StackRadar

CVE-2024-25638

High

Advisory

Published 22 Jul 2024In the index since 6 Sept 2026
Severity
High
worst across findings
CVSS
8.9
base score, highest
EPSS
0.004
33rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
44
of 17,781 indexed, latest versions
Container images
41
deployed by those charts
Fix available
1 of 1
affected package

DNSJava DNSSEC Bypass

Carried by container images the latest versions of 44 of 17,781 indexed charts deploy, on 41 images.

Affected packageAffected versionsFixed inImages
dnsjavamaven2.0.8, 2.1.7, 2.1.8, 2.1.9+4 more3.6.041
OSV records
GHSA-cfxw-4h78-h7fw

Charts affected

44 by stars
ChartLatestAffected imagesRadar Score
druiddruid-helmVerified publisher37.0.21 of 3See more

druid druid-helm 37.0.2

1 of the 3 container images this version deploys carry CVE-2024-25638.

Container imageDigestPackageFixed in
apache/druid:37.0.00116fb802786
dnsjava@2.1.7
3.6.0

Open the chart page →

3,812
hdfsgaffer2.2.11 of 2See more

hdfs gaffer 2.2.1

1 of the 2 container images this version deploys carry CVE-2024-25638.

Container imageDigestPackageFixed in
gchq/hdfs:3.3.35ec58edbb2db
dnsjava@2.1.7
3.6.0

Open the chart page →

5,357
sparkmicrosoft1.0.42 of 3See more

spark microsoft 1.0.4

2 of the 3 container images this version deploys carry CVE-2024-25638.

Container imageDigestPackageFixed in
dbanda/livy:0.80ca125e68e53
dnsjava@2.1.7
3.6.0
dbanda/spark:2.4.6d0e6367876ae
dnsjava@2.1.7
3.6.0

Open the chart page →

13,738
hadoopbigdata-chartsVerified publisher1.0.11 of 2See more

hadoop bigdata-charts 1.0.1

1 of the 2 container images this version deploys carry CVE-2024-25638.

Container imageDigestPackageFixed in
5200710/hadoop:3.2.3-java8092d3088a5fb
dnsjava@2.1.7
3.6.0

Open the chart page →

12,111
druidwiremindVerified publisher1.22.11 of 3See more

druid wiremind 1.22.1

1 of the 3 container images this version deploys carry CVE-2024-25638.

Container imageDigestPackageFixed in
apache/druid:29.0.10cef139b6bf1
dnsjava@2.1.7
3.6.0

Open the chart page →

7,930
hivebigdata-chartsVerified publisher0.1.81 of 1See more

hive bigdata-charts 0.1.8

1 of the 1 container images this version deploys carry CVE-2024-25638.

Container imageDigestPackageFixed in
5200710/hive:3.1.3-postgresql-metastoree34ab066d2ed
dnsjava@2.1.7
3.6.0

Open the chart page →

7,166
hdfsdmwm-bigdataVerified publisher1.0.11 of 2See more

hdfs dmwm-bigdata 1.0.1

1 of the 2 container images this version deploys carry CVE-2024-25638.

Container imageDigestPackageFixed in
gradiant/hdfs:3.2.2e3bf364fe713
dnsjava@2.1.7
3.6.0

Open the chart page →

7,948
hazelcasthazelcastVerified publisher5.10.21 of 2See more

hazelcast hazelcast 5.10.2

1 of the 2 container images this version deploys carry CVE-2024-25638.

Container imageDigestPackageFixed in
hazelcast/hazelcast:5.5.05dd5d31c7a06
dnsjava@3.4.0
3.6.0

Open the chart page →

2,634
hive-metastoreheva-helm-chartsVerified publisher0.2.01 of 2See more

hive-metastore heva-helm-charts 0.2.0

1 of the 2 container images this version deploys carry CVE-2024-25638.

Container imageDigestPackageFixed in
sslhep/hive-metastore:3.1.39e80af083079
dnsjava@2.1.7
3.6.0

Open the chart page →

7,335
apache-rangerapache-ranger0.1.01 of 2See more

apache-ranger apache-ranger 0.1.0

1 of the 2 container images this version deploys carry CVE-2024-25638.

Container imageDigestPackageFixed in
apache/ranger:2.7.076c176e8a0e4
dnsjava@2.1.7
3.6.0

Open the chart page →

7,740
soarv113assist-iot-cybersecurity-monitoring-soar0.1.31 of 5See more

soarv113 assist-iot-cybersecurity-monitoring-soar 0.1.3

1 of the 5 container images this version deploys carry CVE-2024-25638.

Container imageDigestPackageFixed in
assistiot/cybersecurity-monitoring_ir-thv:latestc8b6c7eaa0cd
dnsjava@2.1.7
3.6.0

Open the chart page →

17,896
distributed-jmetercloudnativeapp1.0.11 of 1See more

distributed-jmeter cloudnativeapp 1.0.1

1 of the 1 container images this version deploys carry CVE-2024-25638.

Container imageDigestPackageFixed in
pedrocesarti/jmeter-docker:3.314851f144f57
dnsjava@2.1.8
3.6.0

Open the chart page →

4,532
jmeterjmeterVerified publisher1.2.51 of 1See more

jmeter jmeter 1.2.5

1 of the 1 container images this version deploys carry CVE-2024-25638.

Container imageDigestPackageFixed in
liukunup/jmeter:5.59c079617a81b
dnsjava@2.1.9
3.6.0

Open the chart page →

2,067
kokukokuVerified publisher1.0.01 of 7See more

koku koku 1.0.0

1 of the 7 container images this version deploys carry CVE-2024-25638.

Container imageDigestPackageFixed in
public.ecr.aws/v0r6c2e2/hive-metastore:latest794b3bff9510
dnsjava@2.1.7
3.6.0

Open the chart page →

12,019
magentomagento3.2.31 of 12See more

magento magento 3.2.3

1 of the 12 container images this version deploys carry CVE-2024-25638.

Container imageDigestPackageFixed in
magento/magento-cloud-docker-opensearch:2.5-1.4.059fb6f0f1461
dnsjava@2.1.7
3.6.0

Open the chart page →

13,479
data-prepperopensearch-project-helm-chartsVerified publisher0.3.11 of 1See more

data-prepper opensearch-project-helm-charts 0.3.1

1 of the 1 container images this version deploys carry CVE-2024-25638.

Container imageDigestPackageFixed in
opensearchproject/data-prepper:2.8.057c25fa01d3c
dnsjava@2.1.7
3.6.0

Open the chart page →

1,692
spark-operatorwikimedia2.2.71 of 1See more

spark-operator wikimedia 2.2.7

1 of the 1 container images this version deploys carry CVE-2024-25638.

Container imageDigestPackageFixed in
ghcr.io/kubeflow/spark-operator/controller:2.2.1865ff4da5686
dnsjava@2.1.7
3.6.0

Open the chart page →

7,835
amorphieamorphie0.1.21 of 18See more

amorphie amorphie 0.1.2

1 of the 18 container images this version deploys carry CVE-2024-25638.

Container imageDigestPackageFixed in
hazelcast/hazelcast:5.3.18fe26efde8e1
dnsjava@2.1.7
3.6.0

Open the chart page →

28,131
james-komposeappscodeVerified publisher0.1.01 of 4See more

james-kompose appscode 0.1.0

1 of the 4 container images this version deploys carry CVE-2024-25638.

Container imageDigestPackageFixed in
ghcr.io/appscode/inbox-server:MailetGroup4a2824296412
dnsjava@3.5.2
3.6.0

Open the chart page →

16,975
sdn-controllerassist-iot-sdn-controller2.4.01 of 1See more

sdn-controller assist-iot-sdn-controller 2.4.0

1 of the 1 container images this version deploys carry CVE-2024-25638.

Container imageDigestPackageFixed in
assistiot/sdn_controller:2.4.0ea254b6d8a31
dnsjava@3.3.1
3.6.0

Open the chart page →

7,936
sumo-besu-genesisconsensys0.1.751 of 1See more

sumo-besu-genesis consensys 0.1.75

1 of the 1 container images this version deploys carry CVE-2024-25638.

Container imageDigestPackageFixed in
hyperledger/besu:22.4-openjdk-latesta674d35eec9a
dnsjava@3.5.0
3.6.0

Open the chart page →

7,963
sumo-besu-nodeconsensys0.1.751 of 4See more

sumo-besu-node consensys 0.1.75

1 of the 4 container images this version deploys carry CVE-2024-25638.

Container imageDigestPackageFixed in
hyperledger/besu:22.4-openjdk-latesta674d35eec9a
dnsjava@3.5.0
3.6.0

Open the chart page →

7,963
accumulogaffer2.2.12 of 4See more

accumulo gaffer 2.2.1

2 of the 4 container images this version deploys carry CVE-2024-25638.

Container imageDigestPackageFixed in
gchq/accumulo:2.0.1c460bb587d6d
dnsjava@2.1.7
3.6.0
gchq/hdfs:3.3.35ec58edbb2db
dnsjava@2.1.7
3.6.0

Open the chart page →

16,892
gaffer-road-trafficgaffer2.2.11 of 8See more

gaffer-road-traffic gaffer 2.2.1

1 of the 8 container images this version deploys carry CVE-2024-25638.

Container imageDigestPackageFixed in
gchq/hdfs:3.3.35ec58edbb2db
dnsjava@2.1.7
3.6.0

Open the chart page →

9,342
openkmgeek-cookbookVerified publisher4.2.01 of 1See more

openkm geek-cookbook 4.2.0

1 of the 1 container images this version deploys carry CVE-2024-25638.

Container imageDigestPackageFixed in
openkm/openkm-ce:6.3.113bc465a7461b
dnsjava@2.0.8
3.6.0

Open the chart page →

27,949
gravitino-iceberg-rest-server-helmgravitino-iceberg-rest-server1.3.111 of 1See more

gravitino-iceberg-rest-server-helm gravitino-iceberg-rest-server 1.3.11

1 of the 1 container images this version deploys carry CVE-2024-25638.

Container imageDigestPackageFixed in
apache/gravitino-iceberg-rest:1.3.080136ae753ee
dnsjava@2.1.7
3.6.0

Open the chart page →

4,556
hazelcast-jethazelcastVerified publisher1.17.11 of 1See more

hazelcast-jet hazelcast 1.17.1

1 of the 1 container images this version deploys carry CVE-2024-25638.

Container imageDigestPackageFixed in
hazelcast/hazelcast-jet:4.5.3a825ecbe9fda
dnsjava@2.1.7
3.6.0

Open the chart page →

6,102
hbasehbase0.1.71 of 4See more

hbase hbase 0.1.7

1 of the 4 container images this version deploys carry CVE-2024-25638.

Container imageDigestPackageFixed in
ghcr.io/fleeksoft/hbase/hdfs:3.3.3.2ac62269785ac
dnsjava@2.1.7
3.6.0

Open the chart page →

10,540
ckanhelmforgeVerified publisher1.3.81 of 6See more

ckan helmforge 1.3.8

1 of the 6 container images this version deploys carry CVE-2024-25638.

Container imageDigestPackageFixed in
ckan/ckan-solr:2.11-solr9ef8e5d3e6be1
dnsjava@3.4.0
3.6.0

Open the chart page →

9,920
druidhelmforgeVerified publisher1.3.61 of 4See more

druid helmforge 1.3.6

1 of the 4 container images this version deploys carry CVE-2024-25638.

Container imageDigestPackageFixed in
apache/druid:37.0.00116fb802786
dnsjava@2.1.7
3.6.0

Open the chart page →

8,541
ibm-microclimateibm-charts0.1.01 of 8See more

ibm-microclimate ibm-charts 0.1.0

1 of the 8 container images this version deploys carry CVE-2024-25638.

Container imageDigestPackageFixed in
ibmcom/microclimate-portal:latested5505e5c7ec
dnsjava@2.1.8
3.6.0

Open the chart page →

57,669
ikigaiikigai-chartVerified publisher0.0.91 of 58See more

ikigai ikigai-chart 0.0.9

1 of the 58 container images this version deploys carry CVE-2024-25638.

Container imageDigestPackageFixed in
dremio/dremio-oss:24.1.080ed2e3b7c43
dnsjava@2.1.7
3.6.0

Open the chart page →

37,671
ma1sdnetsocVerified publisher0.2.11 of 1See more

ma1sd netsoc 0.2.1

1 of the 1 container images this version deploys carry CVE-2024-25638.

Container imageDigestPackageFixed in
ma1uta/ma1sd:2.5.0ee2a56d8b8ca
dnsjava@2.1.9
3.6.0

Open the chart page →

3,582
hive-metastoreolehrgfVerified publisher0.1.01 of 1See more

hive-metastore olehrgf 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-25638.

Container imageDigestPackageFixed in
ghcr.io/melodyyangaws/hive-metastore:3.0.0e949b0f733f0
dnsjava@2.1.7
3.6.0

Open the chart page →

8,540
apache-knox-helmpfisterer-knox0.1.111 of 1See more

apache-knox-helm pfisterer-knox 0.1.11

1 of the 1 container images this version deploys carry CVE-2024-25638.

Container imageDigestPackageFixed in
farberg/apache-knox-docker:1.6.14b4a22487394
dnsjava@2.1.7
3.6.0

Open the chart page →

6,237
hive-metastorepresto-loadbalancer0.2.31 of 1See more

hive-metastore presto-loadbalancer 0.2.3

1 of the 1 container images this version deploys carry CVE-2024-25638.

Container imageDigestPackageFixed in
datappeal/hive-metastore:lateste38c085a3567
dnsjava@2.1.7
3.6.0

Open the chart page →

9,606
punchline-javapunchplatform8.1.11 of 1See more

punchline-java punchplatform 8.1.1

1 of the 1 container images this version deploys carry CVE-2024-25638.

Container imageDigestPackageFixed in
ghcr.io/punchplatform/punchline-java:8.1.1d46ce7b96482
dnsjava@2.1.7
3.6.0

Open the chart page →

1,995
rada-platformrada-platform0.1.01 of 7See more

rada-platform rada-platform 0.1.0

1 of the 7 container images this version deploys carry CVE-2024-25638.

Container imageDigestPackageFixed in
trinodb/trino:45038c6f24ab1a4
dnsjava@2.1.7
3.6.0

Open the chart page →

21,211
newrelic-private-minionsstarcher0.1.21 of 1See more

newrelic-private-minion sstarcher 0.1.2

1 of the 1 container images this version deploys carry CVE-2024-25638.

Container imageDigestPackageFixed in
quay.io/newrelic/synthetics-minion:2.2.2198c26e1b8f70
dnsjava@2.1.8
3.6.0

Open the chart page →

3,164
hadoop-deploymenttejaswita-hadoop-helmchart1.0.01 of 1See more

hadoop-deployment tejaswita-hadoop-helmchart 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-25638.

Container imageDigestPackageFixed in
apache/hadoop:3af361b20bec0
dnsjava@2.1.7
3.6.0

Open the chart page →

4,240
drillwearefrank1.3.61 of 3See more

drill wearefrank 1.3.6

1 of the 3 container images this version deploys carry CVE-2024-25638.

Container imageDigestPackageFixed in
apache/drill:1.21.11f96558fd292
dnsjava@2.1.7
3.6.0

Open the chart page →

9,397
hazelcastwenerme5.10.21 of 2See more

hazelcast wenerme 5.10.2

1 of the 2 container images this version deploys carry CVE-2024-25638.

Container imageDigestPackageFixed in
hazelcast/hazelcast:5.5.05dd5d31c7a06
dnsjava@3.4.0
3.6.0

Open the chart page →

2,634
is-pattern-1wso2is-pattern15.11.01 of 2See more

is-pattern-1 wso2is-pattern1 5.11.0

1 of the 2 container images this version deploys carry CVE-2024-25638.

Container imageDigestPackageFixed in
massimolauri/wso2is:5.11.0-centose08abf0ce767
dnsjava@2.1.8
3.6.0

Open the chart page →

6,213
zahori-processzahoriVerified publisher1.0.11 of 1See more

zahori-process zahori 1.0.1

1 of the 1 container images this version deploys carry CVE-2024-25638.

Container imageDigestPackageFixed in
zahoriaut/zahori-process:0.1.13351f8a220ed7
dnsjava@3.5.2
3.6.0

Open the chart page →

3,480

Container images carrying it

41 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
gchq/hdfs:3.3.35ec58edbb2db
dnsjava@2.1.7
3.6.0
3
apache/druid:37.0.00116fb802786
dnsjava@2.1.7
3.6.0
2
hazelcast/hazelcast:5.5.05dd5d31c7a06
dnsjava@3.4.0
3.6.0
2
hyperledger/besu:22.4-openjdk-latesta674d35eec9a
dnsjava@3.5.0
3.6.0
2
5200710/hadoop:3.2.3-java8092d3088a5fb
dnsjava@2.1.7
3.6.0
1
5200710/hive:3.1.3-postgresql-metastoree34ab066d2ed
dnsjava@2.1.7
3.6.0
1
apache/drill:1.21.11f96558fd292
dnsjava@2.1.7
3.6.0
1
apache/druid:29.0.10cef139b6bf1
dnsjava@2.1.7
3.6.0
1
apache/gravitino-iceberg-rest:1.3.080136ae753ee
dnsjava@2.1.7
3.6.0
1
apache/hadoop:3af361b20bec0
dnsjava@2.1.7
3.6.0
1
apache/ranger:2.7.076c176e8a0e4
dnsjava@2.1.7
3.6.0
1
assistiot/cybersecurity-monitoring_ir-thv:latestc8b6c7eaa0cd
dnsjava@2.1.7
3.6.0
1
assistiot/sdn_controller:2.4.0ea254b6d8a31
dnsjava@3.3.1
3.6.0
1
ckan/ckan-solr:2.11-solr9ef8e5d3e6be1
dnsjava@3.4.0
3.6.0
1
datappeal/hive-metastore:lateste38c085a3567
dnsjava@2.1.7
3.6.0
1
dbanda/livy:0.80ca125e68e53
dnsjava@2.1.7
3.6.0
1
dbanda/spark:2.4.6d0e6367876ae
dnsjava@2.1.7
3.6.0
1
dremio/dremio-oss:24.1.080ed2e3b7c43
dnsjava@2.1.7
3.6.0
1
farberg/apache-knox-docker:1.6.14b4a22487394
dnsjava@2.1.7
3.6.0
1
gchq/accumulo:2.0.1c460bb587d6d
dnsjava@2.1.7
3.6.0
1
gradiant/hdfs:3.2.2e3bf364fe713
dnsjava@2.1.7
3.6.0
1
hazelcast/hazelcast:5.3.18fe26efde8e1
dnsjava@2.1.7
3.6.0
1
hazelcast/hazelcast-jet:4.5.3a825ecbe9fda
dnsjava@2.1.7
3.6.0
1
ibmcom/microclimate-portal:latested5505e5c7ec
dnsjava@2.1.8
3.6.0
1
liukunup/jmeter:5.59c079617a81b
dnsjava@2.1.9
3.6.0
1
ma1uta/ma1sd:2.5.0ee2a56d8b8ca
dnsjava@2.1.9
3.6.0
1
magento/magento-cloud-docker-opensearch:2.5-1.4.059fb6f0f1461
dnsjava@2.1.7
3.6.0
1
massimolauri/wso2is:5.11.0-centose08abf0ce767
dnsjava@2.1.8
3.6.0
1
openkm/openkm-ce:6.3.113bc465a7461b
dnsjava@2.0.8
3.6.0
1
opensearchproject/data-prepper:2.8.057c25fa01d3c
dnsjava@2.1.7
3.6.0
1
pedrocesarti/jmeter-docker:3.314851f144f57
dnsjava@2.1.8
3.6.0
1
sslhep/hive-metastore:3.1.39e80af083079
dnsjava@2.1.7
3.6.0
1
trinodb/trino:45038c6f24ab1a4
dnsjava@2.1.7
3.6.0
1
zahoriaut/zahori-process:0.1.13351f8a220ed7
dnsjava@3.5.2
3.6.0
1
ghcr.io/appscode/inbox-server:MailetGroup4a2824296412
dnsjava@3.5.2
3.6.0
1
ghcr.io/fleeksoft/hbase/hdfs:3.3.3.2ac62269785ac
dnsjava@2.1.7
3.6.0
1
ghcr.io/kubeflow/spark-operator/controller:2.2.1865ff4da5686
dnsjava@2.1.7
3.6.0
1
ghcr.io/melodyyangaws/hive-metastore:3.0.0e949b0f733f0
dnsjava@2.1.7
3.6.0
1
ghcr.io/punchplatform/punchline-java:8.1.1d46ce7b96482
dnsjava@2.1.7
3.6.0
1
public.ecr.aws/v0r6c2e2/hive-metastore:latest794b3bff9510
dnsjava@2.1.7
3.6.0
1
quay.io/newrelic/synthetics-minion:2.2.2198c26e1b8f70
dnsjava@2.1.8
3.6.0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.