Helm is a tool that streamlines installing and managing Kubernetes applications.`getHostByName` is a Helm template function introduced in Helm v3. The function is able to accept a hostname and return an IP address for that hostname. To get the IP address the function performs a DNS lookup. The DNS lookup happens when used with `helm install|upgrade|template` or when the Helm SDK is used to render a chart. Information passed into the chart can be disclosed to the DNS servers used to lookup the IP address. For example, a malicious chart could inject `getHostByName` into a chart in order to disclose values to a malicious DNS server. The issue has been fixed in Helm 3.11.1. Prior to using a chart with Helm verify the `getHostByName` function is not being used in a template to disclose any information you do not want passed to DNS servers.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Helm is a tool that streamlines installing and managing Kubernetes applications.`getHostByName` is a Helm
    template function introduced in Helm v3. The function is able to accept a hostname and return an IP
    address for that hostname. To get the IP address the function performs a DNS lookup. The DNS lookup
    happens when used with `helm install|upgrade|template` or when the Helm SDK is used to render a chart.
    Information passed into the chart can be disclosed to the DNS servers used to lookup the IP address. For
    example, a malicious chart could inject `getHostByName` into a chart in order to disclose values to a
    malicious DNS server. The issue has been fixed in Helm 3.11.1. Prior to using a chart with Helm verify the
    `getHostByName` function is not being used in a template to disclose any information you do not want
    passed to DNS servers. (CVE-2023-25165)

The remote SUSE Linux SLES15 / SLES_SAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2023:2100-1 advisory.

    Updated terraform-provider-helm to version 2.9.0:

      - CVE-2023-25165: Fixed getHostByName Function Information Disclosure by updating embedded helm package     (bsc#1208086).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 / openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2023:1752-1 advisory.

    Updated terraform-provider-helm to version 2.9.0:

      - CVE-2023-25165: Fixed getHostByName Function Information Disclosure in helm embedded in the package     (bsc#1208086).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:1571-1 advisory.

    Update to version 3.11.1 (bsc#1208084):

    - CVE-2023-25165: Fixed a information disclosure problem via getHostByName injection inside a chart to get     values to a malicious DNS server.

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of cert-manager / helm installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-25165 advisory.

  - Helm is a tool that streamlines installing and managing Kubernetes applications.`getHostByName` is a Helm     template function introduced in Helm v3. The function is able to accept a hostname and return an IP     address for that hostname. To get the IP address the function performs a DNS lookup. The DNS lookup     happens when used with `helm install|upgrade|template` or when the Helm SDK is used to render a chart.
    Information passed into the chart can be disclosed to the DNS servers used to lookup the IP address. For     example, a malicious chart could inject `getHostByName` into a chart in order to disclose values to a     malicious DNS server. The issue has been fixed in Helm 3.11.1. Prior to using a chart with Helm verify the     `getHostByName` function is not being used in a template to disclose any information you do not want     passed to DNS servers. (CVE-2023-25165)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2023:0064-1 advisory.

  - Helm is a tool that streamlines installing and managing Kubernetes applications.`getHostByName` is a Helm     template function introduced in Helm v3. The function is able to accept a hostname and return an IP     address for that hostname. To get the IP address the function performs a DNS lookup. The DNS lookup     happens when used with `helm install|upgrade|template` or when the Helm SDK is used to render a chart.
    Information passed into the chart can be disclosed to the DNS servers used to lookup the IP address. For     example, a malicious chart could inject `getHostByName` into a chart in order to disclose values to a     malicious DNS server. The issue has been fixed in Helm 3.11.1. Prior to using a chart with Helm verify the     `getHostByName` function is not being used in a template to disclose any information you do not want     passed to DNS servers. (CVE-2023-25165)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
417738	SCA: security update for helm.sh/helm/v3 (GHSA-pwcw-6f5g-gxf8)	Tenable Cloud Security	SCA Checks	medium
417738	SCA: security update for helm.sh/helm/v3 (GHSA-pwcw-6f5g-gxf8)	Tenable Self-Hosted Container Security	SCA Checks	medium
175362	SUSE SLES15 Security Update : terraform-provider-helm (SUSE-SU-2023:2100-1)	Nessus	SuSE Local Security Checks	medium
173882	SUSE SLES15 / openSUSE 15 Security Update : terraform-provider-helm (SUSE-SU-2023:1752-1)	Nessus	SuSE Local Security Checks	medium
173407	SUSE SLED15: helm / helm-bash-completion / helm-fish-completion / etc (SUSE-SU-2023:1571-1)	Nessus	SuSE Local Security Checks	medium
172792	CBL Mariner 2.0 Security Update: cert-manager / helm (CVE-2023-25165)	Nessus	MarinerOS Local Security Checks	medium
172176	openSUSE 15 Security Update : trivy (openSUSE-SU-2023:0064-1)	Nessus	SuSE Local Security Checks	medium

Detections

Analytics

CVE-2023-25165

medium

Tenable Plugins

medium

medium

medium

medium

medium

medium

medium