CVE-2023-51385
MediumAdvisory
Published 18 Dec 2023In the index since 6 Sept 2026
- Severity
- Medium
- worst across findings
- CVSS
- 6.5
- base score, highest
- EPSS
- 0.198
- 97th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 125
- of 17,781 indexed, latest versions
- Container images
- 113
- deployed by those charts
- Fix available
- 2 of 2
- affected packages
The matching OSV records carry no description.
Carried by container images the latest versions of 125 of 17,781 indexed charts deploy, on 113 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| opensshdeb | 1:6.6p1-2ubuntu2, 1:6.6p1-2ubuntu2.13, 1:7.2p2-4ubuntu2.2, 1:7.2p2-4ubuntu2.4+20 more | 1:7.2p2-4ubuntu2.10+esm6, 1:7.6p1-4ubuntu0.7+esm3, 1:8.2p1-4ubuntu0.11, 1:8.2p1-4ubuntu0.fips.0.11+2 more | 101 |
| opensshapk | 9.0_p1-r1, 9.0_p1-r2, 9.0_p1-r4, 9.1_p1-r1+1 more | 9.0_p1-r5, 9.1_p1-r5 | 12 |
- OSV records
- ALPINE-CVE-2023-51385DEBIAN-CVE-2023-51385UBUNTU-CVE-2023-51385
- Also known as
- USN-6560-2, USN-6560-3, USN-6565-1
Charts affected
125 by stars
Container images carrying it
113 by charts deploying them
A fixed version is listed for 2 of the 2 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| ghcr.io/ | ff2af53897e7 | openssh | 1:8.2p1-4ubuntu0.11 | 1 |
| ghcr.io/ | ec727be4417a | openssh | 9.0_p1-r5 | 1 |
| ghcr.io/ | d19d886d5090 | openssh | 1:9.2p1-2+deb12u2 | 1 |
| public.ecr.aws/ | 046ef5c9ed50 | openssh | 1:9.2p1-2+deb12u2 | 1 |
| public.ecr.aws/ | 573779e57fae | openssh | 1:8.2p1-4ubuntu0.11 | 1 |
| quay.io/ | 5b6701d8fb31 | openssh | 1:8.9p1-3ubuntu0.6 | 1 |
| quay.io/ | acaf37352569 | openssh | 1:8.9p1-3ubuntu0.6 | 1 |
| quay.io/ | d6fd2a9e3273 | openssh | 9.0_p1-r5 | 1 |
| quay.io/ | defc3263e0e9 | openssh | 9.1_p1-r5 | 1 |
| quay.io/ | c6a934439421 | openssh | 1:7.2p2-4ubuntu2.10+esm6 | 1 |
| quay.io/ | e0d9b93dbf2b | openssh | 1:9.2p1-2+deb12u2 | 1 |
| registry.gitlab.com/ | 4e7faf6f8d5f | openssh | 9.0_p1-r5 | 1 |
| registry.k8s.io/ | fd9722fd02e3 | openssh | 1:9.2p1-2+deb12u2 | 1 |