CVE-2023-42366
MediumAdvisory
Published 27 Nov 2023In the index since 5 Sept 2026
- Severity
- Medium
- worst across findings
- CVSS
- 5.5
- base score, highest
- EPSS
- 0.004
- 35th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 813
- of 17,787 indexed, latest versions
- Container images
- 851
- deployed by those charts
- Fix available
- 1 of 2
- affected packages
The matching OSV records carry no description.
Carried by container images the latest versions of 813 of 17,787 indexed charts deploy, on 851 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| busyboxapk | 1.35.0-r10, 1.35.0-r13, 1.35.0-r14, 1.35.0-r15+10 more | 1.35.0-r18, 1.35.0-r30, 1.36.1-r6, 1.36.1-r16+1 more | 825 |
| busyboxdeb | 1:1.21.0-1ubuntu1, 1:1.21.0-1ubuntu1.4, 1:1.30.1-4ubuntu6.4, 1:1.30.1-7ubuntu3+6 more | no fix listed | 26 |
Charts affected
813 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| owlxdVerified publisher | 0.5.1 | 2 of 2See more | 3,880 |
| passportxdVerified publisher | 0.2.16 | 2 of 2See more | 3,974 |
| tabbyxdVerified publisher | 1.0.6 | 1 of 2See more | 7,685 |
| treexdVerified publisher | 0.1.10 | 1 of 1See more | 1,997 |
| zooxdVerified publisher | 0.4.0 | 1 of 1See more | 1,955 |
| pgbounceryasn77-pgbouncer | 0.0.8 | 1 of 1See more | 1,152 |
| prometheusalertygqygq2Verified publisher | 1.0.0 | 1 of 1See more | 1,610 |
| rawfile-csiymatrixVerified publisher | 0.2.1 | 1 of 4See more | 7,972 |
| zahori-consulzahoriVerified publisher | 1.0.1 | 2 of 2See more | 5,033 |
| zahori-postgresqlzahoriVerified publisher | 1.0.1 | 1 of 1See more | 448 |
| zahori-processzahoriVerified publisher | 1.0.1 | 1 of 1See more | 3,480 |
| zahori-serverzahoriVerified publisher | 1.0.1 | 2 of 2See more | 5,847 |
| sockpuppetbrowserzekker6Verified publisher | 0.1.0 | 1 of 1See more | 1,588 |
Container images carrying it
851 by charts deploying them
A fixed version is listed for 1 of the 2 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| metabase/ | 9ebdc664a6b2 | busybox | 1.35.0-r30 | 1 |
| mher/ | 51c3c3db5be3 | busybox | 1.36.1-r6 | 1 |
| mintproject/ | 9bf26fedd848 | busybox | 1.35.0-r18 | 1 |
| mintproject/ | 222e3b941a36 | busybox | 1.36.1-r6 | 1 |
| mintproject/ | 08c1a13c3397 | busybox | 1.35.0-r18 | 1 |
| mintproject/ | deb80c93b4a9 | busybox | 1.35.0-r18 | 1 |
| mohameddev006/ | 0fbc7360ecf4 | busybox | 1.35.0-r18 | 1 |
| mpopoola1/ | 061fc532de7d | busybox | 1.35.0-r30 | 1 |
| muonsoft/ | c9afe1295484 | busybox | 1.35.0-r30 | 1 |
| n8nio/ | a9195bc499a3 | busybox | 1.35.0-r18 | 1 |
| n8nio/ | dd171d45102a | busybox | 1.36.1-r16 | 1 |
| natsio/ | 1cc420186664 | busybox | 1.36.1-r16 | 1 |
| natsio/ | 59cf2e949181 | busybox | 1.35.0-r30 | 1 |
| natsio/ | c507bd7e3831 | busybox | 1.35.0-r30 | 1 |
| natsio/ | e808e0644ce1 | busybox | 1.36.1-r16 | 1 |
| natsio/ | bb241956b0dc | busybox | 1.36.1-r6 | 1 |
| natsio/ | 0d50270fa374 | busybox | 1.36.1-r16 | 1 |
| natsio/ | 6bdaceb63aa5 | busybox | 1.35.0-r18 | 1 |
| natsio/ | 8c28b75bc416 | busybox | 1.36.1-r6 | 1 |
| natsio/ | c3a755eab2cc | busybox | 1.36.1-r6 | 1 |
| natsio/ | 2adf791d9f9f | busybox | 1.36.1-r6 | 1 |
| neosu/ | 256530d8e5c6 | busybox | 1.36.1-r16 | 1 |
| nginxinc/ | 8265b1df5a89 | busybox | 1.36.1-r16 | 1 |
| nightscout/ | ad29ca7a4de6 | busybox | 1.35.0-r18 | 1 |
| nightscout/ | f604dc4c03ca | busybox | 1.35.0-r18 | 1 |
| nodered/ | e2632a7a35dd | busybox | 1.36.1-r16 | 1 |
| nottiey/ | 9c35a24c9eb3 | busybox | 1.35.0-r30 | 1 |
| nsqio/ | 1a369c146af7 | busybox | 1.36.1-r16 | 1 |
| okaforuchena/ | 004e81250f48 | busybox | 1.35.0-r30 | 1 |
| ooghenekaro/ | d1f972aa844a | busybox | 1.35.0-r30 | 1 |
| ooghenekaro/ | ea5b71588a76 | busybox | 1.35.0-r30 | 1 |
| ooghenekaro/ | e010f5fecbc7 | busybox | 1.35.0-r30 | 1 |
| opencsghq/ | bdd2c58b9744 | busybox | no fix listed | 1 |
| opencsghq/ | f6d7e7d6be5d | busybox | no fix listed | 1 |
| openhab/ | 29dd2bac8c4b | busybox | 1.35.0-r30 | 1 |
| openkruise/ | a8108f771287 | busybox | 1.35.0-r30 | 1 |
| openmined/ | 3a4144c0bb82 | busybox | 1.36.1-r16 | 1 |
| openruntimes/ | 2228f186dcbb | busybox | 1.36.1-r16 | 1 |
| openspeedtest/ | d4d62f4b7d85 | busybox | 1.35.0-r30 | 1 |
| openverso/ | 733f1232b7d3 | busybox | 1.35.0-r18 | 1 |
| openzipkin/ | 197a9692f6a9 | busybox | 1.36.1-r16 | 1 |
| opsmx11/ | 5c50ca123d88 | busybox | no fix listed | 1 |
| oranhack7/ | c6453942223f | busybox | 1.36.1-r16 | 1 |
| oryd/ | 8f15006a080d | busybox | 1.36.1-r6 | 1 |
| oryd/ | 46a7bac1ad0c | busybox | 1.35.0-r30 | 1 |
| oryd/ | d454c21c11bc | busybox | 1.35.0-r30 | 1 |
| owntracks/ | 70105145f719 | busybox | 1.35.0-r18 | 1 |
| pgpool/ | 3782cbf9bb0c | busybox | 1.35.0-r30 | 1 |
| phntom/ | 53883b65d9b7 | busybox | 1.36.1-r6 | 1 |
| phntom/ | 9242b4df9e65 | busybox | 1.35.0-r18 | 1 |