CVE-2025-2312
MediumAdvisory
Published 25 Mar 2025In the index since 6 Sept 2026
- Severity
- Medium
- worst across findings
- CVSS
- 5.9
- base score, highest
- EPSS
- 0.002
- 11th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 6
- of 17,781 indexed, latest versions
- Container images
- 5
- deployed by those charts
- Fix available
- None
- affected package
The matching OSV records carry no description.
Carried by container images the latest versions of 6 of 17,781 indexed charts deploy, on 5 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| cifs-utilsdeb | 2:7.0-2 | no fix listed | 5 |
- OSV records
- DEBIAN-CVE-2025-2312
Charts affected
6 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| csi-driver-smbcsi-driver-smbVerified publisher | 1.20.3 | 1 of 6See more | 2,945 |
| iobrokereugen | 0.2.6 | 1 of 1See more | 11,458 |
| music-assistant-serverlmatfyVerified publisher | 0.1.9 | 1 of 1See more | 7,201 |
| music-assistant-serverandibraeuVerified publisher | 2.1.2 | 1 of 1See more | 5,817 |
| csi-driver-smbdeimosfr-charts | 1.20.3 | 1 of 5See more | 2,945 |
| music-assistantkarljorgensen | 0.1.3 | 1 of 1See more | 7,081 |
Container images carrying it
5 by charts deploying them
A fixed version is listed for 0 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| registry.k8s.io/ | dc7746bb081e | cifs-utils | no fix listed | 2 |
| ghcr.io/ | ca7dc7362968 | cifs-utils | no fix listed | 1 |
| ghcr.io/ | 3522e8a7a8f0 | cifs-utils | no fix listed | 1 |
| ghcr.io/ | 50666a6f8d7f | cifs-utils | no fix listed | 1 |
| ghcr.io/ | eef3ee7810d0 | cifs-utils | no fix listed | 1 |