CVE-2023-4408
HighAdvisory
Published 13 Feb 2024In the index since 6 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 7.5
- base score, highest
- EPSS
- 0.013
- 70th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 117
- of 17,781 indexed, latest versions
- Container images
- 99
- deployed by those charts
- Fix available
- 2 of 3
- affected packages
The matching OSV records carry no description.
Carried by container images the latest versions of 117 of 17,781 indexed charts deploy, on 99 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| bind9deb | 1:9.10.3.dfsg.P4-8ubuntu1.6, 1:9.10.3.dfsg.P4-8ubuntu1.9, 1:9.10.3.dfsg.P4-8ubuntu1.10, 1:9.10.3.dfsg.P4-8ubuntu1.11+30 more | 1:9.16.48-0ubuntu0.20.04.1, 1:9.18.18-0ubuntu0.22.04.2, 1:9.18.24-1 | 81 |
| bindapk | 9.16.29-r0, 9.16.33-r0, 9.18.9-r0, 9.18.10-r0+4 more | 9.16.48-r0, 9.18.24-r0 | 17 |
| bind9-libsdeb | 1:9.11.19+dfsg-2.1ubuntu3 | no fix listed | 1 |
- OSV records
- ALPINE-CVE-2023-4408DEBIAN-CVE-2023-4408UBUNTU-CVE-2023-4408
- Also known as
- USN-6633-1, USN-6642-1
Charts affected
117 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| pombasmo-helm-chart | 6.0.0 | 1 of 17See more | 29,220 |
| portalsmo-helm-chart | 6.0.0 | 1 of 8See more | 27,477 |
| sdcsmo-helm-chart | 6.0.0 | 1 of 14See more | 25,769 |
| sdnc-ansible-serversmo-helm-chart | 6.0.0 | 1 of 3See more | 25,769 |
| sdnc-portalsmo-helm-chart | 6.0.0 | 1 of 3See more | 25,769 |
| sdnc-promsmo-helm-chart | 6.0.0 | 1 of 2See more | 24,776 |
| sdnc-websmo-helm-chart | 6.0.0 | 1 of 3See more | 24,776 |
| ueb-listenersmo-helm-chart | 6.0.0 | 1 of 3See more | 25,769 |
| testing-multitoolsomeblackmagic | 0.1.2 | 1 of 1See more | 30,687 |
| convert-datasvtechVerified publisher | 0.13.2 | 1 of 3See more | 7,588 |
| elasticsearchsvtech-public-helm-charts | 1.0.0 | 1 of 1See more | 12,048 |
| maxscalesvtech-public-helm-charts | 1.0.0 | 1 of 2See more | 5,841 |
| preparationsvtech-public-helm-charts | 1.0.0 | 1 of 1See more | 12,048 |
| rundecksvtech-public-helm-charts | 1.0.0 | 1 of 2See more | 18,756 |
| syncthingsvtech-public-helm-charts | 1.0.0 | 1 of 2See more | 2,336 |
| lightstepupdater-lightstep-satellite | 1.2.2 | 1 of 1See more | 15,330 |
| longhornwenerme | 1.2.3 | 1 of 2See more | 15,230 |
Container images carrying it
99 by charts deploying them
A fixed version is listed for 2 of the 3 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| openverso/ | 733f1232b7d3 | bind | 9.16.48-r0 | 1 |
| rancher/ | e66f32d19eb9 | bind9 | no fix listed | 1 |
| razorbladex401/ | 6a4d79248e7d | bind9 | no fix listed | 1 |
| scholtz2/ | f12ce1cfb72e | bind9 | no fix listed | 1 |
| scholtz2/ | 5aaa5d4ab8b8 | bind9 | no fix listed | 1 |
| scholtz2/ | 64966de56d9f | bind9 | no fix listed | 1 |
| seafileltd/ | d0c66e4621bd | bind9 | no fix listed | 1 |
| seldonio/ | 1d0da98a2d76 | bind9 | no fix listed | 1 |
| snipe/ | 55fb7636a98c | bind9 | 1:9.16.48-0ubuntu0.20.04.1 | 1 |
| someblackmagic/ | 6eca64b6b440 | bind9 | 1:9.16.48-0ubuntu0.20.04.1 | 1 |
| stackstorm/ | 88235ba70cad | bind9 | 1:9.16.48-0ubuntu0.20.04.1 | 1 |
| svtechnmaa/ | a934ffd63d25 | bind9 | no fix listed | 1 |
| svtechnmaa/ | 410a25b51f9f | bind9 | 1:9.18.18-0ubuntu0.22.04.2 | 1 |
| svtechnmaa/ | 6e368ace0977 | bind9 | no fix listed | 1 |
| svtechnmaa/ | 1a75d88031fe | bind | 9.18.24-r0 | 1 |
| timothyclarke/ | 22c41e5ca7e2 | bind9 | no fix listed | 1 |
| tpdock/ | 3da600c95a49 | bind9 | no fix listed | 1 |
| ubuntu/ | 5ee73f44e5d0 | bind9 | no fix listed | 1 |
| voltha/ | 655c3048a602 | bind9 | no fix listed | 1 |
| ghcr.io/ | ab40c1745534 | bind9 | 1:9.18.24-1 | 1 |
| ghcr.io/ | feffc0b8227d | bind | 9.18.24-r0 | 1 |
| ghcr.io/ | c9bd82dc5fda | bind9 | 1:9.16.48-0ubuntu0.20.04.1 | 1 |
| ghcr.io/ | fdb5501cdfb9 | bind9 | 1:9.16.48-0ubuntu0.20.04.1 | 1 |
| ghcr.io/ | 3a4715b46aa2 | bind9 | 1:9.16.48-0ubuntu0.20.04.1 | 1 |
| ghcr.io/ | 54ebc1f90963 | bind9 | 1:9.16.48-0ubuntu0.20.04.1 | 1 |
| ghcr.io/ | e5571acd10ce | bind9 | 1:9.18.18-0ubuntu0.22.04.2 | 1 |
| ghcr.io/ | ef756c7d784b | bind9 | 1:9.16.48-0ubuntu0.20.04.1 | 1 |
| ghcr.io/ | dcb2d814a4f7 | bind | 9.16.48-r0 | 1 |
| ghcr.io/ | c863aa9875fa | bind9 | 1:9.16.48-0ubuntu0.20.04.1 | 1 |
| ghcr.io/ | 61deadd1ec78 | bind9 | 1:9.16.48-0ubuntu0.20.04.1 | 1 |
| ghcr.io/ | 4273dfaf0295 | bind9 | 1:9.18.18-0ubuntu0.22.04.2 | 1 |
| ghcr.io/ | 0eb230e2381a | bind9 | 1:9.18.18-0ubuntu0.22.04.2 | 1 |
| ghcr.io/ | 4ea617c30397 | bind9 | 1:9.16.48-0ubuntu0.20.04.1 | 1 |
| ghcr.io/ | 6011182e3946 | bind9 | 1:9.16.48-0ubuntu0.20.04.1 | 1 |
| ghcr.io/ | 292b3614670f | bind9 | 1:9.16.48-0ubuntu0.20.04.1 | 1 |
| ghcr.io/ | 779858b5e11d | bind9 | 1:9.16.48-0ubuntu0.20.04.1 | 1 |
| ghcr.io/ | f52e66eff50b | bind9 | no fix listed | 1 |
| ghcr.io/ | 865ff4da5686 | bind9 | no fix listed | 1 |
| ghcr.io/ | c77d84ebf7a6 | bind | 9.18.24-r0 | 1 |
| ghcr.io/ | 0efdd8d3ef39 | bind | 9.18.24-r0 | 1 |
| ghcr.io/ | a4ad890e8c4a | bind | 9.18.24-r0 | 1 |
| ghcr.io/ | 8d299e59fce7 | bind | 9.18.24-r0 | 1 |
| ghcr.io/ | 27ffdcc8a937 | bind | 9.18.24-r0 | 1 |
| ghcr.io/ | ff2af53897e7 | bind9 | 1:9.16.48-0ubuntu0.20.04.1 | 1 |
| ghcr.io/ | 9009fbd2ef16 | bind | 9.18.24-r0 | 1 |
| ghcr.io/ | ef5e31333821 | bind | 9.18.24-r0 | 1 |
| ghcr.io/ | a56dfe91f5b1 | bind9 | no fix listed | 1 |
| quay.io/ | c7a9987f2ac5 | bind | 9.16.48-r0 | 1 |
| quay.io/ | c6a934439421 | bind9 | no fix listed | 1 |