StackRadar

CVE-2023-4039

Medium

Advisory

Published 12 Sept 2023In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
4.8
base score, highest
EPSS
0.008
54th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,101
of 17,792 indexed, latest versions
Container images
1,148
deployed by those charts
Fix available
5 of 12
affected packages

Security update for gcc12

Carried by container images the latest versions of 1,101 of 17,792 indexed charts deploy, on 1,148 images.

Affected packageAffected versionsFixed inImages
gcc-12deb12-20220319-1ubuntu1, 12.1.0-2ubuntu1~22.04, 12.2.0-14, 12.3.0-1ubuntu1~22.0412.2.0-14+deb12u1, 12.3.0-1ubuntu1~22.04.2671
gcc-10deb10-20200411-0ubuntu1, 10.2.0-5ubuntu1~20.04, 10.3.0-1ubuntu1~20.04, 10.5.0-1ubuntu1~20.0410.5.0-1ubuntu1~20.04.1+esm1279
gcc-8deb8-20180414-1ubuntu2, 8.2.0-1ubuntu2~18.04, 8.3.0-6ubuntu1~18.04, 8.3.0-6ubuntu1~18.04.1+3 moreno fix listed120
gcc-5deb5.4.0-6ubuntu1~16.04.4, 5.4.0-6ubuntu1~16.04.5, 5.4.0-6ubuntu1~16.04.9, 5.4.0-6ubuntu1~16.04.10+2 moreno fix listed69
gccgo-6deb6.0.1-0ubuntu1no fix listed69
gcc-9deb9.3.0-17ubuntu1~20.04, 9.4.0-1ubuntu1~20.04.1, 9.4.0-1ubuntu1~20.04.2no fix listed45
gcc-7deb7.3.0-3ubuntu1, 7.3.0-27ubuntu1~18.04, 7.4.0-1ubuntu1~18.04, 7.4.0-1ubuntu1~18.04.1+2 moreno fix listed28
gcc-11deb11.2.0-19ubuntu1, 11.3.0-1ubuntu1~22.04, 11.3.0-12, 11.4.0-1ubuntu1~22.0411.4.0-1ubuntu1~22.04.214
gcc-4.8deb4.8.2-19ubuntu1, 4.8.4-2ubuntu1~14.04.3, 4.8.4-2ubuntu1~14.04.4no fix listed7
gccgo-4.9deb4.9.1-0ubuntu1, 4.9.3-0ubuntu4no fix listed7
gccapk13.1.0-r113.2.0-r31
gcc12rpm12.2.1+git416-150000.1.5.112.3.0+git1204-150000.1.16.11
OSV records
CGA-9fp5-8r38-hf7jDEBIAN-CVE-2023-4039UBUNTU-CVE-2023-4039SUSE-SU-2023:3661-1
Also known as
CGA-hg9x-wx5h-8pph, CGA-qp75-5rvw-vmvm, CGA-xfqf-q2hm-g3r5, USN-7700-1

Charts affected

1,101 by stars
ChartLatestAffected imagesRadar Score
clickhousezloi-space1.2.02 of 3See more

clickhouse zloi-space 1.2.0

2 of the 3 container images this version deploys carry CVE-2023-4039.

Container imageDigestPackageFixed in
yandex/clickhouse-client:21.3863f94a0f607
gcc-8@8.4.0-1ubuntu1~18.04
no fix listed
yandex/clickhouse-server:21.3.204eccfffb01d7
gcc-10@10.3.0-1ubuntu1~20.04
10.5.0-1ubuntu1~20.04.1+esm1

Open the chart page →

9,256

Container images carrying it

1,148 by charts deploying them

A fixed version is listed for 5 of the 12 affected packages.

Container imageDigestPackageFixed inUsed by
zabbix/zabbix-web-nginx-pgsql:ubuntu-6.0.899e9a090b516
gcc-12@12-20220319-1ubuntu1
12.3.0-1ubuntu1~22.04.2
1
zabbix/zabbix-web-service:ubuntu-6.0.8ee4baa872280
gcc-12@12-20220319-1ubuntu1
12.3.0-1ubuntu1~22.04.2
1
gcr.io/abacus-labs-dev/hyperlane-agent:10c0ab1-20231215-220639f33e88324a40
gcc-12@12.3.0-1ubuntu1~22.04
12.3.0-1ubuntu1~22.04.2
1
gcr.io/flink-operator/deployer:webhook-cert809338a69bd5
gcc-7@7.4.0-1ubuntu1~18.04.1
gcc-8@8.3.0-6ubuntu1~18.04.1
no fix listed
no fix listed
1
gcr.io/google-containers/echoserver:1.910f4dbc8eeeb
gcc-5@5.4.0-6ubuntu1~16.04.4
gccgo-6@6.0.1-0ubuntu1
no fix listed
no fix listed
1
gcr.io/google_containers/echoserver:1.10cb5c1bddd1b5
gcc-5@5.4.0-6ubuntu1~16.04.4
gccgo-6@6.0.1-0ubuntu1
no fix listed
no fix listed
1
gcr.io/istio-release/pilot:release-1.0-latest-daily5ea7b7f3632a
gcc-5@5.4.0-6ubuntu1~16.04.11
gccgo-6@6.0.1-0ubuntu1
no fix listed
no fix listed
1
gcr.io/istio-release/pilot:1.11.1c552478f8f11
gcc-10@10.3.0-1ubuntu1~20.04
10.5.0-1ubuntu1~20.04.1+esm1
1
gcr.io/istio-release/proxyv2:release-1.0-latest-daily8f9ff98fdbef
gcc-5@5.4.0-6ubuntu1~16.04.11
gccgo-6@6.0.1-0ubuntu1
no fix listed
no fix listed
1
gcr.io/istio-release/proxyv2:1.11.19538fabe49fd
gcc-10@10.3.0-1ubuntu1~20.04
10.5.0-1ubuntu1~20.04.1+esm1
1
gcr.io/kubecost1/cost-model:prod-1.108.1852f7923fad3
gcc-12@12.3.0-1ubuntu1~22.04
12.3.0-1ubuntu1~22.04.2
1
gcr.io/ml-pipeline/api-server:2.3.039661bd823e8
gcc-12@12.2.0-14
12.2.0-14+deb12u1
1
gcr.io/ml-pipeline/metadata-envoy:2.0.0-alpha.5e8bc6cf08613
gcc-5@5.4.0-6ubuntu1~16.04.12
gccgo-6@6.0.1-0ubuntu1
no fix listed
no fix listed
1
gcr.io/ml-pipeline/metadata-envoy:2.3.0e8e263a919ff
gcc-10@10.5.0-1ubuntu1~20.04
10.5.0-1ubuntu1~20.04.1+esm1
1
gcr.io/ml-pipeline/metadata-writer:2.3.09bcfd2abc361
gcc-12@12.2.0-14
12.2.0-14+deb12u1
1
gcr.io/rotationalio-habanero/imgtag:89ec287a534a3170d03
gcc-12@12.2.0-14
12.2.0-14+deb12u1
1
gcr.io/tfx-oss-public/ml_metadata_store_server:1.14.051404ef4419c
gcc-10@10.3.0-1ubuntu1~20.04
10.5.0-1ubuntu1~20.04.1+esm1
1
gcr.io/tfx-oss-public/ml_metadata_store_server:1.5.0db8691752b4c
gcc-8@8.4.0-1ubuntu1~18.04
no fix listed
1
ghcr.io/98jan/smalland-server/smalland-server:deveb7be822d5b2
gcc-8@8.4.0-1ubuntu1~18.04
no fix listed
1
ghcr.io/alpineworks/katalog-migrations:v1.0.562c44a384e13
gcc-12@12.2.0-14
12.2.0-14+deb12u1
1
ghcr.io/angelscloud/prometheus-optimizer:latest744bc929a579
gcc-12@12.2.0-14
12.2.0-14+deb12u1
1
ghcr.io/apache/flink-kubernetes-operator:c703255e9c2ce635b89
gcc-12@12.3.0-1ubuntu1~22.04
12.3.0-1ubuntu1~22.04.2
1
ghcr.io/appscode/inbox-server:MailetGroup4a2824296412
gcc-12@12.3.0-1ubuntu1~22.04
12.3.0-1ubuntu1~22.04.2
1
ghcr.io/appscode/s3proxy:sha-a82ca6820518335f9f9
gcc-12@12.3.0-1ubuntu1~22.04
12.3.0-1ubuntu1~22.04.2
1
ghcr.io/astriaorg/astrotrek:0.1.05889bea38e56
gcc-12@12.2.0-14
12.2.0-14+deb12u1
1
ghcr.io/astriaorg/auctioneer:pr-18391386b7b5e555
gcc-12@12.2.0-14
12.2.0-14+deb12u1
1
ghcr.io/astriaorg/conductor:1.1.01f97d131b1d1
gcc-12@12.2.0-14
12.2.0-14+deb12u1
1
ghcr.io/astriaorg/evm-bridge-withdrawer:1.0.29c88e1aff357
gcc-12@12.2.0-14
12.2.0-14+deb12u1
1
ghcr.io/base-org/node:v0.11.11aba0ffe55ea
gcc-12@12.3.0-1ubuntu1~22.04
12.3.0-1ubuntu1~22.04.2
1
ghcr.io/beluga-cloud/jellyfin/jellyfin:10.8.1368f52b993a7f
gcc-12@12.3.0-1ubuntu1~22.04
12.3.0-1ubuntu1~22.04.2
1
ghcr.io/botify-labs/airbyte_exporter:2.3.02105b1f33013
gcc-12@12.2.0-14
12.2.0-14+deb12u1
1
ghcr.io/brittonhayes/arma-reforger:latest6fde1edc0983
gcc-10@10.3.0-1ubuntu1~20.04
10.5.0-1ubuntu1~20.04.1+esm1
1
ghcr.io/buanet/iobroker:v9.1.2ca7dc7362968
gcc-12@12.2.0-14
12.2.0-14+deb12u1
1
ghcr.io/camptocamp/tetragon-policy-builder:master0e99f12bb040
gcc-12@12.2.0-14
12.2.0-14+deb12u1
1
ghcr.io/camunda-community-hub/zeebe-simple-monitor:2.6.2d9d796a1b846
gcc-12@12.3.0-1ubuntu1~22.04
12.3.0-1ubuntu1~22.04.2
1
ghcr.io/cfi2017/opencve-scheduler:3.0.08d943799621b
gcc-12@12.2.0-14
12.2.0-14+deb12u1
1
ghcr.io/chaos-mesh/chaos-daemon:v2.7.29608d9b51452
gcc-12@12.2.0-14
12.2.0-14+deb12u1
1
ghcr.io/chaos-mesh/chaos-dashboard:v2.7.211cdbbc479b3
gcc-12@12.2.0-14
12.2.0-14+deb12u1
1
ghcr.io/chgl/magnifhir:v1.5.213f121613edd
gcc-12@12.3.0-1ubuntu1~22.04
12.3.0-1ubuntu1~22.04.2
1
ghcr.io/colenio/slo-reporting:0.3.316b64d194a27d
gcc-12@12.2.0-14
12.2.0-14+deb12u1
1
ghcr.io/cosmo-workspace/dev-code-server:v0.0.316fda01ae58a
gcc-12@12.2.0-14
12.2.0-14+deb12u1
1
ghcr.io/dask/dask:2024.1.0080150de7d86
gcc-10@10.5.0-1ubuntu1~20.04
10.5.0-1ubuntu1~20.04.1+esm1
1
ghcr.io/dask/dask-notebook:2024.1.0f53bde3acd4f
gcc-12@12.3.0-1ubuntu1~22.04
12.3.0-1ubuntu1~22.04.2
1
ghcr.io/data-fair/elasticsearch:7.17.1aa45adaf59a7
gcc-10@10.3.0-1ubuntu1~20.04
10.5.0-1ubuntu1~20.04.1+esm1
1
ghcr.io/drewburr-labs/evobot:3.0.04ddbb244c82f
gcc-12@12.2.0-14
12.2.0-14+deb12u1
1
ghcr.io/drewburr-labs/mum-discord-bot:3.1.26e82914e1051
gcc-12@12.2.0-14
12.2.0-14+deb12u1
1
ghcr.io/edgelesssys/coordinator:v0.5.0bcd5b8d4c45c
gcc-8@8.4.0-1ubuntu1~18.04
no fix listed
1
ghcr.io/edgelesssys/edgelessdb-sgx-1gb:v0.3.27e1d7a11a11a
gcc-10@10.3.0-1ubuntu1~20.04
10.5.0-1ubuntu1~20.04.1+esm1
1
ghcr.io/element-hq/matrix-authentication-service:0.14.0834ea54370f0
gcc-12@12.2.0-14
12.2.0-14+deb12u1
1
ghcr.io/element-hq/synapse:v1.111.022ae556e0de4
gcc-12@12.2.0-14
12.2.0-14+deb12u1
1

syft 1.42.1 · advisories as of 16 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.