CVE-2023-42366
MediumAdvisory
Published 27 Nov 2023In the index since 5 Sept 2026
- Severity
- Medium
- worst across findings
- CVSS
- 5.5
- base score, highest
- EPSS
- 0.004
- 35th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 813
- of 17,787 indexed, latest versions
- Container images
- 851
- deployed by those charts
- Fix available
- 1 of 2
- affected packages
The matching OSV records carry no description.
Carried by container images the latest versions of 813 of 17,787 indexed charts deploy, on 851 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| busyboxapk | 1.35.0-r10, 1.35.0-r13, 1.35.0-r14, 1.35.0-r15+10 more | 1.35.0-r18, 1.35.0-r30, 1.36.1-r6, 1.36.1-r16+1 more | 825 |
| busyboxdeb | 1:1.21.0-1ubuntu1, 1:1.21.0-1ubuntu1.4, 1:1.30.1-4ubuntu6.4, 1:1.30.1-7ubuntu3+6 more | no fix listed | 26 |
Charts affected
813 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| owlxdVerified publisher | 0.5.1 | 2 of 2See more | 3,880 |
| passportxdVerified publisher | 0.2.16 | 2 of 2See more | 3,974 |
| tabbyxdVerified publisher | 1.0.6 | 1 of 2See more | 7,685 |
| treexdVerified publisher | 0.1.10 | 1 of 1See more | 1,997 |
| zooxdVerified publisher | 0.4.0 | 1 of 1See more | 1,955 |
| pgbounceryasn77-pgbouncer | 0.0.8 | 1 of 1See more | 1,152 |
| prometheusalertygqygq2Verified publisher | 1.0.0 | 1 of 1See more | 1,610 |
| rawfile-csiymatrixVerified publisher | 0.2.1 | 1 of 4See more | 7,972 |
| zahori-consulzahoriVerified publisher | 1.0.1 | 2 of 2See more | 5,033 |
| zahori-postgresqlzahoriVerified publisher | 1.0.1 | 1 of 1See more | 448 |
| zahori-processzahoriVerified publisher | 1.0.1 | 1 of 1See more | 3,480 |
| zahori-serverzahoriVerified publisher | 1.0.1 | 2 of 2See more | 5,847 |
| sockpuppetbrowserzekker6Verified publisher | 0.1.0 | 1 of 1See more | 1,588 |
Container images carrying it
851 by charts deploying them
A fixed version is listed for 1 of the 2 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| kfirfer/ | 461331bd838e | busybox | 1.36.1-r6 | 1 |
| kiwigrid/ | e271016441af | busybox | 1.36.1-r16 | 1 |
| ktitilayo2/ | 8bac28058688 | busybox | 1.35.0-r30 | 1 |
| kubebb/ | 0fbb732379bc | busybox | 1.36.1-r6 | 1 |
| kubebb/ | fd8ecbd73213 | busybox | 1.36.1-r6 | 1 |
| kubebb/ | 067673df26a6 | busybox | 1.35.0-r18 | 1 |
| kubebb/ | 163ebbfc7a82 | busybox | 1.36.1-r6 | 1 |
| kubeflownotebookswg/ | af55c22ef5de | busybox | 1.36.1-r6 | 1 |
| kubegems/ | eaee03055329 | busybox | 1.35.0-r18 | 1 |
| kubegems/ | 7c93c84b2055 | busybox | 1.35.0-r30 | 1 |
| kubegems/ | 8905c9dbbb5d | busybox | 1.35.0-r30 | 1 |
| kubegems/ | c3b4be9a54f5 | busybox | 1.35.0-r30 | 1 |
| kubesec/ | c0f3b0673578 | busybox | 1.35.0-r30 | 1 |
| kubeshop/ | ff9b5aa1258d | busybox | 1.35.0-r18 | 1 |
| kubeshop/ | 48958b4126a4 | busybox | 1.36.1-r6 | 1 |
| kubesphere/ | 29681958f220 | busybox | 1.36.1-r16 | 1 |
| kubestar/ | 656606941255 | busybox | 1.36.1-r6 | 1 |
| kubesuite/ | 0262424ee702 | busybox | 1.36.1-r6 | 1 |
| kubevious/ | 2d9ba6eb46b6 | busybox | 1.36.1-r16 | 1 |
| kubevious/ | f58226f9d84e | busybox | 1.36.1-r6 | 1 |
| kubevious/ | 9bf567704de2 | busybox | 1.35.0-r30 | 1 |
| kubevious/ | 1acf1a1f0b47 | busybox | 1.35.0-r18 | 1 |
| kubevious/ | 99ae7a5168c2 | busybox | 1.36.1-r16 | 1 |
| kubevious/ | 6233e84bdd59 | busybox | 1.35.0-r18 | 1 |
| kubevious/ | 0b0f4c507eb6 | busybox | 1.35.0-r30 | 1 |
| kubevirtmanager/ | df3ea27d4a9e | busybox | 1.36.1-r6 | 1 |
| kupnu4x/ | 3be59109f3d6 | busybox | 1.35.0-r18 | 1 |
| kusionstack/ | b707d3bf0abd | busybox | 1.35.0-r30 | 1 |
| kvalitetsit/ | e89e351733ad | busybox | 1.35.0-r30 | 1 |
| kvalitetsit/ | fd5c4f60ef80 | busybox | 1.35.0-r30 | 1 |
| kyleslugg/ | ba8c36dfdfbd | busybox | 1.35.0-r30 | 1 |
| kyso/ | 68091eace89c | busybox | 1.35.0-r30 | 1 |
| kyso/ | 82299a9e5a86 | busybox | 1.35.0-r30 | 1 |
| kyso/ | e52595c5c16f | busybox | 1.35.0-r18 | 1 |
| kyso/ | 4aa9d38ee81d | busybox | 1.35.0-r30 | 1 |
| lachlanevenson/ | 38b7962cd016 | busybox | 1.35.0-r30 | 1 |
| laly9999/ | 75ae77a20c6c | busybox | 1.35.0-r30 | 1 |
| langgenius/ | a2a294743634 | busybox | 1.36.1-r16 | 1 |
| lavandadelpatio/ | ded9377636e9 | busybox | 1.36.1-r6 | 1 |
| lavandadelpatio/ | 214eaef5444c | busybox | 1.35.0-r30 | 1 |
| library/ | 02bb6f428431 | busybox | 1.36.1-r6 | 1 |
| library/ | 82d1e9d7ed48 | busybox | 1.36.1-r6 | 1 |
| library/ | a422913be6a4 | busybox | 1.36.1-r16 | 1 |
| library/ | 60fb54d36b4b | busybox | 1.35.0-r18 | 1 |
| library/ | 1d148deae16a | busybox | 1.36.1-r6 | 1 |
| library/ | 3153fa63f546 | busybox | 1.35.0-r30 | 1 |
| library/ | afa5d5134900 | busybox | 1.36.1-r6 | 1 |
| library/ | d9a0fd8bdd15 | busybox | 1.35.0-r30 | 1 |
| library/ | bbac73a740f4 | busybox | 1.36.1-r6 | 1 |
| library/ | 20d5eaf7187e | busybox | 1.35.0-r18 | 1 |