Helm Allows A Specially Crafted Chart Archive To Cause Out Of Memory Termination

🗓️ 10 Apr 2025 13:48:05Reported by GitHub Advisory DatabaseType

Helm's crafted chart archive can cause out of memory termination; fixed in version 3.17.3.

Reporter	Title	Published	Views	Family All 84
IBM Security Bulletins	Security Bulletin: There are multiple vulnerabilities that can affect IBM Fusion	11 Sep 202518:18	–	ibm
IBM Security Bulletins	Security Bulletin: Due to the use of helm, IBM Kubecost Self Hosted is affected by stack overflow and memory exhaustion	6 Nov 202514:10	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Data is vulnerable to helm ( CVE-2025-32386, CVE-2025-32387 )	30 Sep 202513:14	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Instana Observability is affected by multiple vulnerabilities within Instana Agent container image	20 May 202514:32	–	ibm
AlpineLinux	CVE-2025-32386	9 Apr 202523:15	–	alpinelinux
Tenable Nessus	Azure Linux 3.0 Security Update: helm (CVE-2025-32386)	11 Jul 202500:00	–	nessus
Tenable Nessus	CBL Mariner 2.0 Security Update: cert-manager / helm (CVE-2025-32386)	11 Jul 202500:00	–	nessus
Tenable Nessus	SUSE SLES15 / openSUSE 15 Security Update : helm-mirror (SUSE-SU-2025:01830-1)	7 Jun 202500:00	–	nessus
Tenable Nessus	SUSE SLES15 Security Update : helm-mirror (SUSE-SU-2025:01830-2)	9 Jul 202500:00	–	nessus
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2025-32386	2 Sep 202500:00	–	nessus

Vulners

Node

helm v3Range<3.17.3go

Source	Link
github	www.github.com/helm/helm/security/advisories/GHSA-4hfp-h4cw-hj8p
nvd	www.nvd.nist.gov/vuln/detail/CVE-2025-32386
github	www.github.com/helm/helm/commit/d8ca55fc669645c10c0681d49723f4bb8c0b1ce7
github	www.github.com/advisories/GHSA-4hfp-h4cw-hj8p

10 Apr 2025 13:48Current

6.8Medium risk

Vulners AI Score6.8

CVSS 3.16.5

EPSS0.00022

SSVC