Vulnerability Reportclickhouse:25.8.23

clickhouse:25.8.23.13-jammyclickhouse:25.8.23.13clickhouse:25.8.23-jammyclickhouse:25.8.23
digestsha256:813e04f3f188f8adba8fd08b51794d1f30e4822321774a322cef9ff9299b51fa

Executive Summary

Last scanned:

Threat Score
50/100NEEDS ATTENTION
Reputation
TRUSTED

AI verdict failed due to an error.

Vulnerabilities

Vulnerability Log

115 total
CVE IDAdjusted SeverityPackageExploit ProbabilityRisk Context
CVE-2026-41989MEDIUM6.38
libgcrypt20
1.9.4-3ubuntu3
fixed in 1.9.4-3ubuntu3.2
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-3833MEDIUM6.29
libgnutls30
3.7.3-4ubuntu1.8
fixed in 3.7.3-4ubuntu1.9
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-42011MEDIUM6.29
libgnutls30
3.7.3-4ubuntu1.8
fixed in 3.7.3-4ubuntu1.9
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-34182MEDIUM6.29
libssl3
3.0.2-0ubuntu1.23
fixed in 3.0.2-0ubuntu1.25
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-42012MEDIUM6.03
libgnutls30
3.7.3-4ubuntu1.8
fixed in 3.7.3-4ubuntu1.9
0.4%
Theoretical Threat
Directly Exposed
CVE-2024-2236MEDIUM5.9
libgcrypt20
1.9.4-3ubuntu3
No fix yet
1.1%
Low-Moderate Risk
Directly Exposed
CVE-2026-42014MEDIUM5.61
libgnutls30
3.7.3-4ubuntu1.8
fixed in 3.7.3-4ubuntu1.9
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-6238MEDIUM5.52
libc-bin
2.35-0ubuntu3.13
fixed in 2.35-0ubuntu3.14
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-6238MEDIUM5.52
libc6
2.35-0ubuntu3.13
fixed in 2.35-0ubuntu3.14
0.4%
Theoretical Threat
Directly Exposed
CVE-2023-50495MEDIUM5.52
libncurses6
6.3-2ubuntu0.1
No fix yet
1.0%
Theoretical Threat
Directly Exposed
CVE-2023-50495MEDIUM5.52
libncursesw6
6.3-2ubuntu0.1
No fix yet
1.0%
Theoretical Threat
Directly Exposed
CVE-2023-50495MEDIUM5.52
libtinfo6
6.3-2ubuntu0.1
No fix yet
1.0%
Theoretical Threat
Directly Exposed
CVE-2026-40226MEDIUM5.44
libsystemd0
249.11-0ubuntu3.20
fixed in 249.11-0ubuntu3.21
<0.1%
Theoretical Threat
Directly Exposed
CVE-2026-40226MEDIUM5.44
libudev1
249.11-0ubuntu3.20
fixed in 249.11-0ubuntu3.21
<0.1%
Theoretical Threat
Directly Exposed
CVE-2026-13757MEDIUM5.27
libp11-kit0
0.24.0-6build1
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-5435MEDIUM5.02
libc-bin
2.35-0ubuntu3.13
fixed in 2.35-0ubuntu3.14
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-5435MEDIUM5.02
libc6
2.35-0ubuntu3.13
fixed in 2.35-0ubuntu3.14
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-42770MEDIUM5.02
libssl3
3.0.2-0ubuntu1.23
fixed in 3.0.2-0ubuntu1.25
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-9076MEDIUM5.02
libssl3
3.0.2-0ubuntu1.23
fixed in 3.0.2-0ubuntu1.25
0.6%
Theoretical Threat
Directly Exposed
CVE-2023-7008MEDIUM5.02
libsystemd0
249.11-0ubuntu3.20
fixed in 249.11-0ubuntu3.21
0.8%
Theoretical Threat
Directly Exposed
CVE-2023-7008MEDIUM5.02
libudev1
249.11-0ubuntu3.20
fixed in 249.11-0ubuntu3.21
0.8%
Theoretical Threat
Directly Exposed
CVE-2026-34180MEDIUM5
libssl3
3.0.2-0ubuntu1.23
fixed in 3.0.2-0ubuntu1.25
1.0%
Low-Moderate Risk
Directly Exposed
CVE-2022-27943MEDIUM4.67
libgcc-s1
12.3.0-1ubuntu1~22.04.3
No fix yet
0.9%
Theoretical Threat
Directly Exposed
CVE-2026-7383MEDIUM4.67
libssl3
3.0.2-0ubuntu1.23
fixed in 3.0.2-0ubuntu1.25
0.6%
Theoretical Threat
Directly Exposed
CVE-2022-27943MEDIUM4.67
libstdc++6
12.3.0-1ubuntu1~22.04.3
No fix yet
0.9%
Theoretical Threat
Directly Exposed
CVE-2026-4046MEDIUM4.5
libc-bin
2.35-0ubuntu3.13
fixed in 2.35-0ubuntu3.14
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-4046MEDIUM4.5
libc6
2.35-0ubuntu3.13
fixed in 2.35-0ubuntu3.14
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-42015MEDIUM4.5
libgnutls30
3.7.3-4ubuntu1.8
fixed in 3.7.3-4ubuntu1.9
0.7%
Theoretical Threat
Directly Exposed
CVE-2026-34743MEDIUM4.5
liblzma5
5.2.5-2ubuntu1
fixed in 5.2.5-2ubuntu1.1
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-42766MEDIUM4.5
libssl3
3.0.2-0ubuntu1.23
fixed in 3.0.2-0ubuntu1.25
1.0%
Theoretical Threat
Directly Exposed
CVE-2026-42767MEDIUM4.5
libssl3
3.0.2-0ubuntu1.23
fixed in 3.0.2-0ubuntu1.25
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-5450MEDIUM4.25
libc-bin
2.35-0ubuntu3.13
fixed in 2.35-0ubuntu3.14
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-5928MEDIUM4.25
libc-bin
2.35-0ubuntu3.13
fixed in 2.35-0ubuntu3.14
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-5450MEDIUM4.25
libc6
2.35-0ubuntu3.13
fixed in 2.35-0ubuntu3.14
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-5928MEDIUM4.25
libc6
2.35-0ubuntu3.13
fixed in 2.35-0ubuntu3.14
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-11850MEDIUM4.25
libgssapi-krb5-2
1.19.2-2ubuntu0.7
fixed in 1.19.2-2ubuntu0.8
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-11850MEDIUM4.25
libk5crypto3
1.19.2-2ubuntu0.7
fixed in 1.19.2-2ubuntu0.8
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-11850MEDIUM4.25
libkrb5-3
1.19.2-2ubuntu0.7
fixed in 1.19.2-2ubuntu0.8
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-11850MEDIUM4.25
libkrb5support0
1.19.2-2ubuntu0.7
fixed in 1.19.2-2ubuntu0.8
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-54411MEDIUM4.08
libpam-modules
1.4.0-11ubuntu2.6
fixed in 1.4.0-11ubuntu2.7
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-54411MEDIUM4.08
libpam-modules-bin
1.4.0-11ubuntu2.6
fixed in 1.4.0-11ubuntu2.7
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-54411MEDIUM4.08
libpam-runtime
1.4.0-11ubuntu2.6
fixed in 1.4.0-11ubuntu2.7
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-54411MEDIUM4.08
libpam0g
1.4.0-11ubuntu2.6
fixed in 1.4.0-11ubuntu2.7
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-27456MEDIUM4
libblkid1
2.37.2-4ubuntu3.5
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-27456MEDIUM4
libmount1
2.37.2-4ubuntu3.5
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-27456MEDIUM4
libsmartcols1
2.37.2-4ubuntu3.5
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-27456MEDIUM4
libuuid1
2.37.2-4ubuntu3.5
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-42010LOW3.53
libgnutls30
3.7.3-4ubuntu1.8
fixed in 3.7.3-4ubuntu1.9
1.1%
Low-Moderate Risk
Post-Exploit
CVE-2026-3832LOW3.15
libgnutls30
3.7.3-4ubuntu1.8
fixed in 3.7.3-4ubuntu1.9
0.7%
Theoretical Threat
Directly Exposed
CVE-2026-45446LOW3.15
libssl3
3.0.2-0ubuntu1.23
fixed in 3.0.2-0ubuntu1.25
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-42770LOW3.01
openssl
3.0.2-0ubuntu1.23
fixed in 3.0.2-0ubuntu1.25
0.5%
Theoretical Threat
Post-Exploit
CVE-2026-9076LOW3.01
openssl
3.0.2-0ubuntu1.23
fixed in 3.0.2-0ubuntu1.25
0.6%
Theoretical Threat
Post-Exploit
CVE-2026-15146LOW3.01
wget
1.21.2-2ubuntu1.1
fixed in 1.21.2-2ubuntu1.4
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-8376LOW3
perl-base
5.34.0-3ubuntu1.5
fixed in 5.34.0-3ubuntu1.7
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-34180LOW3
openssl
3.0.2-0ubuntu1.23
fixed in 3.0.2-0ubuntu1.25
1.0%
Low-Moderate Risk
Post-Exploit
CVE-2026-45447LOW2.92
libssl3
3.0.2-0ubuntu1.23
fixed in 3.0.2-0ubuntu1.25
5.2%
Low-Moderate Risk
Post-Exploit
CVE-2026-45447LOW2.92
openssl
3.0.2-0ubuntu1.23
fixed in 3.0.2-0ubuntu1.25
5.2%
Low-Moderate Risk
Post-Exploit
CVE-2025-45582LOW2.86
tar
1.34+dfsg-1ubuntu0.1.22.04.2
fixed in 1.34+dfsg-1ubuntu0.1.22.04.4
0.4%
Theoretical Threat
Post-Exploit
CVE-2023-42366LOW2.8
busybox
1:1.30.1-7ubuntu3.1
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-7383LOW2.8
openssl
3.0.2-0ubuntu1.23
fixed in 3.0.2-0ubuntu1.25
0.6%
Theoretical Threat
Post-Exploit
CVE-2026-5704LOW2.8
tar
1.34+dfsg-1ubuntu0.1.22.04.2
fixed in 1.34+dfsg-1ubuntu0.1.22.04.6
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-40228LOW2.8
libsystemd0
249.11-0ubuntu3.20
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-40228LOW2.8
libudev1
249.11-0ubuntu3.20
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-33845LOW2.78
libgnutls30
3.7.3-4ubuntu1.8
fixed in 3.7.3-4ubuntu1.9
0.8%
Theoretical Threat
Post-Exploit
CVE-2026-45445LOW2.78
libssl3
3.0.2-0ubuntu1.23
fixed in 3.0.2-0ubuntu1.25
0.6%
Theoretical Threat
Post-Exploit
CVE-2026-45445LOW2.78
openssl
3.0.2-0ubuntu1.23
fixed in 3.0.2-0ubuntu1.25
0.6%
Theoretical Threat
Post-Exploit
CVE-2026-42496LOW2.78
perl-base
5.34.0-3ubuntu1.5
fixed in 5.34.0-3ubuntu1.7
0.4%
Theoretical Threat
Post-Exploit
CVE-2025-60876LOW2.75
busybox
1:1.30.1-7ubuntu3.1
No fix yet
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-33846LOW2.7
libgnutls30
3.7.3-4ubuntu1.8
fixed in 3.7.3-4ubuntu1.9
1.3%
Low-Moderate Risk
Post-Exploit
CVE-2026-42009LOW2.7
libgnutls30
3.7.3-4ubuntu1.8
fixed in 3.7.3-4ubuntu1.9
1.3%
Low-Moderate Risk
Post-Exploit
CVE-2022-41409LOW2.7
libpcre2-8-0
10.39-3ubuntu0.1
No fix yet
1.1%
Low-Moderate Risk
Post-Exploit
CVE-2022-4899LOW2.7
libzstd1
1.4.8+dfsg-3build1
No fix yet
1.6%
Low-Moderate Risk
Post-Exploit
CVE-2026-42766LOW2.7
openssl
3.0.2-0ubuntu1.23
fixed in 3.0.2-0ubuntu1.25
1.0%
Theoretical Threat
Post-Exploit
CVE-2026-42767LOW2.7
openssl
3.0.2-0ubuntu1.23
fixed in 3.0.2-0ubuntu1.25
0.6%
Theoretical Threat
Post-Exploit
CVE-2026-58470LOW2.7
wget
1.21.2-2ubuntu1.1
fixed in 1.21.2-2ubuntu1.3
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-42013LOW2.51
libgnutls30
3.7.3-4ubuntu1.8
fixed in 3.7.3-4ubuntu1.9
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-5260LOW2.51
libgnutls30
3.7.3-4ubuntu1.8
fixed in 3.7.3-4ubuntu1.9
0.7%
Theoretical Threat
Post-Exploit
CVE-2026-27456LOW2.4
bsdutils
1:2.37.2-4ubuntu3.5
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-41991LOW2.4
gzip
1.10-4ubuntu4.1
fixed in 1.10-4ubuntu4.2
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-27456LOW2.4
mount
2.37.2-4ubuntu3.5
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-27456LOW2.4
util-linux
2.37.2-4ubuntu3.5
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2025-69720LOW2.39
libncurses6
6.3-2ubuntu0.1
fixed in 6.3-2ubuntu0.2
0.4%
Theoretical Threat
Post-Exploit
CVE-2025-69720LOW2.39
libncursesw6
6.3-2ubuntu0.1
fixed in 6.3-2ubuntu0.2
0.4%
Theoretical Threat
Post-Exploit
CVE-2025-69720LOW2.39
libtinfo6
6.3-2ubuntu0.1
fixed in 6.3-2ubuntu0.2
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-41992LOW2.29
gzip
1.10-4ubuntu4.1
fixed in 1.10-4ubuntu4.2
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-40355LOW2.29
libgssapi-krb5-2
1.19.2-2ubuntu0.7
fixed in 1.19.2-2ubuntu0.8
0.6%
Theoretical Threat
Post-Exploit
CVE-2026-40356LOW2.29
libgssapi-krb5-2
1.19.2-2ubuntu0.7
fixed in 1.19.2-2ubuntu0.8
0.6%
Theoretical Threat
Post-Exploit
CVE-2026-40355LOW2.29
libk5crypto3
1.19.2-2ubuntu0.7
fixed in 1.19.2-2ubuntu0.8
0.6%
Theoretical Threat
Post-Exploit
CVE-2026-40356LOW2.29
libk5crypto3
1.19.2-2ubuntu0.7
fixed in 1.19.2-2ubuntu0.8
0.6%
Theoretical Threat
Post-Exploit
CVE-2026-40355LOW2.29
libkrb5-3
1.19.2-2ubuntu0.7
fixed in 1.19.2-2ubuntu0.8
0.6%
Theoretical Threat
Post-Exploit
CVE-2026-40356LOW2.29
libkrb5-3
1.19.2-2ubuntu0.7
fixed in 1.19.2-2ubuntu0.8
0.6%
Theoretical Threat
Post-Exploit
CVE-2026-40355LOW2.29
libkrb5support0
1.19.2-2ubuntu0.7
fixed in 1.19.2-2ubuntu0.8
0.6%
Theoretical Threat
Post-Exploit
CVE-2026-40356LOW2.29
libkrb5support0
1.19.2-2ubuntu0.7
fixed in 1.19.2-2ubuntu0.8
0.6%
Theoretical Threat
Post-Exploit
CVE-2026-34182LOW2.26
openssl
3.0.2-0ubuntu1.23
fixed in 3.0.2-0ubuntu1.25
0.4%
Theoretical Threat
Post-Exploit
CVE-2021-31879LOW2.2
wget
1.21.2-2ubuntu1.1
No fix yet
1.1%
Low-Moderate Risk
Post-Exploit
CVE-2026-58471LOW2.17
wget
1.21.2-2ubuntu1.1
fixed in 1.21.2-2ubuntu1.3
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-58472LOW2.17
wget
1.21.2-2ubuntu1.1
fixed in 1.21.2-2ubuntu1.3
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-58469LOW1.99
wget
1.21.2-2ubuntu1.1
fixed in 1.21.2-2ubuntu1.3
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-45446LOW1.89
openssl
3.0.2-0ubuntu1.23
fixed in 3.0.2-0ubuntu1.25
0.4%
Theoretical Threat
Post-Exploit
CVE-2024-56433LOW1.84
login
1:4.8.1-2ubuntu2.2
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2024-56433LOW1.84
passwd
1:4.8.1-2ubuntu2.2
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2025-46394LOW1.68
busybox
1:1.30.1-7ubuntu3.1
No fix yet
0.2%
Theoretical Threat
Post-Exploit
CVE-2023-29383LOW1.68
login
1:4.8.1-2ubuntu2.2
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2023-29383LOW1.68
passwd
1:4.8.1-2ubuntu2.2
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2025-69720NONE0
ncurses-base
6.3-2ubuntu0.1
fixed in 6.3-2ubuntu0.2
0.4%
Theoretical Threat
Not Applicable
CVE-2025-69720NONE0
ncurses-bin
6.3-2ubuntu0.1
fixed in 6.3-2ubuntu0.2
0.4%
Theoretical Threat
Not Applicable
CVE-2026-6238NONE0
locales
2.35-0ubuntu3.13
fixed in 2.35-0ubuntu3.14
0.4%
Theoretical Threat
Not Applicable
CVE-2023-50495NONE0
ncurses-base
6.3-2ubuntu0.1
No fix yet
1.0%
Theoretical Threat
Not Applicable
CVE-2023-50495NONE0
ncurses-bin
6.3-2ubuntu0.1
No fix yet
1.0%
Theoretical Threat
Not Applicable
CVE-2026-5435NONE0
locales
2.35-0ubuntu3.13
fixed in 2.35-0ubuntu3.14
0.2%
Theoretical Threat
Not Applicable
CVE-2022-27943NONE0
gcc-12-base
12.3.0-1ubuntu1~22.04.3
No fix yet
0.9%
Theoretical Threat
Not Applicable
CVE-2026-4046NONE0
locales
2.35-0ubuntu3.13
fixed in 2.35-0ubuntu3.14
0.4%
Theoretical Threat
Not Applicable
CVE-2026-5450NONE0
locales
2.35-0ubuntu3.13
fixed in 2.35-0ubuntu3.14
0.5%
Theoretical Threat
Not Applicable
CVE-2026-5928NONE0
locales
2.35-0ubuntu3.13
fixed in 2.35-0ubuntu3.14
0.4%
Theoretical Threat
Not Applicable
CVE-2024-58251NONE0
busybox
1:1.30.1-7ubuntu3.1
No fix yet
0.2%
Theoretical Threat
Not Applicable

Reachability analysis

Which CVEs are actually reachable — is the vulnerable code even linked and callable.

Locked

Runtime verification

Live-container probes: default user, writable paths, capabilities, exposed ports.

Locked

Hardening recommendations

A step-by-step hardened build plan, with parity tests proving nothing breaks.

Locked

Want to check another image? Run a full scan with the Docker Security Scanner.