CVE-2025-0167
LowAdvisory
Published 5 Feb 2025In the index since 5 Sept 2026
- Severity
- Low
- worst across findings
- CVSS
- 3.4
- base score, highest
- EPSS
- 0.007
- 51st percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 644
- of 17,787 indexed, latest versions
- Container images
- 643
- deployed by those charts
- Fix available
- 2 of 2
- affected packages
The matching OSV records carry no description.
Carried by container images the latest versions of 644 of 17,787 indexed charts deploy, on 643 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| curldeb | 7.81.0-1ubuntu1.2, 7.81.0-1ubuntu1.3, 7.81.0-1ubuntu1.4, 7.81.0-1ubuntu1.6+25 more | 7.81.0-1ubuntu1.23, 7.88.1-10+deb12u11, 8.5.0-2ubuntu10.8 | 422 |
| curlapk | 8.0.1-r2, 8.1.0-r0, 8.1.1-r1, 8.1.2-r0+15 more | 8.12.0-r0 | 221 |
- OSV records
- ALPINE-CVE-2025-0167CGA-3rm4-qmc7-26hxDEBIAN-CVE-2025-0167UBUNTU-CVE-2025-0167
- Also known as
- CGA-j39x-f5qx-6xh3, USN-8084-1
Charts affected
644 by stars
Container images carrying it
643 by charts deploying them
A fixed version is listed for 2 of the 2 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| duck1123/ | 0e29f19fa67c | curl | 7.81.0-1ubuntu1.23 | 1 |
| duck1123/ | 9d6fb247b714 | curl | 7.81.0-1ubuntu1.23 | 1 |
| dwdraju/ | 83bd9be2b14b | curl | 8.12.0-r0 | 1 |
| dzikoysk/ | 4128c2d7a6ba | curl | 8.5.0-2ubuntu10.8 | 1 |
| emqx/ | e33e9816f147 | curl | 7.88.1-10+deb12u11 | 1 |
| epamedp/ | 28ef56bc0ca3 | curl | 8.12.0-r0 | 1 |
| eqalpha/ | f1d60f12cb3c | curl | 8.12.0-r0 | 1 |
| esphome/ | 9ab8cc88b28c | curl | 7.88.1-10+deb12u11 | 1 |
| esphome/ | b2c6322700ac | curl | 7.88.1-10+deb12u11 | 1 |
| feiyu563/ | 224cfa68cbd9 | curl | 8.12.0-r0 | 1 |
| felipecs8/ | 29e06c9c6385 | curl | 7.88.1-10+deb12u11 | 1 |
| firefart/ | 0d6249906d8c | curl | 7.88.1-10+deb12u11 | 1 |
| flanksource/ | 689687a7cf95 | curl | 8.5.0-2ubuntu10.8 | 1 |
| freeradius/ | af6fd34a5b78 | curl | 7.81.0-1ubuntu1.23 | 1 |
| gethue/ | 7d5c1b9f8a79 | curl | 7.81.0-1ubuntu1.23 | 1 |
| getmeili/ | b9be3d2d4251 | curl | 8.12.0-r0 | 1 |
| getsentry/ | ba7bf9163219 | curl | 7.88.1-10+deb12u11 | 1 |
| gitea/ | 6120b1165f3a | curl | 8.12.0-r0 | 1 |
| gitea/ | c57233403eff | curl | 8.12.0-r0 | 1 |
| gitea/ | 76f516a1a8c2 | curl | 8.12.0-r0 | 1 |
| gitea/ | ac73e0da341f | curl | 8.12.0-r0 | 1 |
| glenndehaan/ | a5b3f1dd865d | curl | 8.12.0-r0 | 1 |
| goccx/ | 784b35910d52 | curl | 8.12.0-r0 | 1 |
| gradiant/ | 332031245fce | curl | 8.5.0-2ubuntu10.8 | 1 |
| grafana/ | 0679e877ba20 | curl | 8.12.0-r0 | 1 |
| grafana/ | 1b9ca4bbc4a2 | curl | 8.12.0-r0 | 1 |
| grafana/ | 464eac539793 | curl | 8.12.0-r0 | 1 |
| grafana/ | 5781759b3d27 | curl | 8.12.0-r0 | 1 |
| grafana/ | 6b5b37eb35bb | curl | 8.12.0-r0 | 1 |
| grafana/ | 8640e5038e83 | curl | 8.12.0-r0 | 1 |
| grafana/ | b23b588cf7cb | curl | 8.12.0-r0 | 1 |
| grafana/ | f9811e4e687f | curl | 8.12.0-r0 | 1 |
| grafana/ | fa801ab6e1ae | curl | 8.12.0-r0 | 1 |
| graylog/ | 19de1aff48c2 | curl | 7.81.0-1ubuntu1.23 | 1 |
| gridgain/ | d32d182a0e6a | curl | 8.12.0-r0 | 1 |
| grpl/ | c00aafee6629 | curl | 8.5.0-2ubuntu10.8 | 1 |
| guacamole/ | 0f62f6d17ab3 | curl | 7.81.0-1ubuntu1.23 | 1 |
| gulacedia/ | 67b467d961ca | curl | 7.88.1-10+deb12u11 | 1 |
| hamzaarshad10/ | cd359d9a78c3 | curl | 8.12.0-r0 | 1 |
| hansehe/ | 58e09540afbc | curl | 8.12.0-r0 | 1 |
| haproxytech/ | c5f8a41ef0d4 | curl | 8.12.0-r0 | 1 |
| hashicorp/ | 712fe02d2f84 | curl | 8.12.0-r0 | 1 |
| hashicorp/ | 4dcb45513699 | curl | 8.12.0-r0 | 1 |
| hashicorp/ | b77efab1a448 | curl | 8.12.0-r0 | 1 |
| hasura/ | 0111b0204136 | curl | 7.81.0-1ubuntu1.23 | 1 |
| hasura/ | f6c1c4b957d2 | curl | 7.81.0-1ubuntu1.23 | 1 |
| hazegoodlife/ | 50f02d2d5d4d | curl | 7.88.1-10+deb12u11 | 1 |
| hazegoodlife/ | 8d4c63169e14 | curl | 7.88.1-10+deb12u11 | 1 |
| hazelcast/ | 8fe26efde8e1 | curl | 8.12.0-r0 | 1 |
| hecrom/ | bb0372939c19 | curl | 7.88.1-10+deb12u11 | 1 |