CVE-2023-4504

High

Advisory

Published 20 Sept 2023In the index since 6 Sept 2026

Severity: High; worst across findings
CVSS: 7.0; base score, highest
EPSS: 0.007; 50th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 60; of 17,781 indexed, latest versions
Container images: 55; deployed by those charts
Fix available: 2 of 2; affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 60 of 17,781 indexed charts deploy, on 55 images.

Affected package	Affected versions	Fixed in	Images
cupsapk	2.4.2-r1, 2.4.2-r3, 2.4.6-r0	2.4.7-r0	4
cupsdeb	2.1.3-4ubuntu0.3, 2.1.3-4ubuntu0.4, 2.1.3-4ubuntu0.7, 2.1.3-4ubuntu0.10+10 more	2.1.3-4ubuntu0.11+esm4, 2.2.7-1ubuntu2.10+esm2, 2.3.1-9ubuntu1.6, 2.4.1op1-1ubuntu4.7	51

OSV records: ALPINE-CVE-2023-4504 UBUNTU-CVE-2023-4504
Also known as: USN-6391-1, USN-6391-2

Charts affected

60 by stars

Chart

Latest

Affected images

Radar Score

splashntppool

1.0.4

1 of 1 See more

splash ntppool 1.0.4

1 of the 1 container images this version deploys carry CVE-2023-4504.

Container image	Digest	Package	Fixed in
scrapinghub/splash :3.4.1	a5f89bc84606	cups@2.2.7-1ubuntu2.7	2.2.7-1ubuntu2.10+esm2

Open the chart page →

27,633

cdn-remoteopencord

0.2.4

2 of 3 See more

cdn-remote opencord 0.2.4

2 of the 3 container images this version deploys carry CVE-2023-4504.

Container image	Digest	Package	Fixed in
omecproject/cdn-antmedia :1.0.0	b4ae7d0d6b74	cups@2.2.7-1ubuntu2.5	2.2.7-1ubuntu2.10+esm2
omecproject/cdn-video-repo :1.0.0	d59ccb138ffb	cups@2.1.3-4ubuntu0.7	2.1.3-4ubuntu0.11+esm4

Open the chart page →

63,223

mcord-cdn-remoteopencord

0.1.6

1 of 2 See more

mcord-cdn-remote opencord 0.1.6

1 of the 2 container images this version deploys carry CVE-2023-4504.

Container image	Digest	Package	Fixed in
omecproject/cdn-video-repo :remote-v3	d59ccb138ffb	cups@2.1.3-4ubuntu0.7	2.1.3-4ubuntu0.11+esm4

Open the chart page →

42,614

mcord-cdn-remote-freeopencord

0.1.3

1 of 1 See more

mcord-cdn-remote-free opencord 0.1.3

1 of the 1 container images this version deploys carry CVE-2023-4504.

Container image	Digest	Package	Fixed in
omecproject/cdn-video-repo :remote-v3	d59ccb138ffb	cups@2.1.3-4ubuntu0.7	2.1.3-4ubuntu0.11+esm4

Open the chart page →

29,124

javareact-java

0.1.0

1 of 1 See more

java react-java 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-4504.

Container image	Digest	Package	Fixed in
project2team4/react :latest	3ff031a08887	cups@2.3.1-9ubuntu1.1	2.3.1-9ubuntu1.6

Open the chart page →

15,520

testing-multitoolsomeblackmagic

0.1.2

1 of 1 See more

testing-multitool someblackmagic 0.1.2

1 of the 1 container images this version deploys carry CVE-2023-4504.

Container image	Digest	Package	Fixed in
someblackmagic/k8s-testing-multitool :v0.1.0	6eca64b6b440	cups@2.3.1-9ubuntu1.2	2.3.1-9ubuntu1.6

Open the chart page →

30,687

unifistartechnica

0.1.3

1 of 2 See more

unifi startechnica 0.1.3

1 of the 2 container images this version deploys carry CVE-2023-4504.

Container image	Digest	Package	Fixed in
jacobalberty/unifi :v7.1.66	4a3616625dda	cups@2.2.7-1ubuntu2.8	2.2.7-1ubuntu2.10+esm2

Open the chart page →

14,493

rundecksvtech-public-helm-charts

1.0.0

1 of 2 See more

rundeck svtech-public-helm-charts 1.0.0

1 of the 2 container images this version deploys carry CVE-2023-4504.

Container image	Digest	Package	Fixed in
svtechnmaa/svtech_rundeck :v1.2.2	6e368ace0977	cups@2.3.1-9ubuntu1.3	2.3.1-9ubuntu1.6

Open the chart page →

18,756

webhookiewebhookie

0.1.2

1 of 1 See more

webhookie webhookie 0.1.2

1 of the 1 container images this version deploys carry CVE-2023-4504.

Container image	Digest	Package	Fixed in
hookiesolutions/webhookie :latest	0629694246ba	cups@2.3.1-9ubuntu1.1	2.3.1-9ubuntu1.6

Open the chart page →

14,364

webhookie-allwebhookie

0.1.2

1 of 3 See more

webhookie-all webhookie 0.1.2

1 of the 3 container images this version deploys carry CVE-2023-4504.

Container image	Digest	Package	Fixed in
hookiesolutions/webhookie :latest	0629694246ba	cups@2.3.1-9ubuntu1.1	2.3.1-9ubuntu1.6

Open the chart page →

28,605

Container images carrying it

55 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/linuxserver/booksonic-air :version-v2009.1.0	baa4fa9549dc	cups@2.2.7-1ubuntu2.8	2.2.7-1ubuntu2.10+esm2	1
ghcr.io/oznu/homebridge :2022-07-08	ff2af53897e7	cups@2.3.1-9ubuntu1.2	2.3.1-9ubuntu1.6	1
ghcr.io/smarter-project/image-detector :v2.5.3	1dcca70c6446	cups@2.3.1-9ubuntu1.2	2.3.1-9ubuntu1.6	1
ghcr.io/star-whale/server :0.6.15	8368359c8dd0	cups@2.3.1-9ubuntu1.2	2.3.1-9ubuntu1.6	1
quay.io/opsmxpublic/spin-sample-pipeline :v1.0.1	c6a934439421	cups@2.1.3-4ubuntu0.10	2.1.3-4ubuntu0.11+esm4	1