CVE-2020-25704
MediumAdvisory
Published 2 Dec 2020In the index since 6 Sept 2026
- Severity
- Medium
- worst across findings
- CVSS
- 5.5
- base score, highest
- EPSS
- 0.004
- 29th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 17
- of 17,821 indexed, latest versions
- Container images
- 14
- deployed by those charts
- Fix available
- 1 of 1
- affected package
The matching OSV records carry no description.
Carried by container images the latest versions of 17 of 17,821 indexed charts deploy, on 14 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| linuxdeb | 4.15.0-38.41, 4.15.0-46.49, 4.15.0-50.54, 4.15.0-74.84+8 more | 4.15.0-135.139 | 14 |
- OSV records
- UBUNTU-CVE-2020-25704
- Also known as
- USN-4710-1
Charts affected
17 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| openvpn-asstenicVerified publisher | 0.1.9 | 1 of 1See more | 81,519 |
| pysequilabiodatageeks | 0.1.3 | 1 of 7See more | 87,630 |
| flink-operatorflink-operator | 0.1.1 | 1 of 2See more | 80,293 |
| acos-prometheus-exporter-helm-charta10-prometheus-exporter | 0.1.0 | 1 of 1See more | 78,855 |
| janisterminalcloudve | 0.1.0 | 1 of 2See more | 81,051 |
| datacubedatacube-charts | 0.18.2 | 1 of 1See more | 98,089 |
| datacube-datadatacube-charts | 0.2.6 | 1 of 1See more | 85,167 |
| datacube-processingdatacube-charts | 0.1.1 | 1 of 2See more | 93,137 |
| restcubedatacube-charts | 0.2.9 | 1 of 1See more | 94,697 |
| eg-edge-stackdatawire | 0.0.1 | 1 of 7See more | 82,313 |
| kovi-appkovi-charts | 0.8.1 | 1 of 1See more | 85,963 |
| splashntppoolVerified publisher | 1.0.4 | 1 of 1See more | 95,465 |
| omec-control-planeopencord | 0.1.31 | 1 of 8See more | 108,608 |
| open-vpnopenvpn | 0.0.1 | 1 of 1See more | 81,519 |
| openwhiskopenwhisk | 1.0.0 | 1 of 10See more | 102,205 |
| emissary-ingresswener | 8.12.2 | 1 of 2See more | 77,304 |
| emissary-ingresswenerme | 8.12.2 | 1 of 2See more | 77,304 |
Container images carrying it
14 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| istio/ | dbb7726d1bf0 | linux | 4.15.0-135.139 | 3 |
| ghcr.io/ | 4ee0764310e7 | linux | 4.15.0-135.139 | 2 |
| a10networks/ | 8dc58d434d71 | linux | 4.15.0-135.139 | 1 |
| cloudve/ | af56e77ca587 | linux | 4.15.0-135.139 | 1 |
| geoscienceaustralia/ | f4039b45572a | linux | 4.15.0-135.139 | 1 |
| jupyterhub/ | ec78bdae0fed | linux | 4.15.0-135.139 | 1 |
| kennethreitz/ | 599fe5e50731 | linux | 4.15.0-135.139 | 1 |
| omecproject/ | bcc5f19fd676 | linux | 4.15.0-135.139 | 1 |
| opendatacube/ | 5d810e8504b8 | linux | 4.15.0-135.139 | 1 |
| opendatacube/ | 91870111837c | linux | 4.15.0-135.139 | 1 |
| opendatacube/ | 1b90cdf68831 | linux | 4.15.0-135.139 | 1 |
| openwhisk/ | c80dba0de3aa | linux | 4.15.0-135.139 | 1 |
| scrapinghub/ | a5f89bc84606 | linux | 4.15.0-135.139 | 1 |
| gcr.io/ | 809338a69bd5 | linux | 4.15.0-135.139 | 1 |