CVE-2023-38408
CriticalAdvisory
Published 19 Jul 2023In the index since 6 Sept 2026
- Severity
- Critical
- worst across findings
- CVSS
- 9.8
- base score, highest
- EPSS
- 0.797
- 100th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 179
- of 17,781 indexed, latest versions
- Container images
- 173
- deployed by those charts
- Fix available
- 3 of 3
- affected packages
Red Hat Security Advisory: openssh security update
Carried by container images the latest versions of 179 of 17,781 indexed charts deploy, on 173 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| opensshdeb | 1:6.6p1-2ubuntu2, 1:6.6p1-2ubuntu2.13, 1:7.2p2-4ubuntu2.2, 1:7.2p2-4ubuntu2.4+21 more | 1:6.6p1-2ubuntu2.13+esm1, 1:7.2p2-4ubuntu2.10+esm3, 1:7.6p1-4ubuntu0.7+esm1, 1:7.9p1-10+deb10u3+4 more | 154 |
| opensshapk | 9.0_p1-r1, 9.0_p1-r2, 9.1_p1-r1, 9.1_p1-r2 | 9.0_p1-r4, 9.1_p1-r4 | 10 |
| opensshrpm | 7.4p1-16.el7, 8.0p1-4.el8_1, 8.0p1-6.el8_4.2, 8.0p1-9.el8+1 more | 0:7.4p1-23.el7_9, 0:8.0p1-5.el8_2, 0:8.0p1-7.el8_4, 0:8.0p1-19.el8_8 | 9 |
- OSV records
- ALPINE-CVE-2023-38408DEBIAN-CVE-2023-38408RHSA-2023:4381RHSA-2023:4382RHSA-2023:4384RHSA-2023:4419UBUNTU-CVE-2023-38408DLA-3532-1
- Also known as
- USN-6242-1, USN-6242-2
Charts affected
179 by stars
Container images carrying it
173 by charts deploying them
A fixed version is listed for 3 of the 3 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| oomk8s/ | 875814cc853d | openssh | 1:7.2p2-4ubuntu2.10+esm3 | 11 |
| oomk8s/ | 7daa08b81954 | openssh | 1:7.2p2-4ubuntu2.10+esm3 | 6 |
| hyperledger/ | 4ce6f43ded2e | openssh | 1:7.2p2-4ubuntu2.10+esm3 | 4 |
| hyperledger/ | f6c724592abf | openssh | 1:7.2p2-4ubuntu2.10+esm3 | 4 |
| argoproj/ | 830e86cacefd | openssh | 1:7.9p1-10+deb10u3 | 3 |
| quay.io/ | 2b6db27eaf3d | openssh | 1:8.9p1-3ubuntu0.3 | 3 |
| amancevice/ | 12a0a9e66550 | openssh | 1:7.9p1-10+deb10u3 | 2 |
| gjeanmart/ | 926264c8f2d1 | openssh | 1:9.2p1-2+deb12u1 | 2 |
| library/ | eedf63967cdb | openssh | 1:9.2p1-2+deb12u1 | 2 |
| martinaif/ | 43bc40a3da0e | openssh | 1:7.9p1-10+deb10u3 | 2 |
| mesosphere/ | 073db43d0b8b | openssh | 1:8.2p1-4ubuntu0.8 | 2 |
| omecproject/ | cfdb566dd949 | openssh | 1:7.2p2-4ubuntu2.10+esm3 | 2 |
| smartedge/ | 4cd63c22ce36 | openssh | 1:8.2p1-4ubuntu0.8 | 2 |
| stakater/ | 3f4926eedc74 | openssh | 1:7.9p1-10+deb10u3 | 2 |
| svtechnmaa/ | b2987abe57d3 | openssh | 1:8.9p1-3ubuntu0.3 | 2 |
| ujamii/ | 6243197349e1 | openssh | 1:7.9p1-10+deb10u3 | 2 |
| weblate/ | 69c160d37a3c | openssh | 1:7.9p1-10+deb10u3 | 2 |
| wurstmeister/ | 7a7fd44a7210 | openssh | 1:6.6p1-2ubuntu2.13+esm1 | 2 |
| ghcr.io/ | 5be52524664c | openssh | 1:8.9p1-3ubuntu0.3 | 2 |
| afrank/ | d463c37b08d7 | openssh | 1:7.9p1-10+deb10u3 | 1 |
| allegroai/ | 772827a01bb5 | openssh | 1:7.6p1-4ubuntu0.7+esm1 | 1 |
| alpine/ | 66b210a97bc0 | openssh | 9.0_p1-r4 | 1 |
| arfath29/ | ee0750b18406 | openssh | 1:7.9p1-10+deb10u3 | 1 |
| arfath29/ | 384b3e377f47 | openssh | 1:7.9p1-10+deb10u3 | 1 |
| arturisimo/ | d8dc4430531e | openssh | 1:7.9p1-10+deb10u3 | 1 |
| asdkant/ | a23d8bf7c885 | openssh | 1:7.9p1-10+deb10u3 | 1 |
| assistiot/ | db9361dad79b | openssh | 1:7.9p1-10+deb10u3 | 1 |
| assistiot/ | b1dbe4d62a03 | openssh | 1:9.2p1-2+deb12u1 | 1 |
| avinash263/ | aa2b8727f1a6 | openssh | 1:9.2p1-2+deb12u1 | 1 |
| bastilimbach/ | 41b0835ab31e | openssh | 1:7.9p1-10+deb10u3 | 1 |
| bicarus/ | dab88659ae3b | openssh | 1:7.9p1-10+deb10u3 | 1 |
| camptocamp/ | acfafc308d88 | openssh | 1:7.9p1-10+deb10u3 | 1 |
| camptocamp/ | 35c91d5fda04 | openssh | 1:7.9p1-10+deb10u3 | 1 |
| cdignam/ | 5a6a55b39cee | openssh | 1:7.9p1-10+deb10u3 | 1 |
| ceticasbl/ | bc34ce180d0c | openssh | 1:7.9p1-10+deb10u3 | 1 |
| chetangautamm/ | b4b94155ff5a | openssh | 1:6.6p1-2ubuntu2.13+esm1 | 1 |
| chetangautamm/ | e7f7049e1544 | openssh | 1:8.2p1-4ubuntu0.8 | 1 |
| coderaiser/ | b34a9775c7ce | openssh | 1:7.9p1-10+deb10u3 | 1 |
| codercom/ | 47605610ad8d | openssh | 1:7.9p1-10+deb10u3 | 1 |
| countly/ | e3c238248f99 | openssh | 1:8.2p1-4ubuntu0.8 | 1 |
| cribl/ | 762747cb6796 | openssh | 1:7.6p1-4ubuntu0.7+esm1 | 1 |
| dacinfomotion/ | 68fa393b472c | openssh | 1:7.9p1-10+deb10u3 | 1 |
| deltaio/ | 8b75118187c5 | openssh | 1:7.9p1-10+deb10u3 | 1 |
| dnationcloud/ | dee6376560f5 | openssh | 1:7.9p1-10+deb10u3 | 1 |
| dongjiang1989/ | 4bf9ae391948 | openssh | 1:8.2p1-4ubuntu0.fips.0.8 | 1 |
| dtzar/ | a1041bb0f1d1 | openssh | 9.1_p1-r4 | 1 |
| epamedp/ | 90f9921d8d58 | openssh | 9.0_p1-r4 | 1 |
| ethereumex/ | a7603aa8df4c | openssh | 1:7.2p2-4ubuntu2.10+esm3 | 1 |
| fiware/ | 29456835bb2c | openssh | 1:8.2p1-4ubuntu0.fips.0.8 | 1 |
| fossology/ | 8bd1f22ba7bb | openssh | 1:7.9p1-10+deb10u3 | 1 |