StackRadar

CVE-2023-3446

Medium

Advisory

Published 19 Jul 2023In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.3
base score, highest
EPSS
0.065
93rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,202
of 17,787 indexed, latest versions
Container images
1,218
deployed by those charts
Fix available
4 of 5
affected packages

libopenssl-1_1-devel-1.1.1u-5.1 on GA media

Carried by container images the latest versions of 1,202 of 17,787 indexed charts deploy, on 1,218 images.

Affected packageAffected versionsFixed inImages
opensslapk1.1.1l-r7, 1.1.1l-r8, 1.1.1m-r1, 1.1.1n-r0+20 more1.1.1u-r2, 3.0.9-r3, 3.1.1-r3627
openssldeb1.0.1f-1ubuntu2.5, 1.0.1f-1ubuntu2.8, 1.0.1f-1ubuntu2.25, 1.0.1f-1ubuntu2.27+60 more1.0.1f-1ubuntu2.27+esm10, 1.0.2g-1ubuntu4.20+esm10, 1.1.1-1ubuntu2.1~18.04.23+esm3, 1.1.1f-1ubuntu2.20+4 more580
openssl1.0deb1.0.2n-1ubuntu5.3, 1.0.2n-1ubuntu5.4, 1.0.2n-1ubuntu5.6, 1.0.2n-1ubuntu5.10+2 more1.0.2n-1ubuntu5.13+esm115
nodejsdeb16.14.2-deb-1nodesource1, 16.18.0-deb-1nodesource1, 20.11.1-1nodesource1, 20.15.0-1nodesource1+1 moreno fix listed5
openssl-1_1rpm1.1.0i-14.6.1, 1.1.0i-lp151.8.3.11.1.0i-150100.14.59.1, 1.1.1u-5.19
OSV records
ALPINE-CVE-2023-3446DEBIAN-CVE-2023-3446UBUNTU-CVE-2023-3446openSUSE-SU-2024:13064-1SUSE-SU-2023:2961-1
Also known as
USN-6435-1, USN-6435-2, USN-6450-1, USN-6709-1, USN-7018-1

Charts affected

1,202 by stars
ChartLatestAffected imagesRadar Score
alertmanager-matrix-forwarderzloi-space1.0.11 of 2See more

alertmanager-matrix-forwarder zloi-space 1.0.1

1 of the 2 container images this version deploys carry CVE-2023-3446.

Container imageDigestPackageFixed in
zl0i/alertmanager-matrix-forwarder:v1.0.0e94047931739
openssl@1.1.1l-r7
1.1.1u-r2

Open the chart page →

3,118
clickhousezloi-space1.2.02 of 3See more

clickhouse zloi-space 1.2.0

2 of the 3 container images this version deploys carry CVE-2023-3446.

Container imageDigestPackageFixed in
yandex/clickhouse-client:21.3863f94a0f607
openssl@1.1.1-1ubuntu2.1~18.04.14
1.1.1-1ubuntu2.1~18.04.23+esm3
yandex/clickhouse-server:21.3.204eccfffb01d7
openssl@1.1.1f-1ubuntu2.10
1.1.1f-1ubuntu2.20

Open the chart page →

9,250

Container images carrying it

1,218 by charts deploying them

A fixed version is listed for 4 of the 5 affected packages.

Container imageDigestPackageFixed inUsed by
istio/kubectl:1.5.10dbb7726d1bf0
openssl@1.1.1-1ubuntu2.1~18.04.6
1.1.1-1ubuntu2.1~18.04.23+esm3
2
istio/proxyv2:1.18.0757d28c24100
openssl@3.0.2-0ubuntu1.10
3.0.2-0ubuntu1.12
2
istio/proxyv2:1.10.3a78b7a165744
openssl@1.1.1-1ubuntu2.1~18.04.9
1.1.1-1ubuntu2.1~18.04.23+esm3
2
k0sproject/k0s:v1.26.0-k0s.0f04635825d51
openssl@1.1.1s-r0
1.1.1u-r2
2
kiwigrid/k8s-sidecar:1.24.44138bea678f0
openssl@1.1.1t-r2
1.1.1u-r2
2
kiwigrid/k8s-sidecar:1.24.35af76eebbba7
openssl@1.1.1t-r2
1.1.1u-r2
2
krtk6160/galoy-nostrcc82a694f818
openssl@3.0.8-r0
3.0.9-r3
2
lachlanevenson/k8s-kubectl:v1.25.4af5cea3f2e40
openssl@3.0.7-r0
3.0.9-r3
2
library/bash:alpine3.15463b668dccc3
openssl@1.1.1q-r0
1.1.1u-r2
2
library/cassandra:3.11.65aa8400b4b3b
openssl@1.1.1-1ubuntu2.1~18.04.6
1.1.1-1ubuntu2.1~18.04.23+esm3
2
library/elasticsearch:7.17.35e6ac15bf6a5
openssl@1.1.1f-1ubuntu2.12
1.1.1f-1ubuntu2.20
2
library/influxdb:2.6.1-alpine44a366dd7724
openssl@3.0.8-r3
3.0.9-r3
2
library/mariadb:10.8.30abf60f81588
openssl@3.0.2-0ubuntu1.6
3.0.2-0ubuntu1.12
2
library/mongo:5.041108d183e97
openssl@1.1.1f-1ubuntu2.24
1.1.1f-1ubuntu2.fips.20
2
library/mongo:4.2.358b25d51baa1
openssl@1.1.1-1ubuntu2.1~18.04.5
1.1.1-1ubuntu2.1~18.04.23+esm3
2
library/nats:2.9.17-alpine1a7b320b2942
openssl@3.1.0-r4
3.1.1-r3
2
library/nats:2.8.4-alpine988010f74b61
openssl@1.1.1q-r0
1.1.1u-r2
2
library/postgres:9.6-alpine8342bcb43446
openssl@1.1.1l-r7
1.1.1u-r2
2
library/postgres:15.2-alpined9c304353c03
openssl@3.0.8-r3
3.0.9-r3
2
library/python:3.7eedf63967cdb
openssl@3.0.9-1
3.0.10-1~deb12u1
2
library/rabbitmq:3.12.1-managementf020c06da226
openssl@3.0.2-0ubuntu1.10
3.0.2-0ubuntu1.12
2
library/redis:5.0-alpine1a3c60929533
openssl@1.1.1s-r0
1.1.1u-r2
2
lightstep/collector:2021-01-26_23-02-36Z11c5569aaf3b
openssl@1.0.2g-1ubuntu4.15
1.0.2g-1ubuntu4.20+esm10
2
listmonk/listmonk:v2.1.0d2eac77ddfad
openssl@1.1.1l-r7
1.1.1u-r2
2
mbentley/omada-controller:4.3f4e682274bed
openssl@1.1.1-1ubuntu2.1~18.04.23
1.1.1-1ubuntu2.1~18.04.23+esm3
2
mesosphere/kubeaddons-catalog:v0.11.4073db43d0b8b
openssl@1.1.1f-1ubuntu2
1.1.1f-1ubuntu2.20
2
metabase/metabase:v0.45.21fb334ce4820
openssl@3.0.7-r2
3.0.9-r3
2
mojaloop/reporting-hub-bop-api-svc:v4.1.2b45a2d6f0f2a
openssl@1.1.1n-r0
1.1.1u-r2
2
natsio/nats-server-config-reloader:0.7.2911ce7ed2f55
openssl@1.1.1q-r0
1.1.1u-r2
2
natsio/nats-server-config-reloader:0.10.1e414cc7e6f59
openssl@3.0.7-r2
3.0.9-r3
2
natsio/prometheus-nats-exporter:0.11.031c02aac089a
openssl@3.0.8-r3
3.0.9-r3
2
ngick8stesting/c3po-mmeinit:latest1e764eab77b4
openssl@1.1.0g-2ubuntu4.1
1.1.1-1ubuntu2.1~18.04.23+esm3
2
obsidiandynamics/kafdrop:3.30.05337c9e0e2de
openssl@1.1.1f-1ubuntu2.12
1.1.1f-1ubuntu2.20
2
omecproject/mcord-synchronizer:comac-1.0.0cfdb566dd949
openssl@1.0.2g-1ubuntu4.14
1.0.2g-1ubuntu4.20+esm10
2
openebs/node-disk-manager:2.1.0f6c18b0f8c8a
openssl@3.0.2-0ubuntu1.7
3.0.2-0ubuntu1.12
2
openebs/node-disk-operator:2.1.06afe2123c457
openssl@3.0.2-0ubuntu1.7
3.0.2-0ubuntu1.12
2
oryd/kratos:v1.0.0d06fc5845f63
openssl@3.1.1-r1
3.1.1-r3
2
oryd/oathkeeper:v0.40.6e8cb9b79a89c
openssl@3.1.1-r2
3.1.1-r3
2
outlinewiki/outline:0.69.1d060dcd8f9aa
openssl@3.0.8-r3
3.0.9-r3
2
pecan/db:latest9a1cdc3a9ccb
openssl@1.1.1l-r7
1.1.1u-r2
2
phpipam/phpipam-cron:v1.5.2f770577cb946
openssl@1.1.1t-r1
1.1.1u-r2
2
phpipam/phpipam-www:v1.5.23c6fd1332aeb
openssl@1.1.1t-r1
1.1.1u-r2
2
piomin/sample-spring-kotlin-microservice:1.1871f784dd6bc
openssl@3.0.2-0ubuntu1.6
3.0.2-0ubuntu1.12
2
privatebin/pdo:1.3.500466418121c
openssl@1.1.1n-r0
1.1.1u-r2
2
qingcloud/cloud-controller-manager:v1.4.1210f66b5df886
openssl@1.1.1l-r7
1.1.1u-r2
2
shahanafarooqui/rtl:0.13.3e2195188a451
openssl@3.0.7-r0
3.0.9-r3
2
smartedge/generic-multi-access-network-virtualization:1.04cd63c22ce36
openssl@1.1.1f-1ubuntu2.16
1.1.1f-1ubuntu2.20
2
streamnative/apache-pulsar-grafana-dashboard-k8s:0.1.20e6d7aa3ef32
openssl@1.1.1f-1ubuntu2.22
1.1.1f-1ubuntu2.fips.20
2
svtechnmaa/svtech_debuger:v1.0.0b2987abe57d3
openssl@3.0.2-0ubuntu1.5
3.0.2-0ubuntu1.12
2
taigaio/taiga-front:latest570c8792ce80
openssl@3.0.8-r3
3.0.9-r3
2

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.