CVE-2023-4806

Medium

Advisory

Published 18 Sept 2023In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 5.9; base score, highest
EPSS: 0.016; 75th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 604; of 17,787 indexed, latest versions
Container images: 556; deployed by those charts
Fix available: 1 of 2; affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 604 of 17,787 indexed charts deploy, on 556 images.

Affected package	Affected versions	Fixed in	Images
glibcdeb	2.23-0ubuntu5, 2.23-0ubuntu7, 2.23-0ubuntu9, 2.23-0ubuntu10+20 more	2.23-0ubuntu11.3+esm5, 2.27-3ubuntu1.6+esm1, 2.31-0ubuntu9.14, 2.35-0ubuntu3.5+1 more	549
eglibcdeb	2.19-0ubuntu6.3, 2.19-0ubuntu6.6, 2.19-0ubuntu6.13, 2.19-0ubuntu6.14+1 more	no fix listed	7

OSV records: DEBIAN-CVE-2023-4806 UBUNTU-CVE-2023-4806
Also known as: USN-6541-1, USN-6541-2

Charts affected

604 by stars

Chart

Latest

Affected images

Radar Score

longhornwenerme

1.2.3

1 of 2 See more

longhorn wenerme 1.2.3

1 of the 2 container images this version deploys carry CVE-2023-4806.

Container image	Digest	Package	Fixed in
longhornio/longhorn-manager :v1.2.3	dca34321452c	glibc@2.31-0ubuntu9.2	2.31-0ubuntu9.14

Open the chart page →

15,287

openebswenerme

3.10.0

2 of 3 See more

openebs wenerme 3.10.0

2 of the 3 container images this version deploys carry CVE-2023-4806.

Container image	Digest	Package	Fixed in
openebs/node-disk-manager :2.1.0	f6c18b0f8c8a	glibc@2.35-0ubuntu3.1	2.35-0ubuntu3.5
openebs/node-disk-operator :2.1.0	6afe2123c457	glibc@2.35-0ubuntu3.1	2.35-0ubuntu3.5

Open the chart page →

10,568

zahori-schedulerzahori

1.0.1

1 of 1 See more

zahori-scheduler zahori 1.0.1

1 of the 1 container images this version deploys carry CVE-2023-4806.

Container image	Digest	Package	Fixed in
zahoriaut/zahori-scheduler :1.0.0	47d0979b1184	glibc@2.27-3ubuntu1.6	2.27-3ubuntu1.6+esm1

Open the chart page →

2,464

clickhousezloi-space

1.2.0

2 of 3 See more

clickhouse zloi-space 1.2.0

2 of the 3 container images this version deploys carry CVE-2023-4806.

Container image	Digest	Package	Fixed in
yandex/clickhouse-client :21.3	863f94a0f607	glibc@2.27-3ubuntu1.4	2.27-3ubuntu1.6+esm1
yandex/clickhouse-server :21.3.20	4eccfffb01d7	glibc@2.31-0ubuntu9.2	2.31-0ubuntu9.14

Open the chart page →

9,250

Container images carrying it

556 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
spy86/rabbitmq-stomp :latest	ea649101b9fb	glibc@2.31-0ubuntu9.9	2.31-0ubuntu9.14	1
stackstorm/st2actionrunner :3.8	88235ba70cad	glibc@2.31-0ubuntu9.12	2.31-0ubuntu9.14	1
stackstorm/st2api :3.8	6f56d239d280	glibc@2.31-0ubuntu9.12	2.31-0ubuntu9.14	1
stackstorm/st2auth :3.8	33ecfda16608	glibc@2.31-0ubuntu9.12	2.31-0ubuntu9.14	1
stackstorm/st2garbagecollector :3.8	4e3f8c7ca52d	glibc@2.31-0ubuntu9.12	2.31-0ubuntu9.14	1
stackstorm/st2notifier :3.8	f190a6212195	glibc@2.31-0ubuntu9.12	2.31-0ubuntu9.14	1
stackstorm/st2rulesengine :3.8	259503496ff9	glibc@2.31-0ubuntu9.12	2.31-0ubuntu9.14	1
stackstorm/st2scheduler :3.8	b1de2055c362	glibc@2.31-0ubuntu9.12	2.31-0ubuntu9.14	1
stackstorm/st2sensorcontainer :3.8	b1a338f64773	glibc@2.31-0ubuntu9.12	2.31-0ubuntu9.14	1
stackstorm/st2stream :3.8	1c8904a3bf67	glibc@2.31-0ubuntu9.12	2.31-0ubuntu9.14	1
stackstorm/st2timersengine :3.8	1bf35bfaf00c	glibc@2.31-0ubuntu9.12	2.31-0ubuntu9.14	1
stackstorm/st2web :3.8	09989a26c8b7	glibc@2.31-0ubuntu9.12	2.31-0ubuntu9.14	1
stackstorm/st2workflowengine :3.8	19fdfffdbba8	glibc@2.31-0ubuntu9.12	2.31-0ubuntu9.14	1
stashapp/stash :latest	24dbd7607174	glibc@2.31-0ubuntu9.2	2.31-0ubuntu9.14	1
statcan/ckan :2.9	3921305425b8	glibc@2.31-0ubuntu9.2	2.31-0ubuntu9.14	1
streamnative/apache-pulsar-grafana-dashboard-k8s :0.0.16	11bceacec8fb	glibc@2.31-0ubuntu9.2	2.31-0ubuntu9.14	1
svtechnmaa/svtech_grafana :v1.2.2	1d71314424aa	glibc@2.31-0ubuntu9.9	2.31-0ubuntu9.14	1
svtechnmaa/svtech_maxscale :v1.0.3	410a25b51f9f	glibc@2.35-0ubuntu3.4	2.35-0ubuntu3.5	1
svtechnmaa/svtech_rundeck :v1.2.2	6e368ace0977	glibc@2.31-0ubuntu9.9	2.31-0ubuntu9.14	1
tdengine/tdengine :3.0.2.2	4140a4021ddb	glibc@2.27-3ubuntu1.6	2.27-3ubuntu1.6+esm1	1
tensorflow/tensorflow :1.6.0-devel	1e3172090703	glibc@2.23-0ubuntu10	2.23-0ubuntu11.3+esm5	1
thecampagnards/trafficlight-api :main	7dca9d973837	glibc@2.31-0ubuntu9.2	2.31-0ubuntu9.14	1
thesisrobot/bitcoind :v23.0	16b368e4d52c	glibc@2.35-0ubuntu3.1	2.35-0ubuntu3.5	1
thmmniii/fbs-core :v1.27.1	5438517d9fc2	glibc@2.35-0ubuntu3.1	2.35-0ubuntu3.5	1
thongngo3301/stakefish :latest	a341af5976e3	glibc@2.36-9+deb12u1	2.36-9+deb12u3	1
timescale/timescaledb-ha :pg15-latest	a8e3322e1cf9	glibc@2.35-0ubuntu3.1	2.35-0ubuntu3.5	1
timescale/timescaledb-ha :pg14.6-ts2.9.1-p1	cdb9ae118899	glibc@2.35-0ubuntu3.1	2.35-0ubuntu3.5	1
timescale/timescaledb-ha :pg14-ts2.6-latest	ed719c0cd19d	glibc@2.35-0ubuntu3	2.35-0ubuntu3.5	1
timothyclarke/wptagent :2018-01-23	22c41e5ca7e2	glibc@2.23-0ubuntu9	2.23-0ubuntu11.3+esm5	1
tpdock/freeradius :2.2.9	3da600c95a49	glibc@2.23-0ubuntu9	2.23-0ubuntu11.3+esm5	1
trinodb/trino :405	ee80ab5eeab2	glibc@2.35-0ubuntu3.1	2.35-0ubuntu3.5	1
typesense/typesense :0.25.1	035ccfbc3fd8	glibc@2.35-0ubuntu3.1	2.35-0ubuntu3.5	1
typesense/typesense :0.23.0	3accb727cbe2	glibc@2.23-0ubuntu11.3	2.23-0ubuntu11.3+esm5	1
utkuozdemir/nvidia_gpu_exporter :0.3.0	149f9e7e7aa3	glibc@2.31-0ubuntu9.2	2.31-0ubuntu9.14	1
vexorian/dizquetv :1.4.3	7e2b99844a5c	glibc@2.27-3ubuntu1.4	2.27-3ubuntu1.6+esm1	1
vientoprojects/kubernetes-monitoring-telegram-bot :latest	eb2a71531741	glibc@2.27-3ubuntu1.4	2.27-3ubuntu1.6+esm1	1
vinanrra/7dtd-server :v0.4.4	f9534490bd2b	glibc@2.27-3ubuntu1.6	2.27-3ubuntu1.6+esm1	1
vlebediantsev/notes-admin-front :latest	007c6670ff48	glibc@2.36-9+deb12u1	2.36-9+deb12u3	1
vlebediantsev/notes-project-front :latest	945675fd2636	glibc@2.36-9+deb12u1	2.36-9+deb12u3	1
vlebediantsev/registration-ms-front-app-host :latest	54f69d116c50	glibc@2.36-9+deb12u1	2.36-9+deb12u3	1
voltha/bbsim :1.16.7	d90403d58016	glibc@2.27-3ubuntu1.6	2.27-3ubuntu1.6+esm1	1
voltha/bbsim-sadis-server :0.3.5	259fc3a03f4e	glibc@2.27-3ubuntu1.6	2.27-3ubuntu1.6+esm1	1
voltha/bbsim-sadis-server :0.4.0	762b272d439e	glibc@2.27-3ubuntu1.6	2.27-3ubuntu1.6+esm1	1
voltha/voltha-cli :1.6.0	c4e41e92f046	glibc@2.23-0ubuntu10	2.23-0ubuntu11.3+esm5	1
voltha/voltha-envoy :1.6.0	59ab2a00f712	eglibc@2.19-0ubuntu6.13	no fix listed	1
voltha/voltha-netconf :1.6.0	37f80524c207	glibc@2.23-0ubuntu10	2.23-0ubuntu11.3+esm5	1
voltha/voltha-ofagent :1.6.0	9ee8c1f4428c	glibc@2.23-0ubuntu10	2.23-0ubuntu11.3+esm5	1
voltha/voltha-onos :5.1.8	e038acb950d3	glibc@2.27-3ubuntu1.2	2.27-3ubuntu1.6+esm1	1
voltha/voltha-tester :1.7.0	655c3048a602	glibc@2.23-0ubuntu11	2.23-0ubuntu11.3+esm5	1
voltha/voltha-voltha :1.6.0	ff596b62de59	glibc@2.23-0ubuntu10	2.23-0ubuntu11.3+esm5	1