CVE-2025-52881
HighAdvisory
Published 5 Nov 2025In the index since 5 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 8.2
- base score, highest
- EPSS
- 0.006
- 45th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 427
- of 17,781 indexed, latest versions
- Container images
- 344
- deployed by those charts
- Fix available
- 9 of 10
- affected packages
Red Hat Security Advisory: container-tools:rhel8 security update
Carried by container images the latest versions of 427 of 17,781 indexed charts deploy, on 344 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| containers-commonrpm | 2:1-64.module+el8.8.0+18571+eed59fc4 | 2:1-82.module+el8.10.0+23820+ae6deecc | 1 |
| criurpm | 3.15-4.module+el8.8.0+19044+f9982fd8 | 0:3.18-5.module+el8.10.0+23820+ae6deecc | 1 |
| fuse-overlayfsrpm | 1.11-1.module+el8.8.0+18634+9a268292 | 0:1.13-1.module+el8.10.0+23820+ae6deecc | 1 |
| libslirprpm | 4.4.0-1.module+el8.8.0+18060+3f21f2cc | 0:4.4.0-2.module+el8.10.0+23820+ae6deecc | 1 |
| runcrpm | 1:1.1.4-1.module+el8.8.0+18060+3f21f2cc | 4:1.2.9-2.module+el8.10.0+23820+ae6deecc | 1 |
| skopeorpm | 2:1.11.2-0.2.module+el8.8.0+18251+ad5b274c | 2:1.14.5-5.module+el8.10.0+23820+ae6deecc | 1 |
| slirp4netnsrpm | 1.2.0-2.module+el8.8.0+18060+3f21f2cc | 0:1.2.3-1.module+el8.10.0+23820+ae6deecc | 1 |
| runcdeb | 1.1.5+ds1-1+deb12u1 | no fix listed | 9 |
| github.com/ | v0.0.0-20161107232042-8779fa57eb4a, v0.0.0-20230719051532-82f18fe0e44a, v0.1.1, v1.0.0-rc2.0.20190611121236-6cc515888830+33 more | 1.2.8 | 277 |
| github.com/ | v1.3.3, v1.8.0, v1.8.2, v1.10.0+5 more | 1.13.0 | 122 |
- OSV records
- DEBIAN-CVE-2025-52881GHSA-cgrx-mc8f-2prmRHSA-2025:23543
- Also known as
- GO-2025-4098
Charts affected
427 by stars
Container images carrying it
344 by charts deploying them
A fixed version is listed for 9 of the 10 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| public.ecr.aws/ | 8aa9ea5f67b8 | github.com/ | 1.2.8 | 1 |
| public.ecr.aws/ | f68901a54664 | github.com/ | 1.2.8 | 1 |
| public.ecr.aws/ | e7e1db003e6a | github.com/ | 1.13.0 | 1 |
| public.ecr.aws/ | e97e0e7a2088 | github.com/ | 1.13.0 | 1 |
| quay.io/ | 96fac2482898 | github.com/ | 1.2.8 | 1 |
| quay.io/ | d6fd2a9e3273 | github.com/ | 1.2.8 | 1 |
| quay.io/ | 13aaae779248 | containers-common criu fuse-overlayfs libslirp runc skopeo slirp4netns github.com/ github.com/ | 2:1-82.module+el8.10.0+23820+ae6deecc 0:3.18-5.module+el8.10.0+23820+ae6deecc 0:1.13-1.module+el8.10.0+23820+ae6deecc 0:4.4.0-2.module+el8.10.0+23820+ae6deecc 4:1.2.9-2.module+el8.10.0+23820+ae6deecc 2:1.14.5-5.module+el8.10.0+23820+ae6deecc 0:1.2.3-1.module+el8.10.0+23820+ae6deecc 1.2.8 1.13.0 | 1 |
| quay.io/ | a3b9a07648b6 | github.com/ | 1.2.8 | 1 |
| quay.io/ | 734808044936 | github.com/ | 1.13.0 | 1 |
| quay.io/ | 63baf86a49ac | github.com/ github.com/ | 1.2.8 1.13.0 | 1 |
| quay.io/ | 9663f06adcb1 | github.com/ | 1.2.8 | 1 |
| quay.io/ | ec6ab507c5da | github.com/ | 1.2.8 | 1 |
| quay.io/ | 6722d5041b47 | github.com/ | 1.2.8 | 1 |
| quay.io/ | 0bbe8b451fa3 | github.com/ | 1.2.8 | 1 |
| quay.io/ | c241c971aef8 | github.com/ | 1.2.8 | 1 |
| quay.io/ | 1b6002156f56 | github.com/ | 1.2.8 | 1 |
| quay.io/ | 4cb2b9019f17 | github.com/ | 1.13.0 | 1 |
| quay.io/ | 8a57af80a4c7 | github.com/ | 1.13.0 | 1 |
| quay.io/ | 7b4202c25b67 | github.com/ | 1.2.8 | 1 |
| quay.io/ | 0b26358f5793 | github.com/ | 1.13.0 | 1 |
| quay.io/ | 6ba82beff18e | github.com/ | 1.2.8 | 1 |
| quay.io/ | 4853591bd1d2 | github.com/ github.com/ | 1.2.8 1.13.0 | 1 |
| registry.gitlab.com/ | 36b19b72120e | github.com/ | 1.2.8 | 1 |
| registry.gitlab.com/ | 9b9d1ed86b6a | github.com/ | 1.13.0 | 1 |
| registry.k8s.io/ | 4bb8350a5a62 | github.com/ | 1.13.0 | 1 |
| registry.k8s.io/ | f5349a8ae3f3 | github.com/ github.com/ | 1.2.8 1.13.0 | 1 |
| registry.k8s.io/ | 15be4666c530 | github.com/ | 1.2.8 | 1 |
| registry.k8s.io/ | 42b3f0e5d084 | github.com/ | 1.2.8 | 1 |
| registry.k8s.io/ | 54f7fe2c6c5a | github.com/ | 1.2.8 | 1 |
| registry.k8s.io/ | 5516d103a9c2 | github.com/ | 1.2.8 | 1 |
| registry.k8s.io/ | 744ae2afd433 | github.com/ | 1.2.8 | 1 |
| registry.k8s.io/ | 7612338342a1 | github.com/ | 1.2.8 | 1 |
| registry.k8s.io/ | d1707ca76d3b | github.com/ | 1.2.8 | 1 |
| registry.k8s.io/ | d56f135b6462 | github.com/ | 1.2.8 | 1 |
| registry.k8s.io/ | e24f39d3eed6 | github.com/ | 1.2.8 | 1 |
| registry.k8s.io/ | e6b8de175acd | github.com/ | 1.2.8 | 1 |
| registry.k8s.io/ | f6902791fb9a | github.com/ | 1.13.0 | 1 |
| registry.k8s.io/ | 66ce7d460e53 | github.com/ | 1.13.0 | 1 |
| registry.k8s.io/ | 0684e23172d9 | github.com/ | 1.13.0 | 1 |
| registry.k8s.io/ | 3ae5620a33bb | github.com/ | 1.13.0 | 1 |
| registry.k8s.io/ | 46cf7475c8da | github.com/ | 1.13.0 | 1 |
| registry.k8s.io/ | 9330c53feca7 | github.com/ | 1.13.0 | 1 |
| registry.k8s.io/ | 19ebca8b3804 | github.com/ | 1.2.8 | 1 |
| registry.k8s.io/ | ce5b5ccd5eb0 | github.com/ | 1.13.0 | 1 |