StackRadar

CVE-2025-3198

Medium

Advisory

Published 4 Apr 2025In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
0.003
21st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
350
of 17,787 indexed, latest versions
Container images
343
deployed by those charts
Fix available
2 of 2
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 350 of 17,787 indexed charts deploy, on 343 images.

Affected packageAffected versionsFixed inImages
binutilsdeb2.30-21ubuntu1~18.04, 2.30-21ubuntu1~18.04.1, 2.30-21ubuntu1~18.04.2, 2.30-21ubuntu1~18.04.3+29 more2.30-21ubuntu1~18.04.9+esm5, 2.34-6ubuntu1.11+esm1, 2.38-4ubuntu2.10, 2.42-4ubuntu2.6340
binutilsapk2.43.1-r2, 2.44-r02.43.1-r3, 2.44-r23
OSV records
ALPINE-CVE-2025-3198DEBIAN-CVE-2025-3198UBUNTU-CVE-2025-3198
Also known as
USN-7899-1

Charts affected

350 by stars
ChartLatestAffected imagesRadar Score

Container images carrying it

343 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
sslhep/servicex-did-finder-cernopendata:v1.8.52cb88ceab5bb
binutils@2.44-3
no fix listed
1
sslhep/servicex-did-finder-xrootd:v1.8.5c284442b44e3
binutils@2.44-3
no fix listed
1
statcan/ckan:2.93921305425b8
binutils@2.34-6ubuntu1.1
2.34-6ubuntu1.11+esm1
1
streamnative/apache-pulsar-grafana-dashboard-k8s:0.0.1611bceacec8fb
binutils@2.34-6ubuntu1.1
2.34-6ubuntu1.11+esm1
1
substratusai/verba:v0.4.0-baseURL261695be635eb
binutils@2.40-2
no fix listed
1
supabase/studio:20241021-9f9b08326d8070c55e9
binutils@2.40-2
no fix listed
1
supabase/studio:2026.08.03-sha-022b374606aca9fdaa7
binutils@2.40-2
no fix listed
1
supabase/studio:latest94a2a9d2906e
binutils@2.40-2
no fix listed
1
svtechnmaa/svtech_nagvis:v1.2.118394b08e6c3
binutils@2.40-2
no fix listed
1
svtechnmaa/svtech_rundeck:v1.2.26e368ace0977
binutils@2.34-6ubuntu1.9
2.34-6ubuntu1.11+esm1
1
sysnet4admin/colosseum-cms:loge74b43c7f492
binutils@2.40-2
no fix listed
1
sysnet4admin/colosseum-prm:log5802bfcd7fed
binutils@2.40-2
no fix listed
1
teknas09/bird-pod:latest12a1fa85c4aa
binutils@2.40-2
no fix listed
1
theradius/loggia:0.463ba348546ec
binutils@2.40-2
no fix listed
1
thmmniii/fbs-core:v1.27.15438517d9fc2
binutils@2.38-3ubuntu1
2.38-4ubuntu2.10
1
thongngo3301/stakefish:latesta341af5976e3
binutils@2.40-2
no fix listed
1
tock/gen-ai-orchestrator-server:25.10.7abf7880e0449
binutils@2.44-3
no fix listed
1
treskon/portrait-web-setup:DEV-latesta475d80e4ecf
binutils@2.40-2
no fix listed
1
trinodb/trino:405ee80ab5eeab2
binutils@2.38-4ubuntu2.1
2.38-4ubuntu2.10
1
unitycatalog/unitycatalog-ui:main-aadc6fc3a688197b218
binutils@2.40-2
no fix listed
1
vinanrra/7dtd-server:v0.4.4f9534490bd2b
binutils@2.30-21ubuntu1~18.04.8
2.30-21ubuntu1~18.04.9+esm5
1
vlebediantsev/notes-admin-front:latest007c6670ff48
binutils@2.40-2
no fix listed
1
vlebediantsev/notes-project-front:latest945675fd2636
binutils@2.40-2
no fix listed
1
vlebediantsev/registration-ms-front-app-host:latest54f69d116c50
binutils@2.40-2
no fix listed
1
wallarm/aih-scanner:2.7.11f1cb26db1f5b
binutils@2.44-3
no fix listed
1
wistefan/mvf:lateste0887302b2d8
binutils@2.38-4ubuntu2
2.38-4ubuntu2.10
1
xeladock/mysql_dns:latest4baf531453f1
binutils@2.38-3ubuntu1
2.38-4ubuntu2.10
1
xeotek/kadeck:4.2.94c6b04d9ce55
binutils@2.34-6ubuntu1.4
2.34-6ubuntu1.11+esm1
1
xom4ekp2p/infini-route-attestators-public-mainnet-attester:latestd0e0aa238b02
binutils@2.40-2
no fix listed
1
xom4ekp2p/infini-route-attestators-public-mainnet-avs-webapi:latest2745b5fd8785
binutils@2.40-2
no fix listed
1
yetiplatform/yeti:2.9.09bcbe2650a14
binutils@2.44-3
no fix listed
1
yetiplatform/yeti:latest9c3006cedcca
binutils@2.44-3
no fix listed
1
gcr.io/flink-operator/deployer:webhook-cert809338a69bd5
binutils@2.30-21ubuntu1~18.04.2
2.30-21ubuntu1~18.04.9+esm5
1
gcr.io/ml-pipeline/metadata-writer:2.3.09bcfd2abc361
binutils@2.40-2
no fix listed
1
ghcr.io/astriaorg/astrotrek:0.1.05889bea38e56
binutils@2.40-2
no fix listed
1
ghcr.io/avistotelecom/docker-wazuh-agent:4.12.08766ba08bf1a
binutils@2.40-2
no fix listed
1
ghcr.io/brittonhayes/arma-reforger:latest6fde1edc0983
binutils@2.34-6ubuntu1.4
2.34-6ubuntu1.11+esm1
1
ghcr.io/buanet/iobroker:v9.1.2ca7dc7362968
binutils@2.40-2
no fix listed
1
ghcr.io/camptocamp/tetragon-policy-builder:master0e99f12bb040
binutils@2.40-2
no fix listed
1
ghcr.io/camunda-community-hub/zeebe-simple-monitor:2.6.2d9d796a1b846
binutils@2.38-4ubuntu2.4
2.38-4ubuntu2.10
1
ghcr.io/cjmalloy/jasper:v1.3.282726a947bb65b
binutils@2.40-2
no fix listed
1
ghcr.io/cohdi/composable-dra-driver:v0.2.28c05f7366981
binutils@2.44-3
no fix listed
1
ghcr.io/cosmo-tech/cosmotech-copilot-api:latesta2be95de450c
binutils@2.44-3
no fix listed
1
ghcr.io/cosmo-workspace/dev-code-server:v0.0.316fda01ae58a
binutils@2.40-2
no fix listed
1
ghcr.io/dask/dask-kubernetes-operator:2026.3.03225d2bc6b3c
binutils@2.44-3
no fix listed
1
ghcr.io/developmentseed/titiler:0.22.48ac53eb38393
binutils@2.40-2
no fix listed
1
ghcr.io/dfir-iris/iriswebapp_app:v2.4.26e59ebde55709
binutils@2.44-3
no fix listed
1
ghcr.io/drewburr-labs/mum-discord-bot:3.1.26e82914e1051
binutils@2.40-2
no fix listed
1
ghcr.io/esomore/bitcoin-prometheus-exporter:masterded173632986
binutils@2.43.1-r2
2.43.1-r3
1
ghcr.io/esphome/esphome:latest000c5ee5ee96
binutils@2.44-3
no fix listed
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.