StackRadar

CVE-2023-3446

Medium

Advisory

Published 19 Jul 2023In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.3
base score, highest
EPSS
0.065
93rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,202
of 17,787 indexed, latest versions
Container images
1,218
deployed by those charts
Fix available
4 of 5
affected packages

libopenssl-1_1-devel-1.1.1u-5.1 on GA media

Carried by container images the latest versions of 1,202 of 17,787 indexed charts deploy, on 1,218 images.

Affected packageAffected versionsFixed inImages
opensslapk1.1.1l-r7, 1.1.1l-r8, 1.1.1m-r1, 1.1.1n-r0+20 more1.1.1u-r2, 3.0.9-r3, 3.1.1-r3627
openssldeb1.0.1f-1ubuntu2.5, 1.0.1f-1ubuntu2.8, 1.0.1f-1ubuntu2.25, 1.0.1f-1ubuntu2.27+60 more1.0.1f-1ubuntu2.27+esm10, 1.0.2g-1ubuntu4.20+esm10, 1.1.1-1ubuntu2.1~18.04.23+esm3, 1.1.1f-1ubuntu2.20+4 more580
openssl1.0deb1.0.2n-1ubuntu5.3, 1.0.2n-1ubuntu5.4, 1.0.2n-1ubuntu5.6, 1.0.2n-1ubuntu5.10+2 more1.0.2n-1ubuntu5.13+esm115
nodejsdeb16.14.2-deb-1nodesource1, 16.18.0-deb-1nodesource1, 20.11.1-1nodesource1, 20.15.0-1nodesource1+1 moreno fix listed5
openssl-1_1rpm1.1.0i-14.6.1, 1.1.0i-lp151.8.3.11.1.0i-150100.14.59.1, 1.1.1u-5.19
OSV records
ALPINE-CVE-2023-3446DEBIAN-CVE-2023-3446UBUNTU-CVE-2023-3446openSUSE-SU-2024:13064-1SUSE-SU-2023:2961-1
Also known as
USN-6435-1, USN-6435-2, USN-6450-1, USN-6709-1, USN-7018-1

Charts affected

1,202 by stars
ChartLatestAffected imagesRadar Score
alertmanager-matrix-forwarderzloi-space1.0.11 of 2See more

alertmanager-matrix-forwarder zloi-space 1.0.1

1 of the 2 container images this version deploys carry CVE-2023-3446.

Container imageDigestPackageFixed in
zl0i/alertmanager-matrix-forwarder:v1.0.0e94047931739
openssl@1.1.1l-r7
1.1.1u-r2

Open the chart page →

3,118
clickhousezloi-space1.2.02 of 3See more

clickhouse zloi-space 1.2.0

2 of the 3 container images this version deploys carry CVE-2023-3446.

Container imageDigestPackageFixed in
yandex/clickhouse-client:21.3863f94a0f607
openssl@1.1.1-1ubuntu2.1~18.04.14
1.1.1-1ubuntu2.1~18.04.23+esm3
yandex/clickhouse-server:21.3.204eccfffb01d7
openssl@1.1.1f-1ubuntu2.10
1.1.1f-1ubuntu2.20

Open the chart page →

9,250

Container images carrying it

1,218 by charts deploying them

A fixed version is listed for 4 of the 5 affected packages.

Container imageDigestPackageFixed inUsed by
folioci/mod-codex-mux:latestd4138abfd30d
openssl@1.1.1q-r0
1.1.1u-r2
1
folioci/mod-data-import-converter-storage:latest3028f333778f
openssl@3.0.7-r2
3.0.9-r3
1
foomo/csp-reporter:1.3.0e436da524785
openssl@1.1.1n-r0
1.1.1u-r2
1
frankescobar/allure-docker-service:2.21.08a4d7e9308de
openssl@1.1.1-1ubuntu2.1~18.04.6
1.1.1-1ubuntu2.1~18.04.23+esm3
1
frankescobar/allure-docker-service:2.19.0cafa03b94dac
openssl@1.1.1-1ubuntu2.1~18.04.6
1.1.1-1ubuntu2.1~18.04.23+esm3
1
free5gmano/nextepc-mongodb:latest36f806935519
openssl@1.0.2g-1ubuntu4.14
1.0.2g-1ubuntu4.20+esm10
1
galaxy/cloudman-server:lateste5c265fe9fcd
openssl@1.1.1f-1ubuntu2.16
1.1.1f-1ubuntu2.20
1
galaxy/galaxy-init:v18.010267bad550e6
openssl@1.0.1f-1ubuntu2.25
1.0.1f-1ubuntu2.27+esm10
1
galaxy/galaxy-stable:v18.018e577a626dfd
openssl@1.0.1f-1ubuntu2.25
1.0.1f-1ubuntu2.27+esm10
1
gboxproxy/gbox:v1.0.63a9f4a711d5c
openssl@1.1.1n-r0
1.1.1u-r2
1
gcarrarom/landing:0.0.0769d19e441d9
openssl@1.1.1q-r0
1.1.1u-r2
1
geonetwork/gn-cloud-ogc-api-records-service:4.2.8-020c9bb761f67
openssl@1.1.1-1ubuntu2.1~18.04.23
1.1.1-1ubuntu2.1~18.04.23+esm3
1
geoscienceaustralia/dea-k8s-data:latestf4039b45572a
openssl@1.1.1-1ubuntu2.1~18.04.6
openssl1.0@1.0.2n-1ubuntu5.3
1.1.1-1ubuntu2.1~18.04.23+esm3
1.0.2n-1ubuntu5.13+esm1
1
geoservercloud/geoserver-cloud-gateway:1.0-RC2ca58b74529cd
openssl@1.1.1f-1ubuntu2.8
1.1.1f-1ubuntu2.20
1
geoservercloud/geoserver-cloud-rest:1.0-RC25dc0c93a1710
openssl@1.1.1f-1ubuntu2.8
1.1.1f-1ubuntu2.20
1
geoservercloud/geoserver-cloud-wcs:1.0-RC247ae1bdb4bcc
openssl@1.1.1f-1ubuntu2.8
1.1.1f-1ubuntu2.20
1
geoservercloud/geoserver-cloud-webui:1.0-RC228c3e5a8c5a3
openssl@1.1.1f-1ubuntu2.8
1.1.1f-1ubuntu2.20
1
geoservercloud/geoserver-cloud-wfs:1.0-RC28c70ee06d5ab
openssl@1.1.1f-1ubuntu2.8
1.1.1f-1ubuntu2.20
1
geoservercloud/geoserver-cloud-wms:1.0-RC242775ba6a4da
openssl@1.1.1f-1ubuntu2.8
1.1.1f-1ubuntu2.20
1
gethue/hue:4.11.011b649636e68
openssl@1.1.1f-1ubuntu2.16
1.1.1f-1ubuntu2.20
1
gethue/hue:4.10.05702b2c37ff9
openssl@1.1.1-1ubuntu2.1~18.04.9
openssl1.0@1.0.2n-1ubuntu5.6
1.1.1-1ubuntu2.1~18.04.23+esm3
1.0.2n-1ubuntu5.13+esm1
1
gethue/hue:latest7d5c1b9f8a79
nodejs@24.13.1-1nodesource1
no fix listed
1
gitlab/gitlab-runner:v15.3.0860d4a3fec7a
openssl@1.1.1f-1ubuntu2.16
1.1.1f-1ubuntu2.20
1
glasskube/operator:0.12.2be5133100d63
openssl@3.0.2-0ubuntu1.10
3.0.2-0ubuntu1.12
1
glenndehaan/sunflare-tools:latesta5b3f1dd865d
openssl@3.1.1-r1
3.1.1-r3
1
gmelillo/registry:0.1.8c599d608a2f7
openssl@1.1.1l-r7
1.1.1u-r2
1
golenski/fibonacci-msg-relay:1.0.0c863dcb0c513
openssl@3.0.9-1
3.0.10-1~deb12u1
1
golenski/fibonacci-task-manager:2.0.03a2b36df247b
openssl@3.0.9-1
3.0.10-1~deb12u1
1
golenski/fibonacci-worker:2.0.0954caf4aaf6a
openssl@3.0.9-1
3.0.10-1~deb12u1
1
gonzague/monopoly:latest70465995deea
openssl@1.1.1l-r7
1.1.1u-r2
1
goofball222/pritunl:1.30.3070.5943c0743701d4
openssl@1.1.1l-r8
1.1.1u-r2
1
gotson/komga:0.99.49b15ea6bfc30
openssl@1.1.1-1ubuntu2.1~18.04.6
1.1.1-1ubuntu2.1~18.04.23+esm3
1
grafana/grafana:9.4.71a359d92f40e
openssl@3.0.8-r0
3.0.9-r3
1
grafana/grafana:9.5.239c849cebccc
openssl@3.0.8-r3
3.0.9-r3
1
grafana/grafana:9.4.376dcf36e7d2a
openssl@1.1.1t-r1
1.1.1u-r2
1
grafana/grafana:9.1.19746858c20e6
openssl@1.1.1q-r0
1.1.1u-r2
1
grafana/grafana:9.0.1a738d0744784
openssl@1.1.1o-r0
1.1.1u-r2
1
grafana/grafana:8.3.5cd7cb4345aa7
openssl@1.1.1m-r1
1.1.1u-r2
1
grafana/grafana:8.3.4cf81d2c753c8
openssl@1.1.1m-r1
1.1.1u-r2
1
grafana/grafana:8.5.3ecc1b80b8ca2
openssl@1.1.1n-r0
1.1.1u-r2
1
grafana/loki:2.8.2b1da1d23037e
openssl@1.1.1t-r2
1.1.1u-r2
1
grafana/loki-canary:2.6.1ab2a2569307b
openssl@1.1.1n-r0
1.1.1u-r2
1
grafana/mimir:2.0.080c1a8eb24dd
openssl@1.1.1l-r7
1.1.1u-r2
1
grafana/phlare:0.5.1330f990cdad9
openssl@1.1.1s-r0
1.1.1u-r2
1
gresearchdev/siembol-config-editor-ui:latest071e7109a981
openssl@1.1.1s-r0
1.1.1u-r2
1
groundnuty/k8s-wait-for:v1.684edcf796267
openssl@1.1.1n-r0
1.1.1u-r2
1
groundnuty/k8s-wait-for:no-root-v2.0a26d3d3f6e1c
openssl@1.1.1q-r0
1.1.1u-r2
1
gtsopour/awscli-kubectl:latest7983cf0505cf
openssl@1.1.1l-r7
1.1.1u-r2
1
gulacedia/web-dvwa-new:v367b467d961ca
openssl@3.0.9-1
3.0.10-1~deb12u1
1
haproxytech/haproxy-alpine:2.6.614e4afa90dfd
openssl@1.1.1s-r1
1.1.1u-r2
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.