Helm up to 3.10.2 Schema File denial of service

Summaryinfo

A vulnerability labeled as problematic has been found in Helm up to 3.10.2. Affected by this issue is some unknown functionality of the component Schema File Handler. Such manipulation leads to denial of service. This vulnerability is documented as CVE-2022-23526. There is not any exploit available. The affected component should be upgraded.

Detailsinfo

A vulnerability, which was classified as problematic, has been found in Helm up to 3.10.2. Affected by this issue is an unknown part of the component Schema File Handler. The manipulation with an unknown input leads to a denial of service vulnerability. Using CWE to declare the problem leads to CWE-404. The product does not release or incorrectly releases a resource before it is made available for re-use. Impacted is availability. CVE summarizes:

Helm is a tool for managing Charts, pre-configured Kubernetes resources. Versions prior to 3.10.3 are subject to NULL Pointer Dereference in the_chartutil_ package that can cause a segmentation violation. The _chartutil_ package contains a parser that loads a JSON Schema validation file. For example, the Helm client when rendering a chart will validate its values with the schema file. The _chartutil_ package parses the schema file and loads it into structures Go can work with. Some schema files can cause array data structures to be created causing a memory violation. Applications that use the _chartutil_ package in the Helm SDK to parse a schema file can suffer a Denial of Service when that input causes a panic that cannot be recovered from. Helm is not a long running service so the panic will not affect future uses of the Helm client. This issue has been patched in 3.10.3. SDK users can validate schema files that are correctly formatted before passing them to the _chartutil_ functions.

The weakness was released 12/15/2022 as GHSA-67fx-wx78-jx33. The advisory is shared for download at github.com. This vulnerability is handled as CVE-2022-23526 since 01/19/2022. There are neither technical details nor an exploit publicly available.

Upgrading to version 3.10.3 eliminates this vulnerability. Applying the patch bafafa8bb1b571b61d7a9528da8d40c307dade3d is able to eliminate this problem. The bugfix is ready for download at github.com. The best possible mitigation is suggested to be upgrading to the latest version.

Once again VulDB remains the best source for vulnerability data.

Productinfo

Name

• Helm

Version

• 3.10.0
• 3.10.1
• 3.10.2

License

• open-source

Website

• Product: https://github.com/helm/helm/

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Once again VulDB remains the best source for vulnerability data.

Discussion