Lucene search
Veracode Vulnerability DatabaseVERACODE:38509HistoryDec 16, 2022 - 3:53 a.m.
Denial Of Service (DoS)
2022-12-1603:53:49
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
10
dos
vulnerability
jsonschema.go
0.001 Low
EPSS
Percentile
37.9%
helm.sh/helm/v3 is vulnerable to denial of service. The vulnerability exists because the ValidateAgainstSingleSchema function of jsonschema.go does not properly handle schema validation, allowing an attacker to cause an application crash through null pointer dereference by providing a malicious schema file.
| CPE | Name | Operator | Version |
|---|---|---|---|
| helm.sh/helm/v3 | le | v3.10.2 | |
| helm.sh/helm/v3 | le | v3.10.2 |
Related
gitlab
gitlab
Helm vulnerable to denial of service through schema file
2022-12-14 00:00:00
cgr
cgr
CVE-2022-23526 vulnerabilities
2024-05-19 03:07:16
alpinelinux
alpinelinux
CVE-2022-23526
2022-12-15 19:15:00
osv
osv
Denial of service via schema file in helm.sh/helm/v3
2022-12-22 22:30:45
BIT-helm-2022-23526
2024-03-06 10:53:44
CVE-2022-23526
2022-12-15 19:15:17
cve
cve
CVE-2022-23526
2022-12-15 19:15:17
cbl_mariner
cbl_mariner
CVE-2022-23526 affecting package helm for versions less than 3.9.4-4
2023-01-03 20:57:19
CVE-2022-23526 affecting package helm 3.4.1-13
2023-01-12 20:54:55
github
github
Helm vulnerable to denial of service through schema file
2022-12-14 21:39:06
redhatcve
redhatcve
CVE-2022-23526
2022-12-16 09:36:42
prion
prion
Null pointer dereference
2022-12-15 19:15:00
nvd
nvd
CVE-2022-23526
2022-12-15 19:15:17
cvelist
cvelist
CVE-2022-23526 Helm contains Denial of service through schema file
2022-12-15 00:43:40
nessus
nessus
redhat
redhat
fedora
fedora
[SECURITY] Fedora 38 Update: golang-helm-3-3.11.1-1.fc38
2023-02-23 00:45:46
[SECURITY] Fedora 36 Update: golang-oras-1-1.2.1-1.fc36
2023-02-23 01:26:38
[SECURITY] Fedora 37 Update: golang-oras-2-2.0.0~rc.4-1.fc37
2023-02-23 02:21:58
openvas
openvas
Fedora: Security Advisory for golang-oras-2 (FEDORA-2023-4e2068ba5d)
2023-02-23 00:00:00
Fedora: Security Advisory for golang-oras (FEDORA-2023-c9b2182a4e)
2023-02-24 00:00:00
ibm
ibm
Security Bulletin: Multiple Vulnerabilities in CloudPak for Watson AIOPs
2023-03-30 15:19:31