CVE-2023-42366
MediumAdvisory
Published 27 Nov 2023In the index since 5 Sept 2026
- Severity
- Medium
- worst across findings
- CVSS
- 5.5
- base score, highest
- EPSS
- 0.004
- 35th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 813
- of 17,787 indexed, latest versions
- Container images
- 851
- deployed by those charts
- Fix available
- 1 of 2
- affected packages
The matching OSV records carry no description.
Carried by container images the latest versions of 813 of 17,787 indexed charts deploy, on 851 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| busyboxapk | 1.35.0-r10, 1.35.0-r13, 1.35.0-r14, 1.35.0-r15+10 more | 1.35.0-r18, 1.35.0-r30, 1.36.1-r6, 1.36.1-r16+1 more | 825 |
| busyboxdeb | 1:1.21.0-1ubuntu1, 1:1.21.0-1ubuntu1.4, 1:1.30.1-4ubuntu6.4, 1:1.30.1-7ubuntu3+6 more | no fix listed | 26 |
Charts affected
813 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| owlxdVerified publisher | 0.5.1 | 2 of 2See more | 3,880 |
| passportxdVerified publisher | 0.2.16 | 2 of 2See more | 3,974 |
| tabbyxdVerified publisher | 1.0.6 | 1 of 2See more | 7,685 |
| treexdVerified publisher | 0.1.10 | 1 of 1See more | 1,997 |
| zooxdVerified publisher | 0.4.0 | 1 of 1See more | 1,955 |
| pgbounceryasn77-pgbouncer | 0.0.8 | 1 of 1See more | 1,152 |
| prometheusalertygqygq2Verified publisher | 1.0.0 | 1 of 1See more | 1,610 |
| rawfile-csiymatrixVerified publisher | 0.2.1 | 1 of 4See more | 7,972 |
| zahori-consulzahoriVerified publisher | 1.0.1 | 2 of 2See more | 5,033 |
| zahori-postgresqlzahoriVerified publisher | 1.0.1 | 1 of 1See more | 448 |
| zahori-processzahoriVerified publisher | 1.0.1 | 1 of 1See more | 3,480 |
| zahori-serverzahoriVerified publisher | 1.0.1 | 2 of 2See more | 5,847 |
| sockpuppetbrowserzekker6Verified publisher | 0.1.0 | 1 of 1See more | 1,588 |
Container images carrying it
851 by charts deploying them
A fixed version is listed for 1 of the 2 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| charmcli/ | 39523c1a6ba8 | busybox | 1.35.0-r18 | 1 |
| chetangautamm/ | b4b94155ff5a | busybox | no fix listed | 1 |
| chirpstack/ | fb7667fe037f | busybox | 1.35.0-r30 | 1 |
| chirpstack/ | c0bbbb7a3f1e | busybox | 1.35.0-r30 | 1 |
| chrisfu/ | f8b4996a203d | busybox | 1.36.1-r6 | 1 |
| chrislusf/ | 634b094b2183 | busybox | 1.36.1-r16 | 1 |
| chrislusf/ | ed80f00fde46 | busybox | 1.36.1-r6 | 1 |
| chriswells0/ | f3918ec8471c | busybox | 1.36.1-r6 | 1 |
| circleci/ | 4d8d0ae5efc3 | busybox | 1.35.0-r30 | 1 |
| clickhouse/ | 01b81d1432c4 | busybox | no fix listed | 1 |
| clickhouse/ | 810861a2e2d0 | busybox | no fix listed | 1 |
| clickhouse/ | 92098d3b31dd | busybox | no fix listed | 1 |
| clickhouse/ | e019438e1e05 | busybox | no fix listed | 1 |
| cloudnativelabs/ | 0ec7cd73f43f | busybox | 1.35.0-r30 | 1 |
| cnieg/ | d4b478d76f2a | busybox | 1.35.0-r18 | 1 |
| codecov/ | 0475cb1c3136 | busybox | 1.36.1-r6 | 1 |
| codecov/ | 534bc4778073 | busybox | 1.35.0-r30 | 1 |
| codecov/ | de483faad6e5 | busybox | 1.36.1-r6 | 1 |
| codecov/ | 837f546b479b | busybox | 1.36.1-r6 | 1 |
| coldatom/ | eae9e82da080 | busybox | 1.35.0-r30 | 1 |
| coldatom/ | 7c2fbbb41bcf | busybox | 1.35.0-r30 | 1 |
| commerceexperts/ | 9e33ad89baf6 | busybox | 1.36.1-r16 | 1 |
| crazymax/ | 841b10cdae76 | busybox | 1.36.1-r6 | 1 |
| crazymax/ | fb307f5b87bf | busybox | 1.35.0-r30 | 1 |
| cryptexlabs/ | 189c07411d7c | busybox | 1.36.1-r16 | 1 |
| cryptexlabs/ | ed0bc94fd412 | busybox | 1.36.1-r16 | 1 |
| csepulvedab/ | 227a6f2b0ff8 | busybox | 1.35.0-r18 | 1 |
| curlimages/ | 25d29daeb9b1 | busybox | 1.36.1-r16 | 1 |
| curlimages/ | 5af13420d29b | busybox | 1.35.0-r30 | 1 |
| curlimages/ | 9e886c104cae | busybox | 1.35.0-r18 | 1 |
| curlimages/ | d1658d9c8ef9 | busybox | 1.35.0-r18 | 1 |
| czerwonk/ | 94f51e1ef1e2 | busybox | 1.36.1-r16 | 1 |
| daledavies/ | 0a0c8ad93902 | busybox | 1.36.1-r16 | 1 |
| danny1dockerhub/ | e434683fcc89 | busybox | 1.35.0-r30 | 1 |
| datasaker/ | 08b52999f67b | busybox | 1.35.0-r18 | 1 |
| davdiv/ | a85f99be882c | busybox | 1.36.1-r16 | 1 |
| davidvmar/ | e9ce2608f799 | busybox | 1.35.0-r18 | 1 |
| ddefrancesco/ | daaac6657600 | busybox | 1.36.1-r16 | 1 |
| ddosify/ | 56dbd7cf0776 | busybox | 1.36.1-r6 | 1 |
| ddosify/ | bf454ab99d89 | busybox | 1.36.1-r6 | 1 |
| deepflowce/ | 29332fee7fc2 | busybox | no fix listed | 1 |
| deepflowce/ | 34fcc526dd59 | busybox | 1.36.1-r6 | 1 |
| defactops/ | 825cdf9ba706 | busybox | 1.36.1-r16 | 1 |
| deluan/ | 11a24da08977 | busybox | 1.35.0-r30 | 1 |
| deluan/ | 2cf4442b0099 | busybox | 1.36.1-r6 | 1 |
| devopsfaith/ | 4c678c224f67 | busybox | 1.36.1-r6 | 1 |
| devopstales/ | 93d8a978af05 | busybox | 1.35.0-r18 | 1 |
| devopstales/ | 75136aa7a26e | busybox | 1.35.0-r30 | 1 |
| dgtlmoon/ | f166a963b550 | busybox | 1.36.1-r6 | 1 |
| dinutac/ | 9340dde8a8a4 | busybox | 1.36.1-r16 | 1 |