CVE-2023-42366
MediumAdvisory
Published 27 Nov 2023In the index since 5 Sept 2026
- Severity
- Medium
- worst across findings
- CVSS
- 5.5
- base score, highest
- EPSS
- 0.004
- 35th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 807
- of 17,787 indexed, latest versions
- Container images
- 844
- deployed by those charts
- Fix available
- 1 of 2
- affected packages
The matching OSV records carry no description.
Carried by container images the latest versions of 807 of 17,787 indexed charts deploy, on 844 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| busyboxapk | 1.35.0-r10, 1.35.0-r13, 1.35.0-r14, 1.35.0-r15+10 more | 1.35.0-r18, 1.35.0-r30, 1.36.1-r6, 1.36.1-r16+1 more | 819 |
| busyboxdeb | 1:1.21.0-1ubuntu1, 1:1.21.0-1ubuntu1.4, 1:1.30.1-4ubuntu6.4, 1:1.30.1-7ubuntu3+6 more | no fix listed | 25 |
Charts affected
807 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| prometheusalertygqygq2Verified publisher | 1.0.0 | 1 of 1See more | 1,611 |
| rawfile-csiymatrixVerified publisher | 0.2.1 | 1 of 4See more | 7,972 |
| zahori-consulzahoriVerified publisher | 1.0.1 | 2 of 2See more | 5,033 |
| zahori-postgresqlzahoriVerified publisher | 1.0.1 | 1 of 1See more | 448 |
| zahori-processzahoriVerified publisher | 1.0.1 | 1 of 1See more | 3,480 |
| zahori-serverzahoriVerified publisher | 1.0.1 | 2 of 2See more | 5,846 |
| sockpuppetbrowserzekker6Verified publisher | 0.1.0 | 1 of 1See more | 1,589 |
Container images carrying it
844 by charts deploying them
A fixed version is listed for 1 of the 2 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| pnnlmiscscripts/ | 05827b9efa7b | busybox | 1.35.0-r18 | 10 |
| curlimages/ | 08e466006f08 | busybox | 1.36.1-r16 | 7 |
| library/ | dbaa3e69f563 | busybox | 1.36.1-r6 | 6 |
| quay.io/ | 2ad610626658 | busybox | 1.35.0-r18 | 6 |
| quay.io/ | fbeaef7a8566 | busybox | 1.36.1-r6 | 6 |
| natsio/ | a67913df95f1 | busybox | 1.36.1-r6 | 5 |
| ghcr.io/ | b72cf734d85f | busybox | 1.36.1-r6 | 5 |
| ghcr.io/ | 947882bf2c37 | busybox | 1.35.0-r18 | 5 |
| curlimages/ | f7f265d5c64e | busybox | 1.35.0-r18 | 4 |
| hyperledger/ | 6ec3fe59ea55 | busybox | 1.35.0-r18 | 4 |
| hyperledger/ | 6ff36af21eb1 | busybox | 1.35.0-r18 | 4 |
| hyperledger/ | b1194f509085 | busybox | 1.35.0-r18 | 4 |
| jaegertracing/ | 0214a0ef24b1 | busybox | 1.35.0-r18 | 4 |
| jaegertracing/ | 7f1269222903 | busybox | 1.35.0-r18 | 4 |
| jaegertracing/ | 049bb0d64ea3 | busybox | 1.35.0-r18 | 4 |
| rss3/ | 26148aa1bc52 | busybox | 1.36.1-r16 | 4 |
| ghcr.io/ | ab2e1fa19dd4 | busybox | 1.36.1-r6 | 4 |
| ghcr.io/ | 60c1562e4d51 | busybox | 1.36.1-r6 | 4 |
| alfhou/ | c85dc0293aa1 | busybox | 1.36.1-r16 | 3 |
| caddy/ | 18d1366fc0e9 | busybox | 1.36.1-r6 | 3 |
| getmeili/ | 19b825993dbe | busybox | 1.35.0-r18 | 3 |
| grafana/ | 0dc5a246ab16 | busybox | 1.36.1-r16 | 3 |
| groundnuty/ | c14d7271e401 | busybox | 1.35.0-r18 | 3 |
| library/ | af96c680a7e1 | busybox | 1.36.1-r6 | 3 |
| library/ | 516475cc129d | busybox | 1.36.1-r16 | 3 |
| library/ | 63cfb6eac6b3 | busybox | 1.35.0-r18 | 3 |
| library/ | c8bb255c3559 | busybox | 1.36.1-r16 | 3 |
| natsio/ | b3359eeb10bf | busybox | 1.36.1-r6 | 3 |
| nginxinc/ | be76a26e238d | busybox | 1.36.1-r6 | 3 |
| oryd/ | 2c93beb5e5f2 | busybox | 1.36.1-r6 | 3 |
| paulkellerman/ | 381eeccb0618 | busybox | 1.35.0-r18 | 3 |
| paulkellerman/ | 5a37b74f61b9 | busybox | 1.35.0-r18 | 3 |
| pnnlmiscscripts/ | 9a2fe06a1472 | busybox | 1.35.0-r30 | 3 |
| rcdelacruz/ | 38007f358355 | busybox | 1.36.1-r6 | 3 |
| rss3/ | d1d2ae6efd05 | busybox | 1.36.1-r6 | 3 |
| tykio/ | 3e907e675bf9 | busybox | no fix listed | 3 |
| quay.io/ | 2b6db27eaf3d | busybox | no fix listed | 3 |
| quay.io/ | f6269309455a | busybox | 1.36.1-r16 | 3 |
| quay.io/ | 4286bcccda3e | busybox | 1.36.1-r16 | 3 |
| quay.io/ | eec0305b594c | busybox | 1.36.1-r6 | 3 |
| quay.io/ | f0cf3c3ab495 | busybox | 1.35.0-r18 | 3 |
| quay.io/ | 48cdd3054b20 | busybox | 1.35.0-r18 | 3 |
| quay.io/ | 8e54bc2d261f | busybox | 1.35.0-r18 | 3 |
| quay.io/ | fd916f75415f | busybox | 1.36.1-r6 | 3 |
| quay.io/ | 1b33357b3595 | busybox | 1.36.1-r6 | 3 |
| registry.k8s.io/ | 4ba73c697770 | busybox | 1.35.0-r18 | 3 |
| registry.k8s.io/ | e5c4824e7375 | busybox | 1.36.1-r6 | 3 |
| agoldis/ | afaa5a84051d | busybox | 1.36.1-r6 | 2 |
| agoldis/ | e061e5714238 | busybox | 1.35.0-r30 | 2 |
| agoldis/ | 10228ecd353b | busybox | 1.36.1-r6 | 2 |