Lucene search

Veracode Vulnerability DatabaseVERACODE:45596

HistoryFeb 22, 2024 - 7:52 a.m.

Denial Of Service (DoS)

2024-02-2207:52:51

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

helm

vulnerability

denial of service

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

Confidence

High

EPSS

Percentile

9.0%

JSON

Helm is vulnerable to Denial Of Service (DoS). The vulnerability is due to missing checks during the parsing of index and plugin YAML files leading to a crash when either an index.yaml file or a plugin.yaml file are missing metadata.

References

github.com/helm/helm/commit/bb4cc9125503a923afb7988f3eb478722a8580af

github.com/helm/helm/security/advisories/GHSA-r53h-jv2g-vpx6

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

Confidence

High

EPSS

Percentile

9.0%

JSON

Related for VERACODE:45596