CVE-2023-4039

Medium

Advisory

Published 12 Sept 2023In the index since 5 Sept 2026

Security update for gcc12

Carried by container images the latest versions of 1,103 of 17,790 indexed charts deploy, on 1,152 images.

Affected package	Affected versions	Fixed in	Images
gcc-12deb	12-20220319-1ubuntu1, 12.1.0-2ubuntu1~22.04, 12.2.0-14, 12.3.0-1ubuntu1~22.04	12.2.0-14+deb12u1, 12.3.0-1ubuntu1~22.04.2	675
gcc-10deb	10-20200411-0ubuntu1, 10.2.0-5ubuntu1~20.04, 10.3.0-1ubuntu1~20.04, 10.5.0-1ubuntu1~20.04	10.5.0-1ubuntu1~20.04.1+esm1	279
gcc-8deb	8-20180414-1ubuntu2, 8.2.0-1ubuntu2~18.04, 8.3.0-6ubuntu1~18.04, 8.3.0-6ubuntu1~18.04.1+3 more	no fix listed	120
gcc-5deb	5.4.0-6ubuntu1~16.04.4, 5.4.0-6ubuntu1~16.04.5, 5.4.0-6ubuntu1~16.04.9, 5.4.0-6ubuntu1~16.04.10+2 more	no fix listed	69
gccgo-6deb	6.0.1-0ubuntu1	no fix listed	69
gcc-9deb	9.3.0-17ubuntu1~20.04, 9.4.0-1ubuntu1~20.04.1, 9.4.0-1ubuntu1~20.04.2	no fix listed	45
gcc-7deb	7.3.0-3ubuntu1, 7.3.0-27ubuntu1~18.04, 7.4.0-1ubuntu1~18.04, 7.4.0-1ubuntu1~18.04.1+2 more	no fix listed	28
gcc-11deb	11.2.0-19ubuntu1, 11.3.0-1ubuntu1~22.04, 11.3.0-12, 11.4.0-1ubuntu1~22.04	11.4.0-1ubuntu1~22.04.2	14
gcc-4.8deb	4.8.2-19ubuntu1, 4.8.4-2ubuntu1~14.04.3, 4.8.4-2ubuntu1~14.04.4	no fix listed	7
gccgo-4.9deb	4.9.1-0ubuntu1, 4.9.3-0ubuntu4	no fix listed	7
gccapk	13.1.0-r1	13.2.0-r3	1
gcc12rpm	12.2.1+git416-150000.1.5.1	12.3.0+git1204-150000.1.16.1	1

OSV records: CGA-9fp5-8r38-hf7j DEBIAN-CVE-2023-4039 UBUNTU-CVE-2023-4039 SUSE-SU-2023:3661-1
Also known as: CGA-hg9x-wx5h-8pph, CGA-qp75-5rvw-vmvm, CGA-xfqf-q2hm-g3r5, USN-7700-1

1,103 by stars

Chart

Latest

Affected images

Radar Score

3 of the 5 container images this version deploys carry CVE-2023-4039.

Container image	Digest	Package	Fixed in
hamzaarshad10/querybackend :1.6.2	2c1c3b86a8e7	gcc-12@12.2.0-14	12.2.0-14+deb12u1
hamzaarshad10/querypodpy :1.7	154f38e8668e	gcc-12@12.2.0-14	12.2.0-14+deb12u1
murtazashah46/helmfile :latest	4d11726cf803	gcc-12@12.2.0-14	12.2.0-14+deb12u1

13,783

1 of the 1 container images this version deploys carry CVE-2023-4039.

Container image	Digest	Package	Fixed in
youkadev/api-snap :0.1.1	4db0f9428e67	gcc-12@12.2.0-14	12.2.0-14+deb12u1

2,684

2 of the 3 container images this version deploys carry CVE-2023-4039.

Container image	Digest	Package	Fixed in
yandex/clickhouse-client :21.3	863f94a0f607	gcc-8@8.4.0-1ubuntu1~18.04	no fix listed
yandex/clickhouse-server :21.3.20	4eccfffb01d7	gcc-10@10.3.0-1ubuntu1~20.04	10.5.0-1ubuntu1~20.04.1+esm1

9,256

1,152 by charts deploying them

A fixed version is listed for 5 of the 12 affected packages.

Container image	Digest	Package	Fixed in	Used by
registry.k8s.io/sig-storage/local-volume-provisioner :v2.8.0	3e2bf2eaef9f	gcc-12@12.2.0-14	12.2.0-14+deb12u1	1
registry.k8s.io/sig-storage/nfsplugin :v4.11.0	ce5b5ccd5eb0	gcc-12@12.2.0-14	12.2.0-14+deb12u1	1