CVE-2025-0840
HighAdvisory
Published 29 Jan 2025In the index since 5 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 7.5
- base score, highest
- EPSS
- 0.007
- 53rd percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 309
- of 17,781 indexed, latest versions
- Container images
- 286
- deployed by those charts
- Fix available
- 2 of 2
- affected packages
The matching OSV records carry no description.
Carried by container images the latest versions of 309 of 17,781 indexed charts deploy, on 286 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| binutilsdeb | 2.24-5ubuntu3.1, 2.24-5ubuntu14.2, 2.26.1-1ubuntu1~16.04.5, 2.26.1-1ubuntu1~16.04.6+29 more | 2.24-5ubuntu14.2+esm7, 2.26.1-1ubuntu1~16.04.8+esm11, 2.30-21ubuntu1~18.04.9+esm4, 2.34-6ubuntu1.10+2 more | 266 |
| binutilsapk | 2.40-r7, 2.41-r0, 2.42-r0 | 2.40-r8, 2.41-r1, 2.42-r1 | 20 |
- OSV records
- ALPINE-CVE-2025-0840DEBIAN-CVE-2025-0840UBUNTU-CVE-2025-0840
- Also known as
- USN-7306-1, USN-7423-2, USN-7899-1
Charts affected
309 by stars
Container images carrying it
286 by charts deploying them
A fixed version is listed for 2 of the 2 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| ibmcom/ | e17bdccc5030 | binutils | 2.26.1-1ubuntu1~16.04.8+esm11 | 1 |
| ildarmukhametzyanov/ | 15d23720a3ee | binutils | no fix listed | 1 |
| intel/ | aa8f5483a2ef | binutils | 2.34-6ubuntu1.10 | 1 |
| intelowlproject/ | 0b22e547ea6b | binutils | no fix listed | 1 |
| jacobalberty/ | 4a3616625dda | binutils | 2.30-21ubuntu1~18.04.9+esm4 | 1 |
| jacobalberty/ | b3edc809a3ff | binutils | 2.30-21ubuntu1~18.04.9+esm4 | 1 |
| jacobalberty/ | c409924e2463 | binutils | 2.26.1-1ubuntu1~16.04.8+esm11 | 1 |
| jaedb/ | 048cfbf58d57 | binutils | no fix listed | 1 |
| jakowenko/ | b858bac9e32a | binutils | 2.34-6ubuntu1.10 | 1 |
| jordan/ | f75025fe8ea8 | binutils | no fix listed | 1 |
| josh5/ | 4d49c4816260 | binutils | 2.38-4ubuntu2.7 | 1 |
| jupyterhub/ | b6b4a1a34bf0 | binutils | 2.34-6ubuntu1.10 | 1 |
| jupyterhub/ | e4770285aaf7 | binutils | 2.34-6ubuntu1.10 | 1 |
| kafkakraft/ | 062d697db7e5 | binutils | 2.38-4ubuntu2.7 | 1 |
| kafkakraft/ | f261ad288fce | binutils | 2.38-4ubuntu2.7 | 1 |
| kafkakraft/ | 2e4b593b878b | binutils | 2.38-4ubuntu2.7 | 1 |
| kennethreitz/ | 599fe5e50731 | binutils | 2.30-21ubuntu1~18.04.9+esm4 | 1 |
| kimai/ | 6dfc63199654 | binutils | no fix listed | 1 |
| knspar/ | 0c4f0543ee58 | binutils | no fix listed | 1 |
| kong/ | a6ac46531193 | binutils | 2.38-4ubuntu2.7 | 1 |
| kusionstack/ | 126c8f0b0976 | binutils | 2.38-4ubuntu2.7 | 1 |
| laly9999/ | dd0e503913e1 | binutils | no fix listed | 1 |
| library/ | 28f7931ecbcb | binutils | no fix listed | 1 |
| library/ | 2415789e1602 | binutils | no fix listed | 1 |
| library/ | 588609d76b21 | binutils | no fix listed | 1 |
| library/ | 8f693eaa7e0a | binutils | no fix listed | 1 |
| library/ | d41127070014 | binutils | no fix listed | 1 |
| library/ | ef9723cf4fe4 | binutils | 2.38-4ubuntu2.7 | 1 |
| library/ | 4d0bb287d87b | binutils | no fix listed | 1 |
| library/ | 6db2c9e4c2dd | binutils | 2.41-r1 | 1 |
| library/ | 8ae66efb09a2 | binutils | no fix listed | 1 |
| librenms/ | 0920bc9117a8 | binutils | 2.41-r1 | 1 |
| linuxserver/ | 0ae315a3a456 | binutils | 2.34-6ubuntu1.10 | 1 |
| linuxserver/ | ab105cc50322 | binutils | 2.34-6ubuntu1.10 | 1 |
| lsstsqre/ | b75bf8aaafa4 | binutils | 2.34-6ubuntu1.10 | 1 |
| makersquad/ | a40dd258c527 | binutils | no fix listed | 1 |
| martinhelmich/ | c83a4f3fd7ae | binutils | no fix listed | 1 |
| mathesar/ | 091757cb01fe | binutils | no fix listed | 1 |
| mautic/ | eb8cc73d97e1 | binutils | no fix listed | 1 |
| mediagis/ | c15e941485ef | binutils | 2.34-6ubuntu1.10 | 1 |
| mediagis/ | d0eae7b51374 | binutils | 2.38-4ubuntu2.7 | 1 |
| middlewareeng/ | 747d880812f1 | binutils | no fix listed | 1 |
| milvusdb/ | a3a55e1c1497 | binutils | 2.34-6ubuntu1.10 | 1 |
| mintproject/ | 83aade2c1855 | binutils | 2.34-6ubuntu1.10 | 1 |
| mintproject/ | 02260d20a21f | binutils | no fix listed | 1 |
| moodlehq/ | 922af5166835 | binutils | no fix listed | 1 |
| moonrailgun/ | b528c8f8fcc4 | binutils | 2.42-r1 | 1 |
| moreillon/ | d7d4a5463525 | binutils | no fix listed | 1 |
| moreillon/ | e8fd856e593d | binutils | no fix listed | 1 |
| moreillon/ | 3caa8f710ee0 | binutils | no fix listed | 1 |