CVE-2025-0840
HighAdvisory
Published 29 Jan 2025In the index since 5 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 7.5
- base score, highest
- EPSS
- 0.007
- 53rd percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 310
- of 17,787 indexed, latest versions
- Container images
- 287
- deployed by those charts
- Fix available
- 2 of 2
- affected packages
The matching OSV records carry no description.
Carried by container images the latest versions of 310 of 17,787 indexed charts deploy, on 287 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| binutilsdeb | 2.24-5ubuntu3.1, 2.24-5ubuntu14.2, 2.26.1-1ubuntu1~16.04.5, 2.26.1-1ubuntu1~16.04.6+29 more | 2.24-5ubuntu14.2+esm7, 2.26.1-1ubuntu1~16.04.8+esm11, 2.30-21ubuntu1~18.04.9+esm4, 2.34-6ubuntu1.10+2 more | 267 |
| binutilsapk | 2.40-r7, 2.41-r0, 2.42-r0 | 2.40-r8, 2.41-r1, 2.42-r1 | 20 |
- OSV records
- ALPINE-CVE-2025-0840DEBIAN-CVE-2025-0840UBUNTU-CVE-2025-0840
- Also known as
- USN-7306-1, USN-7423-2, USN-7899-1
Charts affected
310 by stars
Container images carrying it
287 by charts deploying them
A fixed version is listed for 2 of the 2 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| moreillon/ | 3caa8f710ee0 | binutils | no fix listed | 1 |
| moreillon/ | d2ee0423b797 | binutils | no fix listed | 1 |
| mshanley80/ | 5b189a70c0fb | binutils | 2.34-6ubuntu1.10 | 1 |
| muhammedgamal/ | 74b4cd69b6fa | binutils | no fix listed | 1 |
| muluder/ | 43b597a93da7 | binutils | 2.26.1-1ubuntu1~16.04.8+esm11 | 1 |
| nodered/ | e2632a7a35dd | binutils | 2.41-r1 | 1 |
| oled01/ | 05d3e398e675 | binutils | no fix listed | 1 |
| omecproject/ | bcc5f19fd676 | binutils | 2.30-21ubuntu1~18.04.9+esm4 | 1 |
| omecproject/ | 5715e5648aa0 | binutils | 2.26.1-1ubuntu1~16.04.8+esm11 | 1 |
| omecproject/ | d109a8e57e71 | binutils | 2.26.1-1ubuntu1~16.04.8+esm11 | 1 |
| oneuptime/ | 6b2d98713711 | binutils | no fix listed | 1 |
| opea/ | 2bee4eb66f3e | binutils | no fix listed | 1 |
| opea/ | 3ef121f34610 | binutils | no fix listed | 1 |
| opea/ | 7f854e9bffaf | binutils | no fix listed | 1 |
| openbas/ | a277796d9724 | binutils | no fix listed | 1 |
| opendatacube/ | 5d810e8504b8 | binutils | 2.30-21ubuntu1~18.04.9+esm4 | 1 |
| opendatacube/ | 91870111837c | binutils | 2.30-21ubuntu1~18.04.9+esm4 | 1 |
| opendatacube/ | 1b90cdf68831 | binutils | 2.30-21ubuntu1~18.04.9+esm4 | 1 |
| openelevation/ | 82fb21612e86 | binutils | 2.34-6ubuntu1.10 | 1 |
| openproject/ | 88dc1359dfb5 | binutils | no fix listed | 1 |
| openthread/ | f307f59f6432 | binutils | 2.30-21ubuntu1~18.04.9+esm4 | 1 |
| openwhisk/ | c80dba0de3aa | binutils | 2.30-21ubuntu1~18.04.9+esm4 | 1 |
| phan2410/ | 9c6ed6de26ca | binutils | no fix listed | 1 |
| phan2410/ | 4a86d138832d | binutils | no fix listed | 1 |
| photoprism/ | fc6fd632ca74 | binutils | 2.42-4ubuntu2.4 | 1 |
| prefecthq/ | 1df4b5b6238a | binutils | no fix listed | 1 |
| prowlercloud/ | 4f252d579be2 | binutils | no fix listed | 1 |
| psono/ | 3b974b43ea03 | binutils | 2.42-r1 | 1 |
| qumine/ | c0b650d51132 | binutils | 2.38-4ubuntu2.7 | 1 |
| rabeh/ | 941007b6946e | binutils | 2.38-4ubuntu2.7 | 1 |
| redash/ | 00d813437db5 | binutils | no fix listed | 1 |
| redash/ | c5c9148f5c38 | binutils | no fix listed | 1 |
| resouer/ | e2f198b49ba7 | binutils | 2.24-5ubuntu14.2+esm7 | 1 |
| rezachalak/ | 34f694325191 | binutils | 2.34-6ubuntu1.10 | 1 |
| rhasspy/ | e532f0dbc6b2 | binutils | no fix listed | 1 |
| rocketadmin/ | 10955ef540b9 | binutils | no fix listed | 1 |
| rocketchat/ | cfba5c20a5cc | binutils | no fix listed | 1 |
| ryshe/ | b1c89f7f359a | binutils | no fix listed | 1 |
| santisbon/ | c4e994ca4540 | binutils | no fix listed | 1 |
| santisbon/ | e807283f8d69 | binutils | no fix listed | 1 |
| santisbon/ | 8ee3a1697227 | binutils | no fix listed | 1 |
| sashafefler/ | f96d7804c0ca | binutils | no fix listed | 1 |
| scrapinghub/ | a5f89bc84606 | binutils | 2.30-21ubuntu1~18.04.9+esm4 | 1 |
| seafileltd/ | 6693911bcc40 | binutils | 2.34-6ubuntu1.10 | 1 |
| seafileltd/ | 70628f29c663 | binutils | 2.34-6ubuntu1.10 | 1 |
| seafileltd/ | 7ac833196f60 | binutils | 2.34-6ubuntu1.10 | 1 |
| seafileltd/ | d0c66e4621bd | binutils | 2.38-4ubuntu2.7 | 1 |
| seafileltd/ | ed0fcda5e6a9 | binutils | 2.34-6ubuntu1.10 | 1 |
| seldonio/ | 1d0da98a2d76 | binutils | 2.26.1-1ubuntu1~16.04.8+esm11 | 1 |
| signalen/ | 760256000738 | binutils | no fix listed | 1 |