CVE-2025-0840
HighAdvisory
Published 29 Jan 2025In the index since 5 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 7.5
- base score, highest
- EPSS
- 0.007
- 53rd percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 309
- of 17,781 indexed, latest versions
- Container images
- 286
- deployed by those charts
- Fix available
- 2 of 2
- affected packages
The matching OSV records carry no description.
Carried by container images the latest versions of 309 of 17,781 indexed charts deploy, on 286 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| binutilsdeb | 2.24-5ubuntu3.1, 2.24-5ubuntu14.2, 2.26.1-1ubuntu1~16.04.5, 2.26.1-1ubuntu1~16.04.6+29 more | 2.24-5ubuntu14.2+esm7, 2.26.1-1ubuntu1~16.04.8+esm11, 2.30-21ubuntu1~18.04.9+esm4, 2.34-6ubuntu1.10+2 more | 266 |
| binutilsapk | 2.40-r7, 2.41-r0, 2.42-r0 | 2.40-r8, 2.41-r1, 2.42-r1 | 20 |
- OSV records
- ALPINE-CVE-2025-0840DEBIAN-CVE-2025-0840UBUNTU-CVE-2025-0840
- Also known as
- USN-7306-1, USN-7423-2, USN-7899-1
Charts affected
309 by stars
Container images carrying it
286 by charts deploying them
A fixed version is listed for 2 of the 2 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| bicarus/ | b1dab0721e1c | binutils | 2.34-6ubuntu1.10 | 1 |
| bitnamilegacy/ | 7089d796fc9b | binutils | no fix listed | 1 |
| bloxstaking/ | bf6d7d2fdc93 | binutils | no fix listed | 1 |
| bmeares/ | 8e9c5bacaa82 | binutils | no fix listed | 1 |
| bnjbvr/ | 37e216b182c8 | binutils | no fix listed | 1 |
| browserless/ | c81ae5585b47 | binutils | 2.34-6ubuntu1.10 | 1 |
| carlosmz87/ | 8ffa63aa995d | binutils | no fix listed | 1 |
| castlemock/ | b7f3f1527ba9 | binutils | 2.42-4ubuntu2.4 | 1 |
| castopod/ | 1fd37280cbb2 | binutils | no fix listed | 1 |
| chetangautamm/ | b4b94155ff5a | binutils | 2.24-5ubuntu14.2+esm7 | 1 |
| chetangautamm/ | e7f7049e1544 | binutils | 2.34-6ubuntu1.10 | 1 |
| cheyang/ | 46cc34755493 | binutils | 2.26.1-1ubuntu1~16.04.8+esm11 | 1 |
| cloudve/ | af56e77ca587 | binutils | 2.30-21ubuntu1~18.04.9+esm4 | 1 |
| codecov/ | 0475cb1c3136 | binutils | 2.40-r8 | 1 |
| codecov/ | 837f546b479b | binutils | 2.40-r8 | 1 |
| commerceexperts/ | 341eebe7239b | binutils | 2.42-r1 | 1 |
| countly/ | e3c238248f99 | binutils | 2.34-6ubuntu1.10 | 1 |
| cspconsole/ | 46dda4a31bd6 | binutils | no fix listed | 1 |
| dannyben/ | ebdf50556c02 | binutils | 2.42-r1 | 1 |
| ddosify/ | a43c5155fa1c | binutils | no fix listed | 1 |
| ddosify/ | 3c11e3182652 | binutils | no fix listed | 1 |
| ddosify/ | ac323d52bfb4 | binutils | no fix listed | 1 |
| deconzcommunity/ | 062de2362641 | binutils | no fix listed | 1 |
| dgtlmoon/ | f166a963b550 | binutils | 2.40-r8 | 1 |
| dolibarr/ | 69ec52e3b7ef | binutils | no fix listed | 1 |
| dolibarr/ | 7ad88fc9b13c | binutils | no fix listed | 1 |
| domainmod/ | 4017bfe4c597 | binutils | no fix listed | 1 |
| dragonflyoss/ | edf3e921f4e0 | binutils | no fix listed | 1 |
| drpcorg/ | 8858fae1859d | binutils | 2.38-4ubuntu2.7 | 1 |
| elautoestopista/ | b6f74db9fc81 | binutils | 2.42-r1 | 1 |
| ethereumex/ | a7603aa8df4c | binutils | 2.26.1-1ubuntu1~16.04.8+esm11 | 1 |
| fabioformosa/ | 063873af085c | binutils | 2.41-r1 | 1 |
| falcosecurity/ | 7df783d5269a | binutils | no fix listed | 1 |
| felipecs8/ | 29e06c9c6385 | binutils | no fix listed | 1 |
| fiware/ | d551a13e8278 | binutils | no fix listed | 1 |
| fluent/ | e76397ef3983 | binutils | no fix listed | 1 |
| flyway/ | 45b5d7cdc75a | binutils | 2.34-6ubuntu1.10 | 1 |
| gethue/ | 11b649636e68 | binutils | 2.34-6ubuntu1.10 | 1 |
| gethue/ | 5702b2c37ff9 | binutils | 2.30-21ubuntu1~18.04.9+esm4 | 1 |
| gulacedia/ | 67b467d961ca | binutils | no fix listed | 1 |
| haveagitgat/ | 1256348872ce | binutils | 2.34-6ubuntu1.10 | 1 |
| helicone/ | 4c69b971a7e4 | binutils | 2.34-6ubuntu1.10 | 1 |
| helicone/ | 4a913936c97b | binutils | no fix listed | 1 |
| hivemq/ | 241d6a8e1963 | binutils | 2.38-4ubuntu2.7 | 1 |
| hmediade/ | 481a552c8e1c | binutils | 2.38-4ubuntu2.7 | 1 |
| huginn/ | c794eddc7b47 | binutils | 2.30-21ubuntu1~18.04.9+esm4 | 1 |
| hugohg34/ | 812a03b3f274 | binutils | 2.34-6ubuntu1.10 | 1 |
| hyperledger/ | c65891b6c237 | binutils | 2.26.1-1ubuntu1~16.04.8+esm11 | 1 |
| i4trust/ | 9f3719176893 | binutils | 2.40-r8 | 1 |
| ibmcom/ | b5d8c6714dbc | binutils | 2.26.1-1ubuntu1~16.04.8+esm11 | 1 |