f-1ubuntu2.8
1.1.1f-1ubuntu2.20
2
geoservercloud/geoserver-cloud-webui:1.0-RC3c687b1cbc891
openssl@1.1.1f-1ubuntu2.8
1.1.1f-1ubuntu2.20
2
geoservercloud/geoserver-cloud-wfs:1.0-RC35288f320cf36
openssl@1.1.1f-1ubuntu2.8
1.1.1f-1ubuntu2.20
2
geoservercloud/geoserver-cloud-wms:1.0-RC3a30a60ac6cd0
openssl@1.1.1f-1ubuntu2.8
1.1.1f-1ubuntu2.20
2
gjeanmart/safe-ganache-node:latest926264c8f2d1
openssl@3.0.9-1
3.0.10-1~deb12u1
2
goelankit/cortex-gateway:v1.1.00d9a82dcf026
openssl@1.1.1n-r0
1.1.1u-r2
2
grafana/grafana:9.2.4057896e23443
openssl@1.1.1q-r0
1.1.1u-r2
2
grafana/grafana:8.5.042d3e6bc1865
openssl@1.1.1n-r0
1.1.1u-r2
2
grafana/loki:2.5.0f9ef133793af
openssl@1.1.1n-r0
1.1.1u-r2
2
hashicorp/consul:1.14.2e38576edcdfd
openssl@1.1.1s-r1
1.1.1u-r2
2
hashicorp/consul-k8s-control-plane:1.0.2538a3436398d
openssl@1.1.1s-r0
1.1.1u-r2
2
hashicorp/vault:1.12.18de4d5f31b38
openssl@1.1.1q-r0
1.1.1u-r2
2
hashicorp/vault-k8s:1.1.0844337076b72
openssl@1.1.1s-r0
1.1.1u-r2
2
hjacobs/kube-downscaler:23.2.0-6-gc9b88e84b2147f47425
openssl@3.0.9-1
3.0.10-1~deb12u1
2
hookiesolutions/webhookie:latest0629694246ba
openssl@1.1.1f-1ubuntu2.8
1.1.1f-1ubuntu2.20
2
hyperledger/besu:22.4-openjdk-latesta674d35eec9a
openssl@1.1.1f-1ubuntu2.16
1.1.1f-1ubuntu2.20
2
interlayhq/interbtc:latesta66d0e35e70f
openssl@1.1.1f-1ubuntu2.24
1.1.1f-1ubuntu2.fips.20
2
interlayhq/interbtc-clients:vault-masterc3e311de67da
openssl@1.1.1f-1ubuntu2.10
1.1.1f-1ubuntu2.20
2
iomesh/localpv-manager:v0.2.0f13deacac3f4
openssl@1.1.1t-r0
1.1.1u-r2
2
istio/examples-bookinfo-reviews-v1:1.15.040e8aba77c1b
openssl@1.0.2g-1ubuntu4.15
1.0.2g-1ubuntu4.20+esm10
2
istio/examples-bookinfo-reviews-v1:1.14.0ee156b8aefd6
openssl@1.0.2g-1ubuntu4.14
1.0.2g-1ubuntu4.20+esm10
2
istio/examples-bookinfo-reviews-v2:1.15.0e86d247b7ac2
openssl@1.0.2g-1ubuntu4.15
1.0.2g-1ubuntu4.20+esm10
2
istio/examples-bookinfo-reviews-v2:1.14.0eab80bcd2132
openssl@1.0.2g-1ubuntu4.14
1.0.2g-1ubuntu4.20+esm10
2
istio/examples-bookinfo-reviews-v3:1.14.01e37fca43550
openssl@1.0.2g-1ubuntu4.14
1.0.2g-1ubuntu4.20+esm10
2
istio/examples-bookinfo-reviews-v3:1.15.0e454cab754cf
openssl@1.0.2g-1ubuntu4.15
1.0.2g-1ubuntu4.20+esm10
2

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.