CVE-2023-42364

Medium

Advisory

Published 27 Nov 2023In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 5.5; base score, highest
EPSS: 0.004; 37th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 603; of 17,787 indexed, latest versions
Container images: 635; deployed by those charts
Fix available: 2 of 2; affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 603 of 17,787 indexed charts deploy, on 635 images.

Affected package	Affected versions	Fixed in	Images
busyboxapk	1.35.0-r29, 1.36.0-r9, 1.36.1-r0, 1.36.1-r1+7 more	1.35.0-r31, 1.36.1-r7, 1.36.1-r19, 1.36.1-r29	632
busyboxdeb	1:1.35.0-4+b3, 1:1.35.0-4+b4	1:1.35.0-4+deb12u1	3

OSV records: ALPINE-CVE-2023-42364 DEBIAN-CVE-2023-42364

Charts affected

603 by stars

Chart

Latest

Affected images

Radar Score

zahori-processzahori

1.0.1

1 of 1 See more

zahori-process zahori 1.0.1

1 of the 1 container images this version deploys carry CVE-2023-42364.

Container image	Digest	Package	Fixed in
zahoriaut/zahori-process :0.1.13	351f8a220ed7	busybox@1.36.1-r0	1.36.1-r7

Open the chart page →

3,480

zahori-serverzahori

1.0.1

2 of 2 See more

zahori-server zahori 1.0.1

2 of the 2 container images this version deploys carry CVE-2023-42364.

Container image	Digest	Package	Fixed in
flyway/flyway :9.14.1-alpine	80f12c80502b	busybox@1.35.0-r29	1.35.0-r31
zahoriaut/zahori-server :0.1.17	b2de13916f3e	busybox@1.35.0-r29	1.35.0-r31

Open the chart page →

5,847

sockpuppetbrowserzekker6

0.1.0

1 of 1 See more

sockpuppetbrowser zekker6 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-42364.

Container image	Digest	Package	Fixed in
dgtlmoon/sockpuppetbrowser :latest	f166a963b550	busybox@1.36.1-r5	1.36.1-r7

Open the chart page →

1,588

Container images carrying it

635 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
curlimages/curl :8.5.0	08e466006f08	busybox@1.36.1-r15	1.36.1-r19	7
library/registry :2.8.1	dbaa3e69f563	busybox@1.36.0-r9	1.36.1-r7	6
quay.io/devtron/migrator :v4.16.2	fbeaef7a8566	busybox@1.36.0-r9	1.36.1-r7	6
natsio/nats-box :0.14.1	a67913df95f1	busybox@1.36.1-r4	1.36.1-r7	5
ghcr.io/conductionnl/commonground-gateway-nginx :latest	b72cf734d85f	busybox@1.36.1-r5	1.36.1-r7	5
curlimages/curl :8.8.0	73e4d532ea62	busybox@1.36.1-r18	1.36.1-r19	4
rss3/op-geth :rss3-main-1ecad30	26148aa1bc52	busybox@1.36.1-r15	1.36.1-r19	4
ghcr.io/loft-sh/vcluster-pro :0.0.0-ci-run.10	ab2e1fa19dd4	busybox@1.36.1-r0	1.36.1-r7	4
ghcr.io/skooner-k8s/skooner :stable	60c1562e4d51	busybox@1.36.1-r2	1.36.1-r7	4
alfhou/hammond :v0.0.24	c85dc0293aa1	busybox@1.36.1-r15	1.36.1-r19	3
caddy/ingress :v0.2.1	18d1366fc0e9	busybox@1.36.1-r2	1.36.1-r7	3
grafana/grafana :11.0.0	0dc5a246ab16	busybox@1.36.1-r15	1.36.1-r19	3
library/docker :20.10-dind :20-dind	af96c680a7e1	busybox@1.36.0-r9	1.36.1-r7	3
library/nginx :1.25.5-alpine :1.25-alpine	516475cc129d	busybox@1.36.1-r15	1.36.1-r19	3
library/redis :7.2.4-alpine	c8bb255c3559	busybox@1.36.1-r15	1.36.1-r19	3
natsio/nats-server-config-reloader :0.13.0	b3359eeb10bf	busybox@1.36.1-r0	1.36.1-r7	3
nginxinc/nginx-unprivileged :1.24-alpine	be76a26e238d	busybox@1.36.1-r5	1.36.1-r7	3
oryd/hydra :v2.2.0	2c93beb5e5f2	busybox@1.36.1-r5	1.36.1-r7	3
pnnlmiscscripts/anaconda9 :1683907016.7470503-nginx-1	9a2fe06a1472	busybox@1.35.0-r29	1.35.0-r31	3
rcdelacruz/my-strapi-app :js-amd64	38007f358355	busybox@1.36.1-r5	1.36.1-r7	3
rss3/op-node :d2c5ced00901227473fc196fda838191f0cb4e02	d1d2ae6efd05	busybox@1.36.1-r5	1.36.1-r7	3
quay.io/devtron/devtron-utils :geni-v1.1.4	f6269309455a	busybox@1.36.1-r15	1.36.1-r19	3
quay.io/devtron/jcmhproxy-ingress :v0.14.6	4286bcccda3e	busybox@1.36.1-r15	1.36.1-r19	3
quay.io/devtron/kubewatch :49f906a5-419-14814	eec0305b594c	busybox@1.36.1-r2	1.36.1-r7	3
quay.io/jupyterhub/configurable-http-proxy :4.6.1	fd916f75415f	busybox@1.36.1-r5	1.36.1-r7	3
quay.io/metallb/controller :v0.13.10	1b33357b3595	busybox@1.36.0-r9	1.36.1-r7	3
registry.k8s.io/ingress-nginx/controller :v1.8.1	e5c4824e7375	busybox@1.36.1-r0	1.36.1-r7	3
agoldis/sorry-cypress-api :2.5.11	afaa5a84051d	busybox@1.36.1-r2	1.36.1-r7	2
agoldis/sorry-cypress-dashboard :2.5.11	e061e5714238	busybox@1.35.0-r29	1.35.0-r31	2
agoldis/sorry-cypress-director :2.5.11	10228ecd353b	busybox@1.36.1-r2	1.36.1-r7	2
apache/superset :dockerize	afe59523a6c8	busybox@1.36.1-r15	1.36.1-r19	2
chatwoot/chatwoot :v3.1.0	d530ab8c1753	busybox@1.36.1-r2	1.36.1-r7	2
clickhouse/clickhouse-server :24.3.3.102-alpine	f226fe41f057	busybox@1.36.1-r15	1.36.1-r19	2
cs3org/wopiserver :v9.4.2	02a9e78757b4	busybox@1.35.0-r29	1.35.0-r31	2
curlimages/curl :8.4.0	4a3396ae573c	busybox@1.36.1-r4	1.36.1-r7	2
curlimages/curl :8.6.0	c3b8bee303c6	busybox@1.36.1-r15	1.36.1-r19	2
daniacobext/airports-frontend :latest	9eae4d39fc33	busybox@1.35.0-r29	1.35.0-r31	2
dtzar/helm-kubectl :3.14.4	55429449408e	busybox@1.36.1-r15	1.36.1-r19	2
epamedp/krci-portal :0.8.0	687acf641097	busybox@1.36.1-r15	1.36.1-r19	2
ethersphere/bee-localchain :latest	0558799ca992	busybox@1.36.1-r15	1.36.1-r19	2
grafana/grafana :11.1.0	079600c9517b	busybox@1.36.1-r15	1.36.1-r19	2
grafana/grafana :11.1.4	886b56d5534e	busybox@1.36.1-r15	1.36.1-r19	2
grafana/loki :3.1.0	d947e68a84d9	busybox@1.36.1-r5	1.36.1-r7	2
grafana/tempo :2.5.0	f0200a9bff6d	busybox@1.36.1-r28	1.36.1-r29	2
hashicorp/vault :1.15.2	6b4e5dadf082	busybox@1.36.1-r2	1.36.1-r7	2
hashicorp/vault-k8s :1.3.1	5d74a885ae3e	busybox@1.36.1-r2	1.36.1-r7	2
inaccel/driver :latest	07271a5c2fe7	busybox@1.36.1-r15	1.36.1-r19	2
inaccel/mkrt :latest	187fd448b6f2	busybox@1.35.0-r29	1.35.0-r31	2
inaccel/monitor :2.1	34bb93de386f	busybox@1.36.1-r15	1.36.1-r19	2
krtk6160/galoy-nostr	cc82a694f818	busybox@1.35.0-r29	1.35.0-r31	2