CVE-2023-4039

Medium

Advisory

Published 12 Sept 2023In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 4.8; base score, highest
EPSS: 0.008; 54th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 1,103; of 17,790 indexed, latest versions
Container images: 1,152; deployed by those charts
Fix available: 5 of 12; affected packages

Security update for gcc12

Carried by container images the latest versions of 1,103 of 17,790 indexed charts deploy, on 1,152 images.

Affected package	Affected versions	Fixed in	Images
gcc-12deb	12-20220319-1ubuntu1, 12.1.0-2ubuntu1~22.04, 12.2.0-14, 12.3.0-1ubuntu1~22.04	12.2.0-14+deb12u1, 12.3.0-1ubuntu1~22.04.2	675
gcc-10deb	10-20200411-0ubuntu1, 10.2.0-5ubuntu1~20.04, 10.3.0-1ubuntu1~20.04, 10.5.0-1ubuntu1~20.04	10.5.0-1ubuntu1~20.04.1+esm1	279
gcc-8deb	8-20180414-1ubuntu2, 8.2.0-1ubuntu2~18.04, 8.3.0-6ubuntu1~18.04, 8.3.0-6ubuntu1~18.04.1+3 more	no fix listed	120
gcc-5deb	5.4.0-6ubuntu1~16.04.4, 5.4.0-6ubuntu1~16.04.5, 5.4.0-6ubuntu1~16.04.9, 5.4.0-6ubuntu1~16.04.10+2 more	no fix listed	69
gccgo-6deb	6.0.1-0ubuntu1	no fix listed	69
gcc-9deb	9.3.0-17ubuntu1~20.04, 9.4.0-1ubuntu1~20.04.1, 9.4.0-1ubuntu1~20.04.2	no fix listed	45
gcc-7deb	7.3.0-3ubuntu1, 7.3.0-27ubuntu1~18.04, 7.4.0-1ubuntu1~18.04, 7.4.0-1ubuntu1~18.04.1+2 more	no fix listed	28
gcc-11deb	11.2.0-19ubuntu1, 11.3.0-1ubuntu1~22.04, 11.3.0-12, 11.4.0-1ubuntu1~22.04	11.4.0-1ubuntu1~22.04.2	14
gcc-4.8deb	4.8.2-19ubuntu1, 4.8.4-2ubuntu1~14.04.3, 4.8.4-2ubuntu1~14.04.4	no fix listed	7
gccgo-4.9deb	4.9.1-0ubuntu1, 4.9.3-0ubuntu4	no fix listed	7
gccapk	13.1.0-r1	13.2.0-r3	1
gcc12rpm	12.2.1+git416-150000.1.5.1	12.3.0+git1204-150000.1.16.1	1

OSV records: CGA-9fp5-8r38-hf7j DEBIAN-CVE-2023-4039 UBUNTU-CVE-2023-4039 SUSE-SU-2023:3661-1
Also known as: CGA-hg9x-wx5h-8pph, CGA-qp75-5rvw-vmvm, CGA-xfqf-q2hm-g3r5, USN-7700-1

Charts affected

1,103 by stars

Chart

Latest

Affected images

Radar Score

xkopsxkops

0.1.0

3 of 5 See more

xkops xkops 0.1.0

3 of the 5 container images this version deploys carry CVE-2023-4039.

Container image	Digest	Package	Fixed in
hamzaarshad10/querybackend :1.6.2	2c1c3b86a8e7	gcc-12@12.2.0-14	12.2.0-14+deb12u1
hamzaarshad10/querypodpy :1.7	154f38e8668e	gcc-12@12.2.0-14	12.2.0-14+deb12u1
murtazashah46/helmfile :latest	4d11726cf803	gcc-12@12.2.0-14	12.2.0-14+deb12u1

Open the chart page →

13,783

api-snapyoukadev

0.1.1

1 of 1 See more

api-snap youkadev 0.1.1

1 of the 1 container images this version deploys carry CVE-2023-4039.

Container image	Digest	Package	Fixed in
youkadev/api-snap :0.1.1	4db0f9428e67	gcc-12@12.2.0-14	12.2.0-14+deb12u1

Open the chart page →

2,684

clickhousezloi-space

1.2.0

2 of 3 See more

clickhouse zloi-space 1.2.0

2 of the 3 container images this version deploys carry CVE-2023-4039.

Container image	Digest	Package	Fixed in
yandex/clickhouse-client :21.3	863f94a0f607	gcc-8@8.4.0-1ubuntu1~18.04	no fix listed
yandex/clickhouse-server :21.3.20	4eccfffb01d7	gcc-10@10.3.0-1ubuntu1~20.04	10.5.0-1ubuntu1~20.04.1+esm1

Open the chart page →

9,256

Container images carrying it

1,152 by charts deploying them

A fixed version is listed for 5 of the 12 affected packages.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/topolvm/topolvm-with-sidecar :0.35.0	b354978c440d	gcc-12@12.3.0-1ubuntu1~22.04	12.3.0-1ubuntu1~22.04.2	1
ghcr.io/virtuos/librechat_exporter :2.0.0	50ea1cf0086f	gcc-12@12.2.0-14	12.2.0-14+deb12u1	1
ghcr.io/voxpupuli/container-puppetdb :7.18.0-v1.5.0	a56dfe91f5b1	gcc-12@12.3.0-1ubuntu1~22.04	12.3.0-1ubuntu1~22.04.2	1
ghcr.io/voxpupuli/container-puppetserver :7.17.0-v1.5.0	916746209ac5	gcc-12@12.3.0-1ubuntu1~22.04	12.3.0-1ubuntu1~22.04.2	1
ghcr.io/voxpupuli/puppetserver :8.7.0-main	63873f3f698e	gcc-12@12.3.0-1ubuntu1~22.04	12.3.0-1ubuntu1~22.04.2	1
ghcr.io/vshn/haproxy-with-mysql :1.0.0	a3c27ee3fb2f	gcc-12@12.2.0-14	12.2.0-14+deb12u1	1
ghcr.io/wiremind/grafana-pdf-exporter :v1.7	dbaa8527bf4c	gcc-12@12.2.0-14	12.2.0-14+deb12u1	1
ghcr.io/wizarrrr/wizarr :4.2.0-beta.3	d19d886d5090	gcc-12@12.2.0-14	12.2.0-14+deb12u1	1
ghcr.io/wmde/wbaas-backup :v0.1.7	8e6a9516eac0	gcc-8@8.4.0-1ubuntu1~18.04	no fix listed	1
ghcr.io/woodenmaiden/relfinderreformedfront :latest	344f53763b25	gcc-12@12.2.0-14	12.2.0-14+deb12u1	1
ghcr.io/wundergraph/cosmo/cdn :0.14.1	d86fcf169f15	gcc-12@12.2.0-14	12.2.0-14+deb12u1	1
ghcr.io/wundergraph/cosmo/otelcollector :0.18.1	5a6fe78d4d15	gcc-12@12.2.0-14	12.2.0-14+deb12u1	1
ghcr.io/zoriya/kyoo_autosync :4.7.1	fbba58ddb1a6	gcc-12@12.2.0-14	12.2.0-14+deb12u1	1
ghcr.io/zoriya/kyoo_back :4.7.1	416e980f76a6	gcc-12@12.2.0-14	12.2.0-14+deb12u1	1
ghcr.io/zoriya/kyoo_migrations :4.7.1	f7e607f24071	gcc-12@12.2.0-14	12.2.0-14+deb12u1	1
ghcr.io/zoriya/kyoo_scanner :4.7.1	7dc0ee57b628	gcc-12@12.2.0-14	12.2.0-14+deb12u1	1
mcr.microsoft.com/azure-application-gateway/kubernetes-ingress :1.6.0	bccaa701e2df	gcc-10@10.3.0-1ubuntu1~20.04	10.5.0-1ubuntu1~20.04.1+esm1	1
mcr.microsoft.com/mssql/server :2017-latest	13221ac5f673	gcc-8@8.4.0-1ubuntu1~18.04	no fix listed	1
mcr.microsoft.com/mssql/server :2019-CU16-ubuntu-20.04	49a57dc220b1	gcc-10@10.3.0-1ubuntu1~20.04	10.5.0-1ubuntu1~20.04.1+esm1	1
mcr.microsoft.com/mssql/server :2017-latest	fbf79e0fea59	gcc-8@8.4.0-1ubuntu1~18.04	no fix listed	1
public.ecr.aws/flanksource/incident-manager-ui :v1.4.317	fea799d4fb2f	gcc-12@12.2.0-14	12.2.0-14+deb12u1	1
public.ecr.aws/groundcovercom/grafana-groundcover :v0.0.54-grafana11.3.7	ee9d973e3952	gcc-12@12.3.0-1ubuntu1~22.04	12.3.0-1ubuntu1~22.04.2	1
public.ecr.aws/jtekt-corporation/image-storage-service :v1.16.17	b1493760c716	gcc-12@12.2.0-14	12.2.0-14+deb12u1	1
public.ecr.aws/jtekt-corporation/image-storage-service-gui :v1.9.4	34823c8abe00	gcc-12@12.2.0-14	12.2.0-14+deb12u1	1
public.ecr.aws/jtekt-corporation/shinsei-manager :v2.8.1	5cd62142d6ed	gcc-12@12.2.0-14	12.2.0-14+deb12u1	1
public.ecr.aws/jtekt-corporation/shinsei-manager-front :v1.5.5	f8fb4eea4071	gcc-12@12.2.0-14	12.2.0-14+deb12u1	1
public.ecr.aws/jtekt-corporation/time-series-storage-service :v1.5.1	046ef5c9ed50	gcc-12@12.2.0-14	12.2.0-14+deb12u1	1
public.ecr.aws/k6v9y5g3/cluster-agent :master.575	36d051110158	gcc-12@12.2.0-14	12.2.0-14+deb12u1	1
public.ecr.aws/k6v9y5g3/cluster-agent :cost_k8s_process.576	9e14a72b066d	gcc-12@12.2.0-14	12.2.0-14+deb12u1	1
public.ecr.aws/outerbounds/metaflow_metadata_service :v2.4.13	f7567ce3419d	gcc-12@12.2.0-14	12.2.0-14+deb12u1	1
public.ecr.aws/spotinst/spot-network-client :1.0.0-8-lb_endpoint-d0ec127	efcecf98b912	gcc-8@8.4.0-1ubuntu1~18.04	no fix listed	1
public.ecr.aws/supportpal/helpdesk-monolithic :4.0.4	573779e57fae	gcc-10@10.3.0-1ubuntu1~20.04	10.5.0-1ubuntu1~20.04.1+esm1	1
public.ecr.aws/truefoundrycloud/async-service-distributor :5d48113bc678d694a0c8f8dabb2207c5aa2cfc53	f74851ce31f5	gcc-12@12.2.0-14	12.2.0-14+deb12u1	1
public.ecr.aws/zinclabs/openobserve :v0.8.1	27f8de509169	gcc-12@12.2.0-14	12.2.0-14+deb12u1	1
quay.io/aerokube/jumphost :1.0.1	70fd7c00418d	gcc-12@12.3.0-1ubuntu1~22.04	12.3.0-1ubuntu1~22.04.2	1
quay.io/aerokube/keygen :1.0.1	578934444f04	gcc-12@12.3.0-1ubuntu1~22.04	12.3.0-1ubuntu1~22.04.2	1
quay.io/argoproj/argocd :v2.4.11	5b6701d8fb31	gcc-12@12-20220319-1ubuntu1	12.3.0-1ubuntu1~22.04.2	1
quay.io/argoproj/argocd :v2.8.6	acaf37352569	gcc-12@12.3.0-1ubuntu1~22.04	12.3.0-1ubuntu1~22.04.2	1
quay.io/cilium/cilium :v1.15.1	351d6685dc6f	gcc-12@12.3.0-1ubuntu1~22.04	12.3.0-1ubuntu1~22.04.2	1
quay.io/clustersecret/clustersecret :0.0.14	a9f835d1b241	gcc-12@12.2.0-14	12.2.0-14+deb12u1	1
quay.io/codefresh/redis :7.4.3-debian-12-r0	935f97598255	gcc-12@12.2.0-14	12.2.0-14+deb12u1	1
quay.io/evryfs/docker-mcrouter :0.40.0-9	a2d3a4c67b0f	gcc-8@8.4.0-1ubuntu1~18.04	no fix listed	1
quay.io/evryfs/spring-boot-admin :2.7.10	60950ef63764	gcc-12@12.1.0-2ubuntu1~22.04	12.3.0-1ubuntu1~22.04.2	1
quay.io/fiware/waltid :1.14.1-SNAPSHOT	93889c3d8a34	gcc-12@12.1.0-2ubuntu1~22.04	12.3.0-1ubuntu1~22.04.2	1
quay.io/mongodb/mongodb-enterprise-operator :1.8.2	a1c3843b03bc	gcc-5@5.4.0-6ubuntu1~16.04.12 gccgo-6@6.0.1-0ubuntu1	no fix listed no fix listed	1
quay.io/opsmxpublic/spin-sample-pipeline :v1.0.1	c6a934439421	gcc-5@5.4.0-6ubuntu1~16.04.10 gccgo-6@6.0.1-0ubuntu1	no fix listed no fix listed	1
quay.io/yushiwho/api :e1f9d77	e0d9b93dbf2b	gcc-12@12.2.0-14	12.2.0-14+deb12u1	1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/rabbitmq :3.12.14	5a9334f371f3	gcc-12@12.2.0-14	12.2.0-14+deb12u1	1
registry.gitlab.com/infinitydon/registry/open5gs-aio :v2.2.2	f6385712935f	gcc-10@10.2.0-5ubuntu1~20.04 gcc-9@9.3.0-17ubuntu1~20.04	10.5.0-1ubuntu1~20.04.1+esm1 no fix listed	1
registry.k8s.io/node-problem-detector/node-problem-detector :v0.8.20	52f0618e9bc2	gcc-12@12.2.0-14	12.2.0-14+deb12u1	1