CVE-2023-4039

Medium

Advisory

Published 12 Sept 2023In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 4.8; base score, highest
EPSS: 0.008; 54th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 1,103; of 17,790 indexed, latest versions
Container images: 1,152; deployed by those charts
Fix available: 5 of 12; affected packages

Security update for gcc12

Carried by container images the latest versions of 1,103 of 17,790 indexed charts deploy, on 1,152 images.

Affected package	Affected versions	Fixed in	Images
gcc-12deb	12-20220319-1ubuntu1, 12.1.0-2ubuntu1~22.04, 12.2.0-14, 12.3.0-1ubuntu1~22.04	12.2.0-14+deb12u1, 12.3.0-1ubuntu1~22.04.2	675
gcc-10deb	10-20200411-0ubuntu1, 10.2.0-5ubuntu1~20.04, 10.3.0-1ubuntu1~20.04, 10.5.0-1ubuntu1~20.04	10.5.0-1ubuntu1~20.04.1+esm1	279
gcc-8deb	8-20180414-1ubuntu2, 8.2.0-1ubuntu2~18.04, 8.3.0-6ubuntu1~18.04, 8.3.0-6ubuntu1~18.04.1+3 more	no fix listed	120
gcc-5deb	5.4.0-6ubuntu1~16.04.4, 5.4.0-6ubuntu1~16.04.5, 5.4.0-6ubuntu1~16.04.9, 5.4.0-6ubuntu1~16.04.10+2 more	no fix listed	69
gccgo-6deb	6.0.1-0ubuntu1	no fix listed	69
gcc-9deb	9.3.0-17ubuntu1~20.04, 9.4.0-1ubuntu1~20.04.1, 9.4.0-1ubuntu1~20.04.2	no fix listed	45
gcc-7deb	7.3.0-3ubuntu1, 7.3.0-27ubuntu1~18.04, 7.4.0-1ubuntu1~18.04, 7.4.0-1ubuntu1~18.04.1+2 more	no fix listed	28
gcc-11deb	11.2.0-19ubuntu1, 11.3.0-1ubuntu1~22.04, 11.3.0-12, 11.4.0-1ubuntu1~22.04	11.4.0-1ubuntu1~22.04.2	14
gcc-4.8deb	4.8.2-19ubuntu1, 4.8.4-2ubuntu1~14.04.3, 4.8.4-2ubuntu1~14.04.4	no fix listed	7
gccgo-4.9deb	4.9.1-0ubuntu1, 4.9.3-0ubuntu4	no fix listed	7
gccapk	13.1.0-r1	13.2.0-r3	1
gcc12rpm	12.2.1+git416-150000.1.5.1	12.3.0+git1204-150000.1.16.1	1

OSV records: CGA-9fp5-8r38-hf7j DEBIAN-CVE-2023-4039 UBUNTU-CVE-2023-4039 SUSE-SU-2023:3661-1
Also known as: CGA-hg9x-wx5h-8pph, CGA-qp75-5rvw-vmvm, CGA-xfqf-q2hm-g3r5, USN-7700-1

Charts affected

1,103 by stars

Chart

Latest

Affected images

Radar Score

xkopsxkops

0.1.0

3 of 5 See more

xkops xkops 0.1.0

3 of the 5 container images this version deploys carry CVE-2023-4039.

Container image	Digest	Package	Fixed in
hamzaarshad10/querybackend :1.6.2	2c1c3b86a8e7	gcc-12@12.2.0-14	12.2.0-14+deb12u1
hamzaarshad10/querypodpy :1.7	154f38e8668e	gcc-12@12.2.0-14	12.2.0-14+deb12u1
murtazashah46/helmfile :latest	4d11726cf803	gcc-12@12.2.0-14	12.2.0-14+deb12u1

Open the chart page →

13,783

api-snapyoukadev

0.1.1

1 of 1 See more

api-snap youkadev 0.1.1

1 of the 1 container images this version deploys carry CVE-2023-4039.

Container image	Digest	Package	Fixed in
youkadev/api-snap :0.1.1	4db0f9428e67	gcc-12@12.2.0-14	12.2.0-14+deb12u1

Open the chart page →

2,684

clickhousezloi-space

1.2.0

2 of 3 See more

clickhouse zloi-space 1.2.0

2 of the 3 container images this version deploys carry CVE-2023-4039.

Container image	Digest	Package	Fixed in
yandex/clickhouse-client :21.3	863f94a0f607	gcc-8@8.4.0-1ubuntu1~18.04	no fix listed
yandex/clickhouse-server :21.3.20	4eccfffb01d7	gcc-10@10.3.0-1ubuntu1~20.04	10.5.0-1ubuntu1~20.04.1+esm1

Open the chart page →

9,256

Container images carrying it

1,152 by charts deploying them

A fixed version is listed for 5 of the 12 affected packages.

Container image	Digest	Package	Fixed in	Used by
socialmediamacroscope/autophrase :0.1.5	70fb11d4f531	gcc-10@10.5.0-1ubuntu1~20.04 gcc-9@9.4.0-1ubuntu1~20.04.2	10.5.0-1ubuntu1~20.04.1+esm1 no fix listed	1
socialmediamacroscope/collect_reddit_comment :0.1.2	19d3d26d53ee	gcc-7@7.5.0-3ubuntu1~18.04 gcc-8@8.4.0-1ubuntu1~18.04	no fix listed no fix listed	1
socialmediamacroscope/histogram :0.1.2	6418f9bdb4d2	gcc-12@12.2.0-14	12.2.0-14+deb12u1	1
socialmediamacroscope/image_crawler :0.1.2	f508216be63c	gcc-7@7.5.0-3ubuntu1~18.04 gcc-8@8.4.0-1ubuntu1~18.04	no fix listed no fix listed	1
socialmediamacroscope/network_analysis :0.1.3	b351c21422e6	gcc-12@12.2.0-14	12.2.0-14+deb12u1	1
socialmediamacroscope/preprocessing :0.1.3	ca863306314b	gcc-12@12.2.0-14	12.2.0-14+deb12u1	1
socialmediamacroscope/topic_modeling :0.1.3	fa490acac2f8	gcc-12@12.2.0-14	12.2.0-14+deb12u1	1
someblackmagic/k8s-testing-multitool :v0.1.0	6eca64b6b440	gcc-10@10.3.0-1ubuntu1~20.04 gcc-9@9.4.0-1ubuntu1~20.04.1	10.5.0-1ubuntu1~20.04.1+esm1 no fix listed	1
somnathmore/custom-nginx :v2	bdfc06cad4ec	gcc-12@12.2.0-14	12.2.0-14+deb12u1	1
sondresjo/altinnendata-app :v1.9.1	c2707839d8a3	gcc-12@12.2.0-14	12.2.0-14+deb12u1	1
sondresjo/garge-app :v1.20.7	0382ebf9dfc8	gcc-12@12.2.0-14	12.2.0-14+deb12u1	1
sondresjo/nstuning-app :v1.6.11	3a6795bf36da	gcc-12@12.2.0-14	12.2.0-14+deb12u1	1
speckle/speckle-frontend-2 :2.20.2-branch.testing4.134160-9fad4b2	10ad4ade8bf2	gcc-12@12.2.0-14	12.2.0-14+deb12u1	1
speckle/speckle-frontend-2 :2.20.6-branch.testing1.154030-9b09114	32fc940d9b4c	gcc-12@12.2.0-14	12.2.0-14+deb12u1	1
speckle/speckle-frontend-2 :2.19.2-branch.hotfix-2.19.1.124125-665e7e1	4f9241665ae3	gcc-12@12.2.0-14	12.2.0-14+deb12u1	1
speckle/speckle-frontend-2 :2.21.3-branch.testing5.219631-2153bef	d4ca6ebf09b9	gcc-12@12.2.0-14	12.2.0-14+deb12u1	1
speckle/speckle-frontend-2 :2.20.3-branch.hotfix-2.20.2.149555-37ea0cb	fdc008effc7a	gcc-12@12.2.0-14	12.2.0-14+deb12u1	1
speckle/speckle-monitor-deployment :2.25.10-branch.testing6.645-b125c1e	2dbc553ed87c	gcc-12@12.2.0-14	12.2.0-14+deb12u1	1
speckle/speckle-monitor-deployment :2.20.3-branch.hotfix-2.20.2.149555-37ea0cb	2faf1508c1d3	gcc-12@12.2.0-14	12.2.0-14+deb12u1	1
speckle/speckle-monitor-deployment :2.20.2-branch.testing4.134160-9fad4b2	3c8fbe855665	gcc-12@12.2.0-14	12.2.0-14+deb12u1	1
speckle/speckle-monitor-deployment :2.20.6-branch.testing1.154030-9b09114	738c77eb6f97	gcc-12@12.2.0-14	12.2.0-14+deb12u1	1
speckle/speckle-monitor-deployment :2.18.12-branch.testing3.88744-f55b341	81335b40696a	gcc-12@12.2.0-14	12.2.0-14+deb12u1	1
speckle/speckle-monitor-deployment :2.19.2-branch.hotfix-2.19.1.124125-665e7e1	b696ac5022ab	gcc-12@12.2.0-14	12.2.0-14+deb12u1	1
speckle/speckle-monitor-deployment :2.21.3-branch.testing5.219631-2153bef	cf72ad0f25fb	gcc-12@12.2.0-14	12.2.0-14+deb12u1	1
speckle/speckle-monitor-deployment :2.26.3	d51e1b0cf231	gcc-12@12.2.0-14	12.2.0-14+deb12u1	1
speckle/speckle-monitor-deployment :2.18.11-branch.testing2.88634-335d469	d6790a97ad47	gcc-12@12.2.0-14	12.2.0-14+deb12u1	1
speckle/speckle-monitor-deployment :2.17.14-branch.testing.72707.921a5f8	ff1641ac3f1b	gcc-12@12.2.0-14	12.2.0-14+deb12u1	1
speckle/speckle-preview-service :2.26.3	092384dba45d	gcc-12@12.2.0-14	12.2.0-14+deb12u1	1
speckle/speckle-preview-service :2.20.2-branch.testing4.134160-9fad4b2	1f897ca906ea	gcc-12@12.2.0-14	12.2.0-14+deb12u1	1
speckle/speckle-preview-service :2.21.3-branch.testing5.219631-2153bef	52cad5e3293e	gcc-12@12.2.0-14	12.2.0-14+deb12u1	1
speckle/speckle-preview-service :2.23.14-branch.testing6.334655-b4e04ee	6dee853ba74a	gcc-12@12.2.0-14	12.2.0-14+deb12u1	1
speckle/speckle-preview-service :2.25.10-branch.testing6.645-b125c1e	787adcb20a3a	gcc-12@12.2.0-14	12.2.0-14+deb12u1	1
speckle/speckle-preview-service :2.17.14-branch.testing.72707.921a5f8	84fc39bca0c8	gcc-12@12.2.0-14	12.2.0-14+deb12u1	1
speckle/speckle-preview-service :2.20.6-branch.testing1.154030-9b09114	8f3c1ea153ba	gcc-12@12.2.0-14	12.2.0-14+deb12u1	1
speckle/speckle-preview-service :2.19.2-branch.hotfix-2.19.1.124125-665e7e1	c102b087481a	gcc-12@12.2.0-14	12.2.0-14+deb12u1	1
speckle/speckle-preview-service :2.20.3-branch.hotfix-2.20.2.149555-37ea0cb	d3da0a84de98	gcc-12@12.2.0-14	12.2.0-14+deb12u1	1
speckle/speckle-server :2.17.14-branch.testing.72707.921a5f8	49d10dcdfb91	gcc-12@12.2.0-14	12.2.0-14+deb12u1	1
speckle/speckle-server :2.19.2-branch.hotfix-2.19.1.124125-665e7e1	4b6a0750d5aa	gcc-12@12.2.0-14	12.2.0-14+deb12u1	1
speckle/speckle-server :2.20.3-branch.hotfix-2.20.2.149555-37ea0cb	52f8eabf5cea	gcc-12@12.2.0-14	12.2.0-14+deb12u1	1
speckle/speckle-server :2.20.2-branch.testing4.134160-9fad4b2	687f43ab16f3	gcc-12@12.2.0-14	12.2.0-14+deb12u1	1
speckle/speckle-server :2.18.12-branch.testing3.88744-f55b341	89a5872375f9	gcc-12@12.2.0-14	12.2.0-14+deb12u1	1
speckle/speckle-server :2.21.3-branch.testing5.219631-2153bef	8fd157733393	gcc-12@12.2.0-14	12.2.0-14+deb12u1	1
speckle/speckle-server :2.18.11-branch.testing2.88634-335d469	bf6a501b2210	gcc-12@12.2.0-14	12.2.0-14+deb12u1	1
speckle/speckle-server :2.20.6-branch.testing1.154030-9b09114	e8413f57b327	gcc-12@12.2.0-14	12.2.0-14+deb12u1	1
speckle/speckle-webhook-service :2.21.3-branch.testing5.219631-2153bef	06ecc7a66a40	gcc-12@12.2.0-14	12.2.0-14+deb12u1	1
speckle/speckle-webhook-service :2.20.3-branch.hotfix-2.20.2.149555-37ea0cb	107c63336ab5	gcc-12@12.2.0-14	12.2.0-14+deb12u1	1
speckle/speckle-webhook-service :2.19.2-branch.hotfix-2.19.1.124125-665e7e1	4828aee2277c	gcc-12@12.2.0-14	12.2.0-14+deb12u1	1
speckle/speckle-webhook-service :2.20.2-branch.testing4.134160-9fad4b2	70f5167d1d4d	gcc-12@12.2.0-14	12.2.0-14+deb12u1	1
speckle/speckle-webhook-service :2.18.12-branch.testing3.88744-f55b341	771f872cfa63	gcc-12@12.2.0-14	12.2.0-14+deb12u1	1
speckle/speckle-webhook-service :2.18.11-branch.testing2.88634-335d469	902b98ad5327	gcc-12@12.2.0-14	12.2.0-14+deb12u1	1