CVE-2023-3576

Medium

Advisory

Published 4 Oct 2023In the index since 6 Sept 2026

Severity: Medium; worst across findings
CVSS: 5.5; base score, highest
EPSS: 0.003; 28th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 105; of 17,781 indexed, latest versions
Container images: 111; deployed by those charts
Fix available: 1 of 1; affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 105 of 17,781 indexed charts deploy, on 111 images.

Affected package	Affected versions	Fixed in	Images
tiffdeb	4.0.3-7ubuntu0.9, 4.0.6-1ubuntu0.2, 4.0.6-1ubuntu0.4, 4.0.6-1ubuntu0.5+20 more	4.0.3-7ubuntu0.11+esm11, 4.0.6-1ubuntu0.8+esm14, 4.0.9-5ubuntu0.10+esm4, 4.1.0+git191117-2ubuntu0.20.04.11+2 more	111

OSV records: DEBIAN-CVE-2023-3576 UBUNTU-CVE-2023-3576
Also known as: USN-6512-1

Charts affected

105 by stars

Chart

Latest

Affected images

Radar Score

testing-multitoolsomeblackmagic

0.1.2

1 of 1 See more

testing-multitool someblackmagic 0.1.2

1 of the 1 container images this version deploys carry CVE-2023-3576.

Container image	Digest	Package	Fixed in
someblackmagic/k8s-testing-multitool :v0.1.0	6eca64b6b440	tiff@4.1.0+git191117-2ubuntu0.20.04.3	4.1.0+git191117-2ubuntu0.20.04.11

Open the chart page →

30,687

stakefishstakefish

0.1.0

1 of 8 See more

stakefish stakefish 0.1.0

1 of the 8 container images this version deploys carry CVE-2023-3576.

Container image	Digest	Package	Fixed in
thongngo3301/stakefish :latest	a341af5976e3	tiff@4.5.0-6	4.5.0-6+deb12u1

Open the chart page →

20,223

super-mariotechpreta

0.1.1

1 of 1 See more

super-mario techpreta 0.1.1

1 of the 1 container images this version deploys carry CVE-2023-3576.

Container image	Digest	Package	Fixed in
nirmalnaveen/supermario :latest	8541a39162f3	tiff@4.5.0-6	4.5.0-6+deb12u1

Open the chart page →

6,297

tensor_apptensor-app

0.2.2

2 of 3 See more

tensor_app tensor-app 0.2.2

2 of the 3 container images this version deploys carry CVE-2023-3576.

Container image	Digest	Package	Fixed in
xeladock/mysql_dns :latest	4baf531453f1	tiff@4.3.0-6	4.3.0-6ubuntu0.7
xeladock/nginx2 :latest	c259a67b1dff	tiff@4.3.0-6	4.3.0-6ubuntu0.7

Open the chart page →

17,461

demo-backendv2fly

0.0.3

1 of 1 See more

demo-backend v2fly 0.0.3

1 of the 1 container images this version deploys carry CVE-2023-3576.

Container image	Digest	Package	Fixed in
quay.io/yushiwho/api :e1f9d77	e0d9b93dbf2b	tiff@4.5.0-6	4.5.0-6+deb12u1

Open the chart page →

14,358

Container images carrying it

111 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/kvaps/opennebula-gate :v5.12.0.4-1	a85e03d8bc1d	tiff@4.1.0+git191117-2ubuntu0.20.04.1	4.1.0+git191117-2ubuntu0.20.04.11	1
ghcr.io/linuxserver/booksonic-air :version-v2009.1.0	baa4fa9549dc	tiff@4.0.9-5ubuntu0.4	4.0.9-5ubuntu0.10+esm4	1
ghcr.io/oznu/homebridge :2022-07-08	ff2af53897e7	tiff@4.1.0+git191117-2ubuntu0.20.04.3	4.1.0+git191117-2ubuntu0.20.04.11	1
ghcr.io/smarter-project/gstreamer :v1.0.2	5ecb16015aa8	tiff@4.1.0+git191117-2ubuntu0.20.04.5	4.1.0+git191117-2ubuntu0.20.04.11	1
ghcr.io/smarter-project/image-detector :v2.5.3	1dcca70c6446	tiff@4.1.0+git191117-2ubuntu0.20.04.5	4.1.0+git191117-2ubuntu0.20.04.11	1
ghcr.io/wiremind/grafana-pdf-exporter :v1.7	dbaa8527bf4c	tiff@4.5.0-6	4.5.0-6+deb12u1	1
ghcr.io/wizarrrr/wizarr :4.2.0-beta.3	d19d886d5090	tiff@4.5.0-6	4.5.0-6+deb12u1	1
public.ecr.aws/jtekt-corporation/time-series-storage-service :v1.5.1	046ef5c9ed50	tiff@4.5.0-6	4.5.0-6+deb12u1	1
public.ecr.aws/supportpal/helpdesk-monolithic :4.0.4	573779e57fae	tiff@4.1.0+git191117-2ubuntu0.20.04.3	4.1.0+git191117-2ubuntu0.20.04.11	1
quay.io/opsmxpublic/spin-sample-pipeline :v1.0.1	c6a934439421	tiff@4.0.6-1ubuntu0.6	4.0.6-1ubuntu0.8+esm14	1
quay.io/yushiwho/api :e1f9d77	e0d9b93dbf2b	tiff@4.5.0-6	4.5.0-6+deb12u1	1