CVE-2023-42364
MediumAdvisory
Published 27 Nov 2023In the index since 5 Sept 2026
- Severity
- Medium
- worst across findings
- CVSS
- 5.5
- base score, highest
- EPSS
- 0.004
- 37th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 603
- of 17,787 indexed, latest versions
- Container images
- 635
- deployed by those charts
- Fix available
- 2 of 2
- affected packages
The matching OSV records carry no description.
Carried by container images the latest versions of 603 of 17,787 indexed charts deploy, on 635 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| busyboxapk | 1.35.0-r29, 1.36.0-r9, 1.36.1-r0, 1.36.1-r1+7 more | 1.35.0-r31, 1.36.1-r7, 1.36.1-r19, 1.36.1-r29 | 632 |
| busyboxdeb | 1:1.35.0-4+b3, 1:1.35.0-4+b4 | 1:1.35.0-4+deb12u1 | 3 |
- OSV records
- ALPINE-CVE-2023-42364DEBIAN-CVE-2023-42364
Charts affected
603 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| zahori-processzahoriVerified publisher | 1.0.1 | 1 of 1See more | 3,480 |
| zahori-serverzahoriVerified publisher | 1.0.1 | 2 of 2See more | 5,847 |
| sockpuppetbrowserzekker6Verified publisher | 0.1.0 | 1 of 1See more | 1,588 |
Container images carrying it
635 by charts deploying them
A fixed version is listed for 2 of the 2 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| ghcr.io/ | ac8459f70f85 | busybox | 1.35.0-r31 | 1 |
| ghcr.io/ | af77073c184f | busybox | 1.35.0-r31 | 1 |
| ghcr.io/ | 70d74ec46602 | busybox | 1.36.1-r7 | 1 |
| ghcr.io/ | ca51b6bb15dd | busybox | 1.36.1-r7 | 1 |
| ghcr.io/ | ac2e11c41ffb | busybox | 1.36.1-r7 | 1 |
| ghcr.io/ | 65bacf19caa7 | busybox | 1.36.1-r29 | 1 |
| ghcr.io/ | 34a1da9f0f83 | busybox | 1.35.0-r31 | 1 |
| ghcr.io/ | b3256cbc7b68 | busybox | 1.36.1-r7 | 1 |
| ghcr.io/ | 5c109914ff73 | busybox | 1.36.1-r7 | 1 |
| ghcr.io/ | 5dfa86b6451f | busybox | 1.36.1-r7 | 1 |
| ghcr.io/ | b69bcdaa8492 | busybox | 1.36.1-r7 | 1 |
| ghcr.io/ | 84f70425f4dd | busybox | 1.36.1-r7 | 1 |
| ghcr.io/ | 45e744fc623f | busybox | 1.36.1-r7 | 1 |
| ghcr.io/ | 252613692e5e | busybox | 1.36.1-r19 | 1 |
| ghcr.io/ | f7b5d20c5e42 | busybox | 1.36.1-r29 | 1 |
| ghcr.io/ | 2e27cdff8344 | busybox | 1.36.1-r19 | 1 |
| ghcr.io/ | 01d30483e4a8 | busybox | 1.35.0-r31 | 1 |
| ghcr.io/ | e1b6eb9e37f9 | busybox | 1.36.1-r19 | 1 |
| ghcr.io/ | 87120a4561a9 | busybox | 1.35.0-r31 | 1 |
| ghcr.io/ | 53772b7b42c7 | busybox | 1.35.0-r31 | 1 |
| ghcr.io/ | 84928e2fc4f2 | busybox | 1.36.1-r19 | 1 |
| ghcr.io/ | 8dc2d7fb460f | busybox | 1.36.1-r7 | 1 |
| ghcr.io/ | 292d9a8d67c5 | busybox | 1.36.1-r19 | 1 |
| ghcr.io/ | 66e3043851cd | busybox | 1.36.1-r19 | 1 |
| ghcr.io/ | 68d44646e8b2 | busybox | 1.35.0-r31 | 1 |
| ghcr.io/ | c77d84ebf7a6 | busybox | 1.36.1-r19 | 1 |
| ghcr.io/ | 0efdd8d3ef39 | busybox | 1.36.1-r7 | 1 |
| ghcr.io/ | a4ad890e8c4a | busybox | 1.36.1-r19 | 1 |
| ghcr.io/ | 8d299e59fce7 | busybox | 1.36.1-r19 | 1 |
| ghcr.io/ | 27ffdcc8a937 | busybox | 1.36.1-r19 | 1 |
| ghcr.io/ | 79412399f301 | busybox | 1.35.0-r31 | 1 |
| ghcr.io/ | 9066d7b3e6a1 | busybox | 1.36.1-r19 | 1 |
| ghcr.io/ | d96366e208b1 | busybox | 1.36.1-r19 | 1 |
| ghcr.io/ | e9ab76a4ec77 | busybox | 1.36.1-r19 | 1 |
| ghcr.io/ | 071a788162e8 | busybox | 1.36.1-r19 | 1 |
| ghcr.io/ | b0f13eef3abf | busybox | 1.36.1-r29 | 1 |
| ghcr.io/ | 0cf31753ce57 | busybox | 1.35.0-r31 | 1 |
| ghcr.io/ | 9009fbd2ef16 | busybox | 1.35.0-r31 | 1 |
| ghcr.io/ | 1020638bbe23 | busybox | 1.36.1-r7 | 1 |
| ghcr.io/ | ef5e31333821 | busybox | 1.36.1-r7 | 1 |
| ghcr.io/ | 111ed7cf7b39 | busybox | 1.36.1-r7 | 1 |
| ghcr.io/ | f376b96b82cc | busybox | 1.35.0-r31 | 1 |
| ghcr.io/ | 2dc54179b25a | busybox | 1.36.1-r19 | 1 |
| ghcr.io/ | a87f57287805 | busybox | 1.35.0-r31 | 1 |
| ghcr.io/ | b1c7063c66ac | busybox | 1.36.1-r19 | 1 |
| ghcr.io/ | 4f0a86e490b6 | busybox | 1.36.1-r29 | 1 |
| ghcr.io/ | dfd7ea7303a2 | busybox | 1.36.1-r7 | 1 |
| ghcr.io/ | 05aeefbdac2b | busybox | 1.36.1-r7 | 1 |
| ghcr.io/ | 735a1fcd078b | busybox | 1.36.1-r19 | 1 |
| ghcr.io/ | 322f5f8cc105 | busybox | 1.36.1-r19 | 1 |