CVE-2023-36054
MediumAdvisory
Published 7 Aug 2023In the index since 5 Sept 2026
- Severity
- Medium
- worst across findings
- CVSS
- 6.5
- base score, highest
- EPSS
- 0.028
- 86th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 793
- of 17,781 indexed, latest versions
- Container images
- 714
- deployed by those charts
- Fix available
- 3 of 3
- affected packages
krb5 - security update
Carried by container images the latest versions of 793 of 17,781 indexed charts deploy, on 714 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| krb5deb | 1.12+dfsg-2ubuntu5, 1.12+dfsg-2ubuntu5.1, 1.12+dfsg-2ubuntu5.3, 1.12+dfsg-2ubuntu5.4+22 more | 1.12+dfsg-2ubuntu5.4+esm4, 1.13.2+dfsg-5ubuntu2.2+esm4, 1.16-2ubuntu0.4+esm1, 1.17-3+deb10u6+3 more | 648 |
| krb5apk | 1.20.1-r0, 1.20.1-r1 | 1.20.2-r0 | 56 |
| krb5rpm | 1.16.3-3.9.1, 1.16.3-3.12.2, 1.16.3-lp151.2.6.1 | 1.16.3-150100.3.30.1, 1.21.1-1.1 | 10 |
- OSV records
- ALPINE-CVE-2023-36054DEBIAN-CVE-2023-36054UBUNTU-CVE-2023-36054DLA-3626-1openSUSE-SU-2024:13050-1SUSE-SU-2023:3434-1
- Also known as
- USN-6467-1, USN-6467-2
Charts affected
793 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| fineractfineract-openshift | 0.1.1 | 1 of 4See more | 7,792 |
| first-matefirst-mateVerified publisher | 1.0.5 | 1 of 1See more | 1,720 |
| apm-hubflanksourceVerified publisher | 0.0.47 | 1 of 2See more | 6,078 |
| flinkflink | 0.5.1 | 1 of 1See more | 5,651 |
| floriapp-mongodbfloriapp | 1.0.0 | 1 of 1See more | 8,041 |
| ledgerformance | 1.2.0 | 1 of 1See more | 4,602 |
| plexfydrah-charts | 2.2.0 | 1 of 1See more | 8,965 |
| guacamolegabibbo97 | 0.3.0 | 2 of 3See more | 6,412 |
| ldap-account-managergabibbo97 | 0.2.1 | 1 of 1See more | 2,404 |
| pagesgary-pages | 1.0.0 | 2 of 3See more | 20,190 |
| airsonicgeek-cookbookVerified publisher | 6.4.2 | 1 of 1See more | 18,230 |
| apache-musicindexgeek-cookbookVerified publisher | 2.4.2 | 1 of 1See more | 14,659 |
| booksonic-airgeek-cookbookVerified publisher | 6.4.2 | 1 of 1See more | 19,215 |
| calibre-webgeek-cookbookVerified publisher | 8.4.2 | 1 of 1See more | 16,123 |
| delugegeek-cookbookVerified publisher | 5.4.2 | 1 of 1See more | 13,551 |
| double-takegeek-cookbookVerified publisher | 2.3.2 | 1 of 1See more | 12,222 |
| embygeek-cookbookVerified publisher | 3.4.2 | 1 of 1See more | 8,545 |
| gapsgeek-cookbookVerified publisher | 5.4.2 | 1 of 1See more | 8,943 |
| haste-servergeek-cookbookVerified publisher | 3.4.2 | 1 of 1See more | 10,994 |
| jackettgeek-cookbookVerified publisher | 11.7.2 | 1 of 1See more | 9,698 |
| komgageek-cookbookVerified publisher | 2.4.2 | 1 of 1See more | 12,581 |
| leaf2mqttgeek-cookbookVerified publisher | 3.4.2 | 1 of 1See more | 1,222 |
| lidarrgeek-cookbookVerified publisher | 14.2.2 | 1 of 1See more | 14,283 |
| nzbgetgeek-cookbookVerified publisher | 12.4.2 | 1 of 1See more | 12,076 |
| nzbhydra2geek-cookbookVerified publisher | 10.4.2 | 1 of 1See more | 17,702 |
| openkmgeek-cookbookVerified publisher | 4.2.0 | 1 of 1See more | 27,949 |
| photoprismgeek-cookbookVerified publisher | 7.2.0 | 1 of 1See more | 19,503 |
| puppeteergeek-cookbookVerified publisher | 1.2.2 | 1 of 1See more | 15,730 |
| qbittorrentgeek-cookbookVerified publisher | 13.5.2 | 1 of 1See more | 11,807 |
| radarrgeek-cookbookVerified publisher | 16.3.2 | 1 of 1See more | 10,379 |
| readarrgeek-cookbookVerified publisher | 6.4.2 | 1 of 1See more | 7,768 |
| resilio-syncgeek-cookbookVerified publisher | 5.4.2 | 1 of 1See more | 5,895 |
| rtorrent-rutorrentgeek-cookbookVerified publisher | 1.1.2 | 1 of 1See more | 4,232 |
| seafilegeek-cookbookVerified publisher | 3.2.0 | 1 of 1See more | 24,293 |
| shinobigeek-cookbookVerified publisher | 1.2.2 | 1 of 1See more | 4,591 |
| sinusbotgeek-cookbookVerified publisher | 0.5.2 | 1 of 1See more | 1,439 |
| teedygeek-cookbookVerified publisher | 6.2.0 | 1 of 1See more | 26,944 |
| transmissiongeek-cookbookVerified publisher | 8.4.3 | 1 of 1See more | 11,861 |
| vikunjageek-cookbookVerified publisher | 6.2.0 | 1 of 4See more | 6,893 |
| whooglegeek-cookbookVerified publisher | 3.4.2 | 1 of 1See more | 2,061 |
| xtevegeek-cookbookVerified publisher | 8.4.2 | 1 of 1See more | 17,929 |
| istiogetindataVerified publisher | 1.11.1 | 2 of 2See more | 16,756 |
| knativegitlabVerified publisher | 0.10.0 | 3 of 10See more | 36,102 |
| volume-autoscalergke-volume-autoscaler | 3.0.2 | 1 of 1See more | 901 |
| sunflare-toolsglenndehaanVerified publisher | 1.1.0 | 1 of 1See more | 1,502 |
| jaegergpg-dev | 3.3.3 | 1 of 5See more | 19,229 |
| video-analytics-demogpu-operator | 0.1.9 | 1 of 3See more | 15,722 |
| hdfsgradiant-bigdataVerified publisher | 0.1.10 | 1 of 2See more | 7,073 |
| hivegradiant-bigdataVerified publisher | 0.1.6 | 1 of 5See more | 20,837 |
| opentsdbgradiant-bigdataVerified publisher | 0.1.7 | 1 of 6See more | 17,511 |
Container images carrying it
714 by charts deploying them
A fixed version is listed for 3 of the 3 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| duck1123/ | 0e29f19fa67c | krb5 | 1.19.2-2ubuntu0.3 | 1 |
| duck1123/ | 9d6fb247b714 | krb5 | 1.19.2-2ubuntu0.3 | 1 |
| eaudeweb/ | b8ad9b7e19bb | krb5 | 1.17-3+deb10u6 | 1 |
| elastic/ | c7a1c63257d0 | krb5 | 1.17-6ubuntu4.4 | 1 |
| elastictranscoder/ | 963ab3858c6b | krb5 | 1.16-2ubuntu0.4+esm1 | 1 |
| elastictranscoder/ | 26208b8c2359 | krb5 | 1.16-2ubuntu0.4+esm1 | 1 |
| elastictranscoder/ | b4a0327029e6 | krb5 | 1.16-2ubuntu0.4+esm1 | 1 |
| elastictranscoder/ | 5b75d19e2733 | krb5 | 1.16-2ubuntu0.4+esm1 | 1 |
| empathyco/ | 03e724e41eeb | krb5 | 1.17-6ubuntu4.4 | 1 |
| engrmth/ | 6d8464e6f0e8 | krb5 | 1.17-6ubuntu4.4 | 1 |
| eqalpha/ | fd9351ce27a7 | krb5 | 1.16-2ubuntu0.4+esm1 | 1 |
| esphome/ | 3f51ec10e823 | krb5 | 1.17-3+deb10u6 | 1 |
| ethereumex/ | a7603aa8df4c | krb5 | 1.13.2+dfsg-5ubuntu2.2+esm4 | 1 |
| eventstore/ | c82d2479f468 | krb5 | 1.17-3+deb10u6 | 1 |
| evgkrsk/ | 37f0e1f435c3 | krb5 | 1.20.2-r0 | 1 |
| fedodo/ | 28dada8e3216 | krb5 | 1.20.2-r0 | 1 |
| fedodo/ | 8f8eb7a1207e | krb5 | 1.20.2-r0 | 1 |
| firefart/ | 1028236b42a0 | krb5 | 1.20.2-r0 | 1 |
| fireflyiii/ | 2f4283bd0cf7 | krb5 | 1.17-3+deb10u6 | 1 |
| fjvela/ | 70cebf67bd66 | krb5 | 1.17-3+deb10u6 | 1 |
| flanksource/ | 1dacc3195bf9 | krb5 | 1.19.2-2ubuntu0.3 | 1 |
| flyway/ | 45b5d7cdc75a | krb5 | 1.17-6ubuntu4.4 | 1 |
| fossology/ | 8bd1f22ba7bb | krb5 | 1.17-3+deb10u6 | 1 |
| foundationdb/ | 9ceb2f948c9f | krb5 | 1.17-3+deb10u6 | 1 |
| frankescobar/ | 8a4d7e9308de | krb5 | 1.16-2ubuntu0.4+esm1 | 1 |
| frankescobar/ | cafa03b94dac | krb5 | 1.16-2ubuntu0.4+esm1 | 1 |
| free5gmano/ | 36f806935519 | krb5 | 1.13.2+dfsg-5ubuntu2.2+esm4 | 1 |
| galaxy/ | e5c265fe9fcd | krb5 | 1.17-6ubuntu4.4 | 1 |
| galaxy/ | 0267bad550e6 | krb5 | 1.12+dfsg-2ubuntu5.4+esm4 | 1 |
| galaxy/ | 8e577a626dfd | krb5 | 1.12+dfsg-2ubuntu5.4+esm4 | 1 |
| geoscienceaustralia/ | f4039b45572a | krb5 | 1.16-2ubuntu0.4+esm1 | 1 |
| geoservercloud/ | ca58b74529cd | krb5 | 1.17-6ubuntu4.4 | 1 |
| geoservercloud/ | 5dc0c93a1710 | krb5 | 1.17-6ubuntu4.4 | 1 |
| geoservercloud/ | 47ae1bdb4bcc | krb5 | 1.17-6ubuntu4.4 | 1 |
| geoservercloud/ | 28c3e5a8c5a3 | krb5 | 1.17-6ubuntu4.4 | 1 |
| geoservercloud/ | 8c70ee06d5ab | krb5 | 1.17-6ubuntu4.4 | 1 |
| geoservercloud/ | 42775ba6a4da | krb5 | 1.17-6ubuntu4.4 | 1 |
| gethue/ | 11b649636e68 | krb5 | 1.17-6ubuntu4.4 | 1 |
| gethue/ | 5702b2c37ff9 | krb5 | 1.16-2ubuntu0.4+esm1 | 1 |
| gethue/ | 07f00f7c7903 | krb5 | 1.17-3+deb10u6 | 1 |
| gitlab/ | 860d4a3fec7a | krb5 | 1.17-6ubuntu4.4 | 1 |
| glasskube/ | be5133100d63 | krb5 | 1.19.2-2ubuntu0.3 | 1 |
| glenndehaan/ | a5b3f1dd865d | krb5 | 1.20.2-r0 | 1 |
| gollumorg/ | 7cd5305a3cf7 | krb5 | 1.17-3+deb10u6 | 1 |
| gotson/ | 9b15ea6bfc30 | krb5 | 1.16-2ubuntu0.4+esm1 | 1 |
| guacamole/ | 739cb6820ae8 | krb5 | 1.17-3+deb10u6 | 1 |
| guacamole/ | 2288530a4d1c | krb5 | 1.17-3+deb10u6 | 1 |
| guacamole/ | 49d43948140f | krb5 | 1.17-3+deb10u6 | 1 |
| gulacedia/ | 67b467d961ca | krb5 | 1.20.1-2+deb12u1 | 1 |
| halkeye/ | 3c734dde4052 | krb5 | 1.17-3+deb10u6 | 1 |