Lucene search
Veracode Vulnerability DatabaseVERACODE:39235HistoryFeb 12, 2023 - 2:31 p.m.
Information Disclosure
2023-02-1214:31:12
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
12
github
helm
vulnerability
information disclosure
dns lookup
ip addresses
malicious dns server
gethostbyname
software
EPSS
0.001
Percentile
25.5%
github.com/helm/helm is vulnerable to Information Disclosure. The vulnerability is due to the DNS lookup chart that can disclose IP addresses to a malicious DNS server, which are used to lookup IP addresses when used with the helm install|upgrade|template command via the vulnerable getHostByName function.
Related
redhatcve
redhatcve
CVE-2023-25165
2023-02-09 04:56:06
gitlab
gitlab
Exposure of Sensitive Information to an Unauthorized Actor
2023-02-08 00:00:00
alpinelinux
alpinelinux
CVE-2023-25165
2023-02-08 20:15:00
prion
prion
Hardcoded credentials
2023-02-08 20:15:00
osv
osv
BIT-helm-2023-25165
2024-03-06 10:53:11
CGA-gpj7-899c-2322
2024-06-06 12:27:30
cilium-cli-0.12.13-1.1 on GA media
2024-06-15 00:00:00
cve
cve
CVE-2023-25165
2023-02-08 20:15:24
cvelist
cvelist
CVE-2023-25165 getHostByName Function Information Disclosure
2023-02-08 19:07:14
nessus
nessus
openSUSE 15 Security Update : trivy (openSUSE-SU-2023:0064-1)
2023-03-07 00:00:00
SUSE SLES15 Security Update : terraform-provider-helm (SUSE-SU-2023:2100-1)
2023-05-10 00:00:00
cbl_mariner
cbl_mariner
CVE-2023-25165 affecting package cert-manager for versions less than 1.7.3-8
2023-04-12 21:37:28
CVE-2023-25165 affecting package helm 3.4.1-15
2023-03-16 03:40:02
CVE-2023-25165 affecting package helm for versions less than 3.10.3-3
2023-03-09 00:24:20
wolfi
wolfi
CVE-2023-25165 vulnerabilities
2024-10-01 21:13:23
cgr
cgr
CVE-2023-25165 vulnerabilities
2024-05-19 03:07:16
openvas
openvas
openSUSE: Security Advisory for trivy (openSUSE-SU-2023:0064-1)
2024-03-04 00:00:00
nvd
nvd
CVE-2023-25165
2023-02-08 20:15:24
github
github
Helm vulnerable to information disclosure via getHostByName Function
2023-02-08 22:36:51
redhat
redhat
