CVE-2023-42366
MediumAdvisory
Published 27 Nov 2023In the index since 5 Sept 2026
- Severity
- Medium
- worst across findings
- CVSS
- 5.5
- base score, highest
- EPSS
- 0.004
- 35th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 813
- of 17,787 indexed, latest versions
- Container images
- 851
- deployed by those charts
- Fix available
- 1 of 2
- affected packages
The matching OSV records carry no description.
Carried by container images the latest versions of 813 of 17,787 indexed charts deploy, on 851 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| busyboxapk | 1.35.0-r10, 1.35.0-r13, 1.35.0-r14, 1.35.0-r15+10 more | 1.35.0-r18, 1.35.0-r30, 1.36.1-r6, 1.36.1-r16+1 more | 825 |
| busyboxdeb | 1:1.21.0-1ubuntu1, 1:1.21.0-1ubuntu1.4, 1:1.30.1-4ubuntu6.4, 1:1.30.1-7ubuntu3+6 more | no fix listed | 26 |
Charts affected
813 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| owlxdVerified publisher | 0.5.1 | 2 of 2See more | 3,880 |
| passportxdVerified publisher | 0.2.16 | 2 of 2See more | 3,974 |
| tabbyxdVerified publisher | 1.0.6 | 1 of 2See more | 7,685 |
| treexdVerified publisher | 0.1.10 | 1 of 1See more | 1,997 |
| zooxdVerified publisher | 0.4.0 | 1 of 1See more | 1,955 |
| pgbounceryasn77-pgbouncer | 0.0.8 | 1 of 1See more | 1,152 |
| prometheusalertygqygq2Verified publisher | 1.0.0 | 1 of 1See more | 1,610 |
| rawfile-csiymatrixVerified publisher | 0.2.1 | 1 of 4See more | 7,972 |
| zahori-consulzahoriVerified publisher | 1.0.1 | 2 of 2See more | 5,033 |
| zahori-postgresqlzahoriVerified publisher | 1.0.1 | 1 of 1See more | 448 |
| zahori-processzahoriVerified publisher | 1.0.1 | 1 of 1See more | 3,480 |
| zahori-serverzahoriVerified publisher | 1.0.1 | 2 of 2See more | 5,847 |
| sockpuppetbrowserzekker6Verified publisher | 0.1.0 | 1 of 1See more | 1,588 |
Container images carrying it
851 by charts deploying them
A fixed version is listed for 1 of the 2 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| library/ | a10d46445d68 | busybox | 1.36.1-r6 | 1 |
| library/ | 8906e7654a20 | busybox | 1.36.1-r16 | 1 |
| library/ | eff78098089f | busybox | 1.36.1-r16 | 1 |
| library/ | bca70839d953 | busybox | 1.36.1-r16 | 1 |
| library/ | ccbe811b8575 | busybox | 1.35.0-r30 | 1 |
| library/ | d6c6ae7df4a0 | busybox | 1.36.1-r6 | 1 |
| library/ | f576cdc17cc3 | busybox | 1.35.0-r18 | 1 |
| library/ | 588609d76b21 | busybox | no fix listed | 1 |
| library/ | b7faa1653c39 | busybox | no fix listed | 1 |
| library/ | de4ad9389386 | busybox | no fix listed | 1 |
| library/ | 22414422d1ba | busybox | 1.36.1-r16 | 1 |
| library/ | 31bad00311cb | busybox | 1.36.1-r6 | 1 |
| library/ | 455c39afebd4 | busybox | 1.35.0-r18 | 1 |
| library/ | 0aeb129a60da | busybox | 1.35.0-r18 | 1 |
| library/ | 4b100eafe128 | busybox | 1.35.0-r30 | 1 |
| library/ | 73ea9cdd4a9d | busybox | 1.36.1-r6 | 1 |
| library/ | 951bfda46030 | busybox | 1.36.1-r16 | 1 |
| library/ | f3e018bec283 | busybox | 1.35.0-r30 | 1 |
| library/ | 4bcec9fde55c | busybox | 1.36.1-r16 | 1 |
| library/ | 711d76bc8d98 | busybox | 1.35.0-r18 | 1 |
| library/ | b4abd8d41c68 | busybox | 1.36.1-r16 | 1 |
| library/ | c3e526769bfd | busybox | 1.35.0-r18 | 1 |
| library/ | 0f0e2fa71653 | busybox | 1.35.0-r30 | 1 |
| library/ | 2700d5097763 | busybox | 1.35.0-r18 | 1 |
| library/ | 0a5157f742d2 | busybox | 1.36.1-r16 | 1 |
| library/ | 1489caffaedb | busybox | 1.35.0-r30 | 1 |
| library/ | 1957e3314f43 | busybox | 1.36.1-r6 | 1 |
| library/ | f98ac9dd97b0 | busybox | 1.36.1-r6 | 1 |
| linuxserver/ | f8f5f96b6ea8 | busybox | 1.36.1-r6 | 1 |
| linuxserver/ | 94696dab3c50 | busybox | 1.35.0-r30 | 1 |
| linuxserver/ | 6f5b9586a93e | busybox | 1.36.1-r6 | 1 |
| lishimeng/ | 3d5752dac834 | busybox | 1.35.0-r30 | 1 |
| lishimeng/ | c79a67657baf | busybox | 1.35.0-r30 | 1 |
| lishimeng/ | 3d00485e64dc | busybox | 1.35.0-r30 | 1 |
| lishimeng/ | 3e7d05ded625 | busybox | 1.35.0-r30 | 1 |
| lishimeng/ | 0970dfe5dc8f | busybox | 1.35.0-r30 | 1 |
| lishimeng/ | 8145c3dc83c8 | busybox | 1.35.0-r30 | 1 |
| lishimeng/ | 9b2f8be6c7d3 | busybox | 1.35.0-r30 | 1 |
| lishimeng/ | e0b8d2d8ca28 | busybox | 1.35.0-r30 | 1 |
| litestream/ | c5a1e1b01916 | busybox | 1.35.0-r30 | 1 |
| liukunup/ | 9c079617a81b | busybox | 1.35.0-r18 | 1 |
| logiqai/ | f5b551bca98e | busybox | 1.35.0-r18 | 1 |
| lukasreining/ | 50e021c42e33 | busybox | 1.35.0-r30 | 1 |
| maksimkavalenka/ | 64a25afb8748 | busybox | 1.36.1-r6 | 1 |
| maksimkavalenka/ | 13ad9bb170a0 | busybox | 1.36.1-r6 | 1 |
| maksimkavalenka/ | 2bcdac368b07 | busybox | 1.36.1-r6 | 1 |
| marnixjanssen/ | 81c97351ea2e | busybox | 1.36.1-r6 | 1 |
| matrixdb/ | 95b2e38e913d | busybox | 1.35.0-r18 | 1 |
| matthiasluedtke/ | 661d607b0fbc | busybox | 1.36.1-r6 | 1 |
| mesosphere/ | b093d78a21ed | busybox | 1.36.1-r6 | 1 |