CVE-2023-38408
CriticalAdvisory
Published 19 Jul 2023In the index since 6 Sept 2026
- Severity
- Critical
- worst across findings
- CVSS
- 9.8
- base score, highest
- EPSS
- 0.797
- 100th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 179
- of 17,781 indexed, latest versions
- Container images
- 173
- deployed by those charts
- Fix available
- 3 of 3
- affected packages
Red Hat Security Advisory: openssh security update
Carried by container images the latest versions of 179 of 17,781 indexed charts deploy, on 173 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| opensshdeb | 1:6.6p1-2ubuntu2, 1:6.6p1-2ubuntu2.13, 1:7.2p2-4ubuntu2.2, 1:7.2p2-4ubuntu2.4+21 more | 1:6.6p1-2ubuntu2.13+esm1, 1:7.2p2-4ubuntu2.10+esm3, 1:7.6p1-4ubuntu0.7+esm1, 1:7.9p1-10+deb10u3+4 more | 154 |
| opensshapk | 9.0_p1-r1, 9.0_p1-r2, 9.1_p1-r1, 9.1_p1-r2 | 9.0_p1-r4, 9.1_p1-r4 | 10 |
| opensshrpm | 7.4p1-16.el7, 8.0p1-4.el8_1, 8.0p1-6.el8_4.2, 8.0p1-9.el8+1 more | 0:7.4p1-23.el7_9, 0:8.0p1-5.el8_2, 0:8.0p1-7.el8_4, 0:8.0p1-19.el8_8 | 9 |
- OSV records
- ALPINE-CVE-2023-38408DEBIAN-CVE-2023-38408RHSA-2023:4381RHSA-2023:4382RHSA-2023:4384RHSA-2023:4419UBUNTU-CVE-2023-38408DLA-3532-1
- Also known as
- USN-6242-1, USN-6242-2
Charts affected
179 by stars
Container images carrying it
173 by charts deploying them
A fixed version is listed for 3 of the 3 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| roadiehq/ | ef355bf5b639 | openssh | 1:7.9p1-10+deb10u3 | 1 |
| rundeck/ | 4d64fe56f767 | openssh | 1:7.2p2-4ubuntu2.10+esm3 | 1 |
| rundeck/ | b13e8059ad72 | openssh | 1:7.2p2-4ubuntu2.10+esm3 | 1 |
| samajh/ | ea742b4372ad | openssh | 1:7.9p1-10+deb10u3 | 1 |
| samajh/ | 05ef4fddbb75 | openssh | 1:7.9p1-10+deb10u3 | 1 |
| seafileltd/ | 6693911bcc40 | openssh | 1:8.2p1-4ubuntu0.8 | 1 |
| seafileltd/ | 70628f29c663 | openssh | 1:8.2p1-4ubuntu0.8 | 1 |
| seafileltd/ | 7ac833196f60 | openssh | 1:8.2p1-4ubuntu0.8 | 1 |
| seafileltd/ | ed0fcda5e6a9 | openssh | 1:8.2p1-4ubuntu0.8 | 1 |
| seldonio/ | 1d0da98a2d76 | openssh | 1:7.2p2-4ubuntu2.10+esm3 | 1 |
| seldonio/ | 4e985d2006a8 | openssh | 0:8.0p1-7.el8_4 | 1 |
| shinobisystems/ | 3ca746937856 | openssh | 1:7.9p1-10+deb10u3 | 1 |
| shinobisystems/ | c2f5ce2e1067 | openssh | 1:7.9p1-10+deb10u3 | 1 |
| socialmediamacroscope/ | 70fb11d4f531 | openssh | 1:8.2p1-4ubuntu0.fips.0.8 | 1 |
| socialmediamacroscope/ | 6418f9bdb4d2 | openssh | 1:9.2p1-2+deb12u1 | 1 |
| socialmediamacroscope/ | b351c21422e6 | openssh | 1:9.2p1-2+deb12u1 | 1 |
| socialmediamacroscope/ | ca863306314b | openssh | 1:9.2p1-2+deb12u1 | 1 |
| socialmediamacroscope/ | fa490acac2f8 | openssh | 1:9.2p1-2+deb12u1 | 1 |
| stackstorm/ | 88235ba70cad | openssh | 1:8.2p1-4ubuntu0.fips.0.8 | 1 |
| stackstorm/ | 6f56d239d280 | openssh | 1:8.2p1-4ubuntu0.fips.0.8 | 1 |
| stackstorm/ | 33ecfda16608 | openssh | 1:8.2p1-4ubuntu0.fips.0.8 | 1 |
| stackstorm/ | 4e3f8c7ca52d | openssh | 1:8.2p1-4ubuntu0.fips.0.8 | 1 |
| stackstorm/ | f190a6212195 | openssh | 1:8.2p1-4ubuntu0.fips.0.8 | 1 |
| stackstorm/ | 259503496ff9 | openssh | 1:8.2p1-4ubuntu0.fips.0.8 | 1 |
| stackstorm/ | b1de2055c362 | openssh | 1:8.2p1-4ubuntu0.fips.0.8 | 1 |
| stackstorm/ | b1a338f64773 | openssh | 1:8.2p1-4ubuntu0.fips.0.8 | 1 |
| stackstorm/ | 1c8904a3bf67 | openssh | 1:8.2p1-4ubuntu0.fips.0.8 | 1 |
| stackstorm/ | 1bf35bfaf00c | openssh | 1:8.2p1-4ubuntu0.fips.0.8 | 1 |
| stackstorm/ | 19fdfffdbba8 | openssh | 1:8.2p1-4ubuntu0.fips.0.8 | 1 |
| statcan/ | 3921305425b8 | openssh | 1:8.2p1-4ubuntu0.8 | 1 |
| stremio/ | 3dc145603def | openssh | 1:7.9p1-10+deb10u3 | 1 |
| svtechnmaa/ | 6e368ace0977 | openssh | 1:8.2p1-4ubuntu0.8 | 1 |
| tachyongroup/ | 7e79b9000856 | openssh | 1:7.9p1-10+deb10u3 | 1 |
| thecodingmachine/ | 64001369dad5 | openssh | 1:7.9p1-10+deb10u3 | 1 |
| thecodingmachine/ | d8f66979b9b4 | openssh | 1:7.9p1-10+deb10u3 | 1 |
| thecodingmachine/ | 3ccd467543b3 | openssh | 1:7.9p1-10+deb10u3 | 1 |
| thongngo3301/ | a341af5976e3 | openssh | 1:9.2p1-2+deb12u1 | 1 |
| tooljet/ | c85a4720e42e | openssh | 1:7.9p1-10+deb10u3 | 1 |
| vlebediantsev/ | 007c6670ff48 | openssh | 1:9.2p1-2+deb12u1 | 1 |
| vlebediantsev/ | 945675fd2636 | openssh | 1:9.2p1-2+deb12u1 | 1 |
| vlebediantsev/ | 54f69d116c50 | openssh | 1:9.2p1-2+deb12u1 | 1 |
| voltha/ | c4e41e92f046 | openssh | 1:7.2p2-4ubuntu2.10+esm3 | 1 |
| weblate/ | 82848df56ecd | openssh | 1:7.9p1-10+deb10u3 | 1 |
| zohardocker12/ | b86d60dbb68d | openssh | 1:7.9p1-10+deb10u3 | 1 |
| gcr.io/ | 809338a69bd5 | openssh | 1:7.6p1-4ubuntu0.7+esm1 | 1 |
| ghcr.io/ | 6fde1edc0983 | openssh | 1:8.2p1-4ubuntu0.8 | 1 |
| ghcr.io/ | 1041d4449e49 | openssh | 9.0_p1-r4 | 1 |
| ghcr.io/ | d6e901ad0ebd | openssh | 1:7.9p1-10+deb10u3 | 1 |
| ghcr.io/ | 3fbe4c29d14c | openssh | 1:8.2p1-4ubuntu0.8 | 1 |
| ghcr.io/ | fc9f5aca6cf4 | openssh | 1:7.9p1-10+deb10u3 | 1 |