CVE-2025-3198

Medium

Advisory

Published 4 Apr 2025In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 5.5; base score, highest
EPSS: 0.003; 21st percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 354; of 17,781 indexed, latest versions
Container images: 346; deployed by those charts
Fix available: 2 of 2; affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 354 of 17,781 indexed charts deploy, on 346 images.

Affected package	Affected versions	Fixed in	Images
binutilsdeb	2.30-21ubuntu1~18.04, 2.30-21ubuntu1~18.04.1, 2.30-21ubuntu1~18.04.2, 2.30-21ubuntu1~18.04.3+29 more	2.30-21ubuntu1~18.04.9+esm5, 2.34-6ubuntu1.11+esm1, 2.38-4ubuntu2.10, 2.42-4ubuntu2.6	343
binutilsapk	2.43.1-r2, 2.44-r0	2.43.1-r3, 2.44-r2	3

OSV records: ALPINE-CVE-2025-3198 DEBIAN-CVE-2025-3198 UBUNTU-CVE-2025-3198
Also known as: USN-7899-1

Charts affected

354 by stars

Chart

Latest

Affected images

Radar Score

aih-scannerwallarm

2.7.11

1 of 2 See more

aih-scanner wallarm 2.7.11

1 of the 2 container images this version deploys carry CVE-2025-3198.

Container image	Digest	Package	Fixed in
wallarm/aih-scanner :2.7.11	f1cb26db1f5b	binutils@2.44-3	no fix listed

Open the chart page →

3,911

supersetwbstack

0.1.0

1 of 1 See more

superset wbstack 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-3198.

Container image	Digest	Package	Fixed in
apache/superset :4.0.1	ab9467fd712c	binutils@2.40-2	no fix listed

Open the chart page →

7,085

web-dvwaweb-dvwa

1.16.0

1 of 2 See more

web-dvwa web-dvwa 1.16.0

1 of the 2 container images this version deploys carry CVE-2025-3198.

Container image	Digest	Package	Fixed in
gulacedia/web-dvwa-new :v3	67b467d961ca	binutils@2.40-2	no fix listed

Open the chart page →

10,001

Wordpresswordpress-mariadb

1.0.2

1 of 2 See more

Wordpress wordpress-mariadb 1.0.2

1 of the 2 container images this version deploys carry CVE-2025-3198.

Container image	Digest	Package	Fixed in
library/wordpress :latest	5a93c470ae82	binutils@2.44-3	no fix listed

Open the chart page →

5,560

Container images carrying it

346 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
library/php :8.4-fpm	59fa733c9af6	binutils@2.44-3	no fix listed	1
library/python :3.10	70c9cc675605	binutils@2.44-3	no fix listed	1
library/python :3.8	d41127070014	binutils@2.40-2	no fix listed	1
library/python :3.9	da5aee29682d	binutils@2.44-3	no fix listed	1
library/sonarqube :10.0.0-community	ef9723cf4fe4	binutils@2.38-4ubuntu2.2	2.38-4ubuntu2.10	1
library/varnish :7.5.0	4d0bb287d87b	binutils@2.40-2	no fix listed	1
library/wordpress :6.4.3-apache	8ae66efb09a2	binutils@2.40-2	no fix listed	1
library/wordpress :6.9.4-fpm	ad4a8bae2eb4	binutils@2.44-3	no fix listed	1
library/wordpress :php8.1-apache	f73396626d2f	binutils@2.44-3	no fix listed	1
linuxserver/unifi-controller :8.0.24	0ae315a3a456	binutils@2.34-6ubuntu1.7	2.34-6ubuntu1.11+esm1	1
linuxserver/unifi-controller :7.3.83	ab105cc50322	binutils@2.34-6ubuntu1.5	2.34-6ubuntu1.11+esm1	1
lsstsqre/nublado2 :2.0.1	b75bf8aaafa4	binutils@2.34-6ubuntu1.3	2.34-6ubuntu1.11+esm1	1
makersquad/harp-proxy :0.8.1	a40dd258c527	binutils@2.40-2	no fix listed	1
mariusm/vingress :0.5.0	b3db186c3d72	binutils@2.44-3	no fix listed	1
martinhelmich/typo3 :12.4	c83a4f3fd7ae	binutils@2.40-2	no fix listed	1
mathesar/mathesar :0.12.0	091757cb01fe	binutils@2.40-2	no fix listed	1
mautic/mautic :7-apache	eb8cc73d97e1	binutils@2.40-2	no fix listed	1
mbround18/valheim :3.1.0	70bd4da591cd	binutils@2.38-4ubuntu2.7	2.38-4ubuntu2.10	1
mediagis/nominatim :3.7	c15e941485ef	binutils@2.34-6ubuntu1.3	2.34-6ubuntu1.11+esm1	1
mediagis/nominatim :4.2	d0eae7b51374	binutils@2.38-4ubuntu2.5	2.38-4ubuntu2.10	1
middlewareeng/middleware :0.3.1	747d880812f1	binutils@2.40-2	no fix listed	1
milvusdb/milvus :v2.2.13	a3a55e1c1497	binutils@2.34-6ubuntu1.3	2.34-6ubuntu1.11+esm1	1
mindsdb/mindsdb :latest	163011c09299	binutils@2.44-3	no fix listed	1
mintproject/graphql-engine :305c0dbeba1878eafe348f21fc300fbfc017d9dc	83aade2c1855	binutils@2.34-6ubuntu1.3	2.34-6ubuntu1.11+esm1	1
mintproject/model-catalog-fastapi :7dd88dc5bf1fe6a6d4703ea0a077afee45cb2561	02260d20a21f	binutils@2.40-2	no fix listed	1
moodlehq/moodle-php-apache :8.4-bookworm	922af5166835	binutils@2.40-2	no fix listed	1
moreillon/api-proxy :latest	d7d4a5463525	binutils@2.40-2	no fix listed	1
moreillon/food-manager :latest	e8fd856e593d	binutils@2.40-2	no fix listed	1
moreillon/group-manager :latest	3caa8f710ee0	binutils@2.40-2	no fix listed	1
moreillon/user-manager-mongoose :v5.0.1	d2ee0423b797	binutils@2.40-2	no fix listed	1
mshanley80/httpbin2022 :latest	5b189a70c0fb	binutils@2.34-6ubuntu1.4	2.34-6ubuntu1.11+esm1	1
muhammedgamal/fp23 :latest	74b4cd69b6fa	binutils@2.40-2	no fix listed	1
nousresearch/hermes-agent :v2026.8.27	e0df6adebddf	binutils@2.44-3	no fix listed	1
oled01/automx2 :2025.1.1	05d3e398e675	binutils@2.40-2	no fix listed	1
omecproject/mme-exporter :paging-latest	bcc5f19fd676	binutils@2.30-21ubuntu1~18.04.2	2.30-21ubuntu1~18.04.9+esm5	1
oneuptime/probe :release	6b2d98713711	binutils@2.40-2	no fix listed	1
oneuptime/runner :release	4accc516d800	binutils@2.44-3	no fix listed	1
opea/codegen-ui :1.0	2bee4eb66f3e	binutils@2.40-2	no fix listed	1
opea/codetrans-ui :1.0	3ef121f34610	binutils@2.40-2	no fix listed	1
opea/docsum-ui :1.0	7f854e9bffaf	binutils@2.40-2	no fix listed	1
openbas/caldera-server :5.1.0	a277796d9724	binutils@2.40-2	no fix listed	1
opendatacube/pipelines :wofs-1.22	5d810e8504b8	binutils@2.30-21ubuntu1~18.04	2.30-21ubuntu1~18.04.9+esm5	1
opendatacube/restcube :latest	91870111837c	binutils@2.30-21ubuntu1~18.04.1	2.30-21ubuntu1~18.04.9+esm5	1
opendatacube/wms :latest	1b90cdf68831	binutils@2.30-21ubuntu1~18.04.1	2.30-21ubuntu1~18.04.9+esm5	1
openebs/rawfile-localpv :v0.15.2	a39ef27ea28b	binutils@2.44-3	no fix listed	1
openelevation/open-elevation :latest	82fb21612e86	binutils@2.34-6ubuntu1.1	2.34-6ubuntu1.11+esm1	1
openproject/hocuspocus :release-338001b2	88dc1359dfb5	binutils@2.40-2	no fix listed	1
openthread/otbr :latest	f307f59f6432	binutils@2.30-21ubuntu1~18.04.9	2.30-21ubuntu1~18.04.9+esm5	1
openwhisk/ow-utils :1.0.0	c80dba0de3aa	binutils@2.30-21ubuntu1~18.04.4	2.30-21ubuntu1~18.04.9+esm5	1
phan2410/dummy-service :0.0.8	9c6ed6de26ca	binutils@2.40-2	no fix listed	1