CVE-2023-42364
MediumAdvisory
Published 27 Nov 2023In the index since 5 Sept 2026
- Severity
- Medium
- worst across findings
- CVSS
- 5.5
- base score, highest
- EPSS
- 0.004
- 37th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 603
- of 17,787 indexed, latest versions
- Container images
- 635
- deployed by those charts
- Fix available
- 2 of 2
- affected packages
The matching OSV records carry no description.
Carried by container images the latest versions of 603 of 17,787 indexed charts deploy, on 635 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| busyboxapk | 1.35.0-r29, 1.36.0-r9, 1.36.1-r0, 1.36.1-r1+7 more | 1.35.0-r31, 1.36.1-r7, 1.36.1-r19, 1.36.1-r29 | 632 |
| busyboxdeb | 1:1.35.0-4+b3, 1:1.35.0-4+b4 | 1:1.35.0-4+deb12u1 | 3 |
- OSV records
- ALPINE-CVE-2023-42364DEBIAN-CVE-2023-42364
Charts affected
603 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| zahori-processzahoriVerified publisher | 1.0.1 | 1 of 1See more | 3,480 |
| zahori-serverzahoriVerified publisher | 1.0.1 | 2 of 2See more | 5,847 |
| sockpuppetbrowserzekker6Verified publisher | 0.1.0 | 1 of 1See more | 1,588 |
Container images carrying it
635 by charts deploying them
A fixed version is listed for 2 of the 2 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| zurdi15/ | 2db88fe44c89 | busybox | 1.35.0-r31 | 1 |
| gcr.io/ | 4c6df805bbf2 | busybox | 1.36.1-r7 | 1 |
| ghcr.io/ | 985456bdfb46 | busybox | 1.36.1-r7 | 1 |
| ghcr.io/ | b1557553a2b3 | busybox | 1.36.1-r19 | 1 |
| ghcr.io/ | d6c2532ea386 | busybox | 1.36.1-r19 | 1 |
| ghcr.io/ | a608b798fda5 | busybox | 1.36.1-r7 | 1 |
| ghcr.io/ | a06c8ebef427 | busybox | 1.36.1-r7 | 1 |
| ghcr.io/ | 752f1aa02438 | busybox | 1.36.1-r7 | 1 |
| ghcr.io/ | aa7831e207cd | busybox | 1.36.1-r7 | 1 |
| ghcr.io/ | 74aff24d4b97 | busybox | 1.35.0-r31 | 1 |
| ghcr.io/ | c8a0d5ec5a12 | busybox | 1.36.1-r19 | 1 |
| ghcr.io/ | 9ab9a675c405 | busybox | 1.36.1-r7 | 1 |
| ghcr.io/ | 5ef6bdb63604 | busybox | 1.36.1-r7 | 1 |
| ghcr.io/ | 29ecf8d4fa65 | busybox | 1.36.1-r7 | 1 |
| ghcr.io/ | 435518f49e23 | busybox | 1.36.1-r7 | 1 |
| ghcr.io/ | 5c85f2b82064 | busybox | 1.36.1-r7 | 1 |
| ghcr.io/ | aaab005242ae | busybox | 1.36.1-r19 | 1 |
| ghcr.io/ | 8344061b2f22 | busybox | 1.36.1-r19 | 1 |
| ghcr.io/ | 503c00321502 | busybox | 1.36.1-r7 | 1 |
| ghcr.io/ | 21275bc02f75 | busybox | 1.35.0-r31 | 1 |
| ghcr.io/ | cc9498b64b5b | busybox | 1.36.1-r7 | 1 |
| ghcr.io/ | a8d40779eeae | busybox | 1.36.1-r7 | 1 |
| ghcr.io/ | 8b621866ceb2 | busybox | 1.35.0-r31 | 1 |
| ghcr.io/ | 5a9216989707 | busybox | 1.36.1-r7 | 1 |
| ghcr.io/ | 96c25035cb02 | busybox | 1.36.1-r19 | 1 |
| ghcr.io/ | f579d00721b0 | busybox | 1.36.1-r7 | 1 |
| ghcr.io/ | ec06685b9ff4 | busybox | 1.36.1-r29 | 1 |
| ghcr.io/ | ab3f7d0a1d50 | busybox | 1.36.1-r19 | 1 |
| ghcr.io/ | 2f5be9cde5f9 | busybox | 1.36.1-r19 | 1 |
| ghcr.io/ | 7e5630757299 | busybox | 1.36.1-r19 | 1 |
| ghcr.io/ | a2162df94729 | busybox | 1.35.0-r31 | 1 |
| ghcr.io/ | 561c8f23bdb6 | busybox | 1.36.1-r19 | 1 |
| ghcr.io/ | e3552fa0c68a | busybox | 1.36.1-r7 | 1 |
| ghcr.io/ | f9063e20b1f6 | busybox | 1.36.1-r7 | 1 |
| ghcr.io/ | 324f9b7b689c | busybox | 1.36.1-r19 | 1 |
| ghcr.io/ | cdba39e3f3d0 | busybox | 1.36.1-r19 | 1 |
| ghcr.io/ | 6dfdbc9853bb | busybox | 1.36.1-r19 | 1 |
| ghcr.io/ | d39a9d7c3e1b | busybox | 1.36.1-r19 | 1 |
| ghcr.io/ | 1fd90a9e4d04 | busybox | 1.36.1-r19 | 1 |
| ghcr.io/ | a5c1daef46c0 | busybox | 1.36.1-r7 | 1 |
| ghcr.io/ | 71d1f1c0179e | busybox | 1.36.1-r7 | 1 |
| ghcr.io/ | feffc0b8227d | busybox | 1.36.1-r7 | 1 |
| ghcr.io/ | 31030fd2f192 | busybox | 1.36.1-r7 | 1 |
| ghcr.io/ | 94c9a3e799c2 | busybox | 1.35.0-r31 | 1 |
| ghcr.io/ | e1017d0dbd78 | busybox | 1.35.0-r31 | 1 |
| ghcr.io/ | 3acba3df8827 | busybox | 1.36.1-r19 | 1 |
| ghcr.io/ | 49b1c312e342 | busybox | 1.35.0-r31 | 1 |
| ghcr.io/ | aa0c8526ae5e | busybox | 1.35.0-r31 | 1 |
| ghcr.io/ | a1d4cf8b8fe1 | busybox | 1.35.0-r31 | 1 |
| ghcr.io/ | e3d1f1302e49 | busybox | 1.35.0-r31 | 1 |