CVE-2023-3576

Medium

Advisory

Published 4 Oct 2023In the index since 6 Sept 2026

Severity: Medium; worst across findings
CVSS: 5.5; base score, highest
EPSS: 0.003; 28th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 105; of 17,781 indexed, latest versions
Container images: 111; deployed by those charts
Fix available: 1 of 1; affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 105 of 17,781 indexed charts deploy, on 111 images.

Affected package	Affected versions	Fixed in	Images
tiffdeb	4.0.3-7ubuntu0.9, 4.0.6-1ubuntu0.2, 4.0.6-1ubuntu0.4, 4.0.6-1ubuntu0.5+20 more	4.0.3-7ubuntu0.11+esm11, 4.0.6-1ubuntu0.8+esm14, 4.0.9-5ubuntu0.10+esm4, 4.1.0+git191117-2ubuntu0.20.04.11+2 more	111

OSV records: DEBIAN-CVE-2023-3576 UBUNTU-CVE-2023-3576
Also known as: USN-6512-1

Charts affected

105 by stars

Chart

Latest

Affected images

Radar Score

testing-multitoolsomeblackmagic

0.1.2

1 of 1 See more

testing-multitool someblackmagic 0.1.2

1 of the 1 container images this version deploys carry CVE-2023-3576.

Container image	Digest	Package	Fixed in
someblackmagic/k8s-testing-multitool :v0.1.0	6eca64b6b440	tiff@4.1.0+git191117-2ubuntu0.20.04.3	4.1.0+git191117-2ubuntu0.20.04.11

Open the chart page →

30,687

stakefishstakefish

0.1.0

1 of 8 See more

stakefish stakefish 0.1.0

1 of the 8 container images this version deploys carry CVE-2023-3576.

Container image	Digest	Package	Fixed in
thongngo3301/stakefish :latest	a341af5976e3	tiff@4.5.0-6	4.5.0-6+deb12u1

Open the chart page →

20,223

super-mariotechpreta

0.1.1

1 of 1 See more

super-mario techpreta 0.1.1

1 of the 1 container images this version deploys carry CVE-2023-3576.

Container image	Digest	Package	Fixed in
nirmalnaveen/supermario :latest	8541a39162f3	tiff@4.5.0-6	4.5.0-6+deb12u1

Open the chart page →

6,297

tensor_apptensor-app

0.2.2

2 of 3 See more

tensor_app tensor-app 0.2.2

2 of the 3 container images this version deploys carry CVE-2023-3576.

Container image	Digest	Package	Fixed in
xeladock/mysql_dns :latest	4baf531453f1	tiff@4.3.0-6	4.3.0-6ubuntu0.7
xeladock/nginx2 :latest	c259a67b1dff	tiff@4.3.0-6	4.3.0-6ubuntu0.7

Open the chart page →

17,461

demo-backendv2fly

0.0.3

1 of 1 See more

demo-backend v2fly 0.0.3

1 of the 1 container images this version deploys carry CVE-2023-3576.

Container image	Digest	Package	Fixed in
quay.io/yushiwho/api :e1f9d77	e0d9b93dbf2b	tiff@4.5.0-6	4.5.0-6+deb12u1

Open the chart page →

14,358

Container images carrying it

111 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
hyperledger/fabric-ca-tools :latest	4ce6f43ded2e	tiff@4.0.6-1ubuntu0.4	4.0.6-1ubuntu0.8+esm14	4
hyperledger/fabric-couchdb :0.4.15	f6c724592abf	tiff@4.0.6-1ubuntu0.6	4.0.6-1ubuntu0.8+esm14	4
ciscolabs/rtsp-client :latest	a7b60ec88285	tiff@4.1.0+git191117-2ubuntu0.20.04.5	4.1.0+git191117-2ubuntu0.20.04.11	3
ciscolabs/rtsp-server :latest	b59fc10bb821	tiff@4.1.0+git191117-2ubuntu0.20.04.5	4.1.0+git191117-2ubuntu0.20.04.11	3
omecproject/cdn-video-repo :1.0.0 :remote-v3	d59ccb138ffb	tiff@4.0.6-1ubuntu0.5	4.0.6-1ubuntu0.8+esm14	3
ghcr.io/conductionnl/gateway-ui :stag	6a5594b7b32c	tiff@4.5.0-6	4.5.0-6+deb12u1	3
gjeanmart/safe-ganache-node :latest	926264c8f2d1	tiff@4.5.0-6	4.5.0-6+deb12u1	2
library/python :3.7	eedf63967cdb	tiff@4.5.0-6	4.5.0-6+deb12u1	2
moreillon/user-manager :v5.0.2	e1c9bfab5c16	tiff@4.5.0-6	4.5.0-6+deb12u1	2
moreillon/user-manager-front :v5.0.3	b067dbbbb6af	tiff@4.5.0-6	4.5.0-6+deb12u1	2
ghcr.io/codingducksrl/laravel :8.1	5be52524664c	tiff@4.3.0-6ubuntu0.1	4.3.0-6ubuntu0.7	2
ghcr.io/games-on-whales/retroarch :1.0.0	103fbcec2314	tiff@4.1.0+git191117-2ubuntu0.20.04.1	4.1.0+git191117-2ubuntu0.20.04.11	2
ghcr.io/games-on-whales/steam :1.0.0	9b6105be7ad0	tiff@4.1.0+git191117-2ubuntu0.20.04.1	4.1.0+git191117-2ubuntu0.20.04.11	2
airsonicadvanced/airsonic-advanced :latest	f7cbafac2806	tiff@4.1.0+git191117-2ubuntu0.20.04.1	4.1.0+git191117-2ubuntu0.20.04.11	1
akaunting/akaunting :3.0.15	52811b36ec3a	tiff@4.5.0-6	4.5.0-6+deb12u1	1
assistiot/smart-orchestrator_scheduler_mc :latest	b1dbe4d62a03	tiff@4.5.0-6	4.5.0-6+deb12u1	1
avinash263/pyredis263 :latest	aa2b8727f1a6	tiff@4.5.0-6	4.5.0-6+deb12u1	1
avzini/web-app :latest	f40b30210ed0	tiff@4.5.0-6	4.5.0-6+deb12u1	1
blakeblackshear/frigate :0.10.0-amd64	ae269270ad9e	tiff@4.1.0+git191117-2ubuntu0.20.04.2	4.1.0+git191117-2ubuntu0.20.04.11	1
browserless/chrome :1.48.0-chrome-stable	c81ae5585b47	tiff@4.1.0+git191117-2ubuntu0.20.04.1	4.1.0+git191117-2ubuntu0.20.04.11	1
cheyang/distributed-tf :1.6.0	46cc34755493	tiff@4.0.6-1ubuntu0.2	4.0.6-1ubuntu0.8+esm14	1
dachichang/basic-auth-s3-nginx :1.0.0	7ccac90a935e	tiff@4.5.0-6	4.5.0-6+deb12u1	1
daskdev/dask-notebook :1.1.0	052630f5ca04	tiff@4.0.9-5ubuntu0.1	4.0.9-5ubuntu0.10+esm4	1
dgraziotin/nginx-webdav-nononsense :1.23.1	38f2de42bed0	tiff@4.1.0+git191117-2ubuntu0.20.04.3	4.1.0+git191117-2ubuntu0.20.04.11	1
elastictranscoder/transcoder :627e21dc	b4a0327029e6	tiff@4.0.9-5ubuntu0.4	4.0.9-5ubuntu0.10+esm4	1
elastictranscoder/transcoder-handler :627e21dc	5b75d19e2733	tiff@4.0.9-5ubuntu0.4	4.0.9-5ubuntu0.10+esm4	1
firefart/requesttracker :5.0.4	0d6249906d8c	tiff@4.5.0-6	4.5.0-6+deb12u1	1
galaxy/galaxy-stable :v18.01	8e577a626dfd	tiff@4.0.3-7ubuntu0.9	4.0.3-7ubuntu0.11+esm11	1
geoscienceaustralia/dea-k8s-data :latest	f4039b45572a	tiff@4.0.9-5ubuntu0.3	4.0.9-5ubuntu0.10+esm4	1
haveagitgat/tdarr :2.00.18	1256348872ce	tiff@4.1.0+git191117-2ubuntu0.20.04.2	4.1.0+git191117-2ubuntu0.20.04.11	1
haveagitgat/tdarr_node :2.00.10	1e3f9328327d	tiff@4.1.0+git191117-2build1	4.1.0+git191117-2ubuntu0.20.04.11	1
haveagitgat/tdarr_node :2.17.01	3ff0913202dd	tiff@4.1.0+git191117-2ubuntu0.20.04.9	4.1.0+git191117-2ubuntu0.20.04.11	1
helicone/supabase-migration-runner :v2025.03.05-1	4a913936c97b	tiff@4.5.0-6	4.5.0-6+deb12u1	1
huginn/huginn-single-process :4d17829cf6b15b004ad3f4be196303dca4944810	c794eddc7b47	tiff@4.0.9-5ubuntu0.3	4.0.9-5ubuntu0.10+esm4	1
hyperledger/fabric-couchdb :0.4.10	c65891b6c237	tiff@4.0.6-1ubuntu0.4	4.0.6-1ubuntu0.8+esm14	1
intel/dlstreamer-pipeline-server :2022.1.1-ubuntu20	aa8f5483a2ef	tiff@4.1.0+git191117-2ubuntu0.20.04.3	4.1.0+git191117-2ubuntu0.20.04.11	1
intel/multimodal-data-visualization-streaming :3.0	1a89327e499b	tiff@4.1.0+git191117-2ubuntu0.20.04.3	4.1.0+git191117-2ubuntu0.20.04.11	1
library/nginx :1.25.1	67f9a4f10d14	tiff@4.5.0-6	4.5.0-6+deb12u1	1
linuxserver/calibre :version-v5.21.0	a847b5b2d860	tiff@4.0.9-5ubuntu0.4	4.0.9-5ubuntu0.10+esm4	1
linuxserver/calibre-web :version-0.6.12	938810eca3d3	tiff@4.1.0+git191117-2ubuntu0.20.04.1	4.1.0+git191117-2ubuntu0.20.04.11	1
linuxserver/deluge :18.04.1	0ac871624394	tiff@4.0.9-5ubuntu0.4	4.0.9-5ubuntu0.10+esm4	1
linuxserver/deluge :version-2.0.3-2201906121747ubuntu18.04.1	2ce561a95e7b	tiff@4.0.9-5ubuntu0.4	4.0.9-5ubuntu0.10+esm4	1
linuxserver/lazylibrarian :version-1152df82	f93d2560e233	tiff@4.0.9-5ubuntu0.4	4.0.9-5ubuntu0.10+esm4	1
livekit/ingress :v1.2.2	1ab01641b366	tiff@4.3.0-6ubuntu0.4	4.3.0-6ubuntu0.7	1
mediagis/nominatim :3.7	c15e941485ef	tiff@4.1.0+git191117-2ubuntu0.20.04.3	4.1.0+git191117-2ubuntu0.20.04.11	1
moreillon/user-manager-mongoose :v5.0.1	d2ee0423b797	tiff@4.5.0-6	4.5.0-6+deb12u1	1
nethermind/nethermind :1.14.6	15517708c3b6	tiff@4.3.0-6ubuntu0.2	4.3.0-6ubuntu0.7	1
nirmalnaveen/supermario :latest	8541a39162f3	tiff@4.5.0-6	4.5.0-6+deb12u1	1
omecproject/cdn-antmedia :1.0.0	b4ae7d0d6b74	tiff@4.0.9-5ubuntu0.2	4.0.9-5ubuntu0.10+esm4	1
opendatacube/pipelines :wofs-1.22	5d810e8504b8	tiff@4.0.9-5ubuntu0.2	4.0.9-5ubuntu0.10+esm4	1