StackRadar

CVE-2023-3446

Medium

Advisory

Published 19 Jul 2023In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.3
base score, highest
EPSS
0.065
93rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,202
of 17,790 indexed, latest versions
Container images
1,218
deployed by those charts
Fix available
4 of 5
affected packages

libopenssl-1_1-devel-1.1.1u-5.1 on GA media

Carried by container images the latest versions of 1,202 of 17,790 indexed charts deploy, on 1,218 images.

Affected packageAffected versionsFixed inImages
opensslapk1.1.1l-r7, 1.1.1l-r8, 1.1.1m-r1, 1.1.1n-r0+20 more1.1.1u-r2, 3.0.9-r3, 3.1.1-r3627
openssldeb1.0.1f-1ubuntu2.5, 1.0.1f-1ubuntu2.8, 1.0.1f-1ubuntu2.25, 1.0.1f-1ubuntu2.27+60 more1.0.1f-1ubuntu2.27+esm10, 1.0.2g-1ubuntu4.20+esm10, 1.1.1-1ubuntu2.1~18.04.23+esm3, 1.1.1f-1ubuntu2.20+4 more580
openssl1.0deb1.0.2n-1ubuntu5.3, 1.0.2n-1ubuntu5.4, 1.0.2n-1ubuntu5.6, 1.0.2n-1ubuntu5.10+2 more1.0.2n-1ubuntu5.13+esm115
nodejsdeb16.14.2-deb-1nodesource1, 16.18.0-deb-1nodesource1, 20.11.1-1nodesource1, 20.15.0-1nodesource1+1 moreno fix listed5
openssl-1_1rpm1.1.0i-14.6.1, 1.1.0i-lp151.8.3.11.1.0i-150100.14.59.1, 1.1.1u-5.19
OSV records
ALPINE-CVE-2023-3446DEBIAN-CVE-2023-3446UBUNTU-CVE-2023-3446openSUSE-SU-2024:13064-1SUSE-SU-2023:2961-1
Also known as
USN-6435-1, USN-6435-2, USN-6450-1, USN-6709-1, USN-7018-1

Charts affected

1,202 by stars
ChartLatestAffected imagesRadar Score
alertmanager-matrix-forwarderzloi-space1.0.11 of 2See more

alertmanager-matrix-forwarder zloi-space 1.0.1

1 of the 2 container images this version deploys carry CVE-2023-3446.

Container imageDigestPackageFixed in
zl0i/alertmanager-matrix-forwarder:v1.0.0e94047931739
openssl@1.1.1l-r7
1.1.1u-r2

Open the chart page →

3,118
clickhousezloi-space1.2.02 of 3See more

clickhouse zloi-space 1.2.0

2 of the 3 container images this version deploys carry CVE-2023-3446.

Container imageDigestPackageFixed in
yandex/clickhouse-client:21.3863f94a0f607
openssl@1.1.1-1ubuntu2.1~18.04.14
1.1.1-1ubuntu2.1~18.04.23+esm3
yandex/clickhouse-server:21.3.204eccfffb01d7
openssl@1.1.1f-1ubuntu2.10
1.1.1f-1ubuntu2.20

Open the chart page →

9,256

Container images carrying it

1,218 by charts deploying them

A fixed version is listed for 4 of the 5 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/advplyr/audiobookshelf:2.0.3140aed2752c3
openssl@1.1.1n-r0
1.1.1u-r2
1
ghcr.io/akhilrex/podgrab:1.0.0bce133f3f511
openssl@1.1.1q-r0
1.1.1u-r2
1
ghcr.io/arpa-network/node-client:latest657a2c9f6e6d
openssl@1.1.1s-r0
1.1.1u-r2
1
ghcr.io/arpa-network/node-shell:latest6b359ace1408
openssl@1.1.1s-r0
1.1.1u-r2
1
ghcr.io/astriaorg/ria-faucet:0.0.1a06c8ebef427
openssl@3.1.1-r1
3.1.1-r3
1
ghcr.io/autobrr/autobrr:v1.10.0d4022cd32df5
openssl@1.1.1q-r0
1.1.1u-r2
1
ghcr.io/aws-exporters/prometheus-ecr-exporter:0.1.442b0c87470d6
openssl@1.1.1l-r7
1.1.1u-r2
1
ghcr.io/aws-exporters/prometheus-inspector-exporter:0.0.29c7c11293b3c
openssl@1.1.1l-r7
1.1.1u-r2
1
ghcr.io/bakito/sealed-secrets-web:v3.0.574aff24d4b97
openssl@3.0.7-r0
3.0.9-r3
1
ghcr.io/beluga-cloud/jellyfin/jellyfin:10.8.1368f52b993a7f
openssl@3.0.2-0ubuntu1.12
3.0.2-0ubuntu1.12+Fips1
1
ghcr.io/brittonhayes/arma-reforger:latest6fde1edc0983
openssl@1.1.1f-1ubuntu2.17
1.1.1f-1ubuntu2.20
1
ghcr.io/caarlos0/domain_exporter:v1.18.0-arm64c852606428cf
openssl@1.1.1q-r0
1.1.1u-r2
1
ghcr.io/camunda-community-hub/zeebe-simple-monitor:2.6.2d9d796a1b846
openssl@3.0.2-0ubuntu1.12
3.0.2-0ubuntu1.12+Fips1
1
ghcr.io/ckotzbauer/chekrf299baf467b5
openssl@1.1.1l-r7
1.1.1u-r2
1
ghcr.io/cloudfoundry-incubator/quarks-job:v1.0.213760eee87f839
openssl-1_1@1.1.0i-14.6.1
1.1.0i-150100.14.59.1
1
ghcr.io/cloudfoundry-incubator/quarks-operator:v7.0.1-0.g5396b116a1432b0d503
openssl-1_1@1.1.0i-14.6.1
1.1.0i-150100.14.59.1
1
ghcr.io/cloudfoundry-incubator/quarks-secret:v1.0.754f059af4de8ed
openssl-1_1@1.1.0i-14.6.1
1.1.0i-150100.14.59.1
1
ghcr.io/cloudfoundry-incubator/quarks-statefulset:v0.0.1304-g4b4f2ac5c7c70b527255
openssl-1_1@1.1.0i-14.6.1
1.1.0i-150100.14.59.1
1
ghcr.io/cloudfoundry-incubator/quarks-statefulset:v0.0.1308-g6a8b2220e24a9e0a21b6
openssl-1_1@1.1.0i-14.6.1
1.1.0i-150100.14.59.1
1
ghcr.io/clusterpedia-io/clusterpedia/apiserver:v0.6.03d089d9078f8
openssl@1.1.1s-r0
1.1.1u-r2
1
ghcr.io/clusterpedia-io/clusterpedia/clustersynchro-manager:v0.6.082cc9a77f6d6
openssl@1.1.1s-r0
1.1.1u-r2
1
ghcr.io/clusterpedia-io/clusterpedia/controller-manager:v0.6.081669df338e0
openssl@1.1.1s-r0
1.1.1u-r2
1
ghcr.io/conductionnl/berichtservice-php:latestee6a21e66ff0
openssl@1.1.1n-r0
1.1.1u-r2
1
ghcr.io/conductionnl/commonground-gateway-frontend:dev3b3fbb57cae8
openssl@1.1.1q-r0
1.1.1u-r2
1
ghcr.io/conductionnl/contactcatalogus-php:latesteeb625bd660c
openssl@1.1.1n-r0
1.1.1u-r2
1
ghcr.io/conductionnl/eav-component-php:latest24bbca4a52a8
openssl@1.1.1n-r0
1.1.1u-r2
1
ghcr.io/conductionnl/education-component-php:latestda6b05a1a601
openssl@1.1.1n-r0
1.1.1u-r2
1
ghcr.io/conductionnl/medewerkercatalogus-php:latest1ea5412bed26
openssl@1.1.1n-r0
1.1.1u-r2
1
ghcr.io/conductionnl/user-component-php:latest198db44fabb5
openssl@1.1.1n-r0
1.1.1u-r2
1
ghcr.io/conductionnl/webresourcecatalogus-php:latest8f1bbd5cda85
openssl@1.1.1n-r0
1.1.1u-r2
1
ghcr.io/cosmo-workspace/cosmo-traefik-plugins:v0.9.1435518f49e23
openssl@3.1.0-r4
3.1.1-r3
1
ghcr.io/crazy-max/samba:4.15.5bed6f4ec2e82
openssl@1.1.1l-r7
1.1.1u-r2
1
ghcr.io/curium-rocks/kube-admission-controller-starter:maine9716966f30b
openssl@1.1.1q-r0
1.1.1u-r2
1
ghcr.io/curium-rocks/mitre-siphon:main503c00321502
openssl@3.1.1-r1
3.1.1-r3
1
ghcr.io/daocloud/dao-2048:v1.4.121275bc02f75
openssl@3.0.8-r0
3.0.9-r3
1
ghcr.io/dask/dask:2024.1.0080150de7d86
openssl@1.1.1f-1ubuntu2.20
1.1.1f-1ubuntu2.fips.20
1
ghcr.io/dask/dask-notebook:2024.1.0f53bde3acd4f
openssl@3.0.2-0ubuntu1.12
3.0.2-0ubuntu1.12+Fips1
1
ghcr.io/data-fair/elasticsearch:7.17.1aa45adaf59a7
openssl@1.1.1f-1ubuntu2.10
1.1.1f-1ubuntu2.20
1
ghcr.io/data-fair/metrics:0a8d40779eeae
openssl@3.1.1-r1
3.1.1-r3
1
ghcr.io/data-fair/portals:18b621866ceb2
openssl@3.0.8-r3
3.0.9-r3
1
ghcr.io/deepch/rtsptoweb:v2.2.0f9de3a1a5deb
openssl@1.1.1l-r7
1.1.1u-r2
1
ghcr.io/dexidp/dex:v2.35.313964b29d63e
openssl@1.1.1q-r0
1.1.1u-r2
1
ghcr.io/dexidp/dex:v2.37.0f579d00721b0
openssl@3.1.1-r1
3.1.1-r3
1
ghcr.io/djcass44/cso-proxy:cccf49fdb360d44125ad
openssl@1.1.1-1ubuntu2.1~18.04.14
1.1.1-1ubuntu2.1~18.04.23+esm3
1
ghcr.io/dodevops/azure-advanced-backup:0.4.01041d4449e49
openssl@1.1.1q-r0
1.1.1u-r2
1
ghcr.io/dodevops/scalyr-k8snode-manager:latestfc39fcdd3968
openssl@1.1.1n-r0
1.1.1u-r2
1
ghcr.io/douban/aliyun-exporter:mainb7c694331362
openssl@1.1.1l-r7
1.1.1u-r2
1
ghcr.io/douban/qiniu-exporter:maind1da3bcfad7d
openssl@1.1.1l-r7
1.1.1u-r2
1
ghcr.io/douban/ucloud-exporter:mainb4bb8a9021a2
openssl@1.1.1l-r7
1.1.1u-r2
1
ghcr.io/douban/upyun-exporter:main6810900c9c4a
openssl@1.1.1l-r7
1.1.1u-r2
1

syft 1.42.1 · advisories as of 16 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.