openSUSE: Security Advisory for trivy (openSUSE-SU-2023:0064-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.14.0 bug fix and security update

Red Hat OpenShift Container Platform release 4.14.0 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.14. Red Hat Product Security has rated this update as having a...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.13.0 security update

Red Hat OpenShift Container Platform release 4.13.0 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.13. Red Hat Product Security has rated this update as having a...

SUSE SLES15 Security Update : terraform-provider-helm (SUSE-SU-2023:2100-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2023:2100-1 advisory. Updated terraform-provider-helm to version 2.9.0: - CVE-2023-25165: Fixed getHostByName Function Information Disclosure by updating embedded...

SUSE-SU-2023:2100-1 Security update for terraform-provider-helm

This update for terraform-provider-helm fixes the following issues: Updated terraform-provider-helm to version 2.9.0: - CVE-2023-25165: Fixed getHostByName Function Information Disclosure by updating embedded helm package bsc1208086...

CVE-2023-25165 affecting package cert-manager for versions less than 1.7.3-8

CVE-2023-25165 affecting package cert-manager for versions less than 1.7.3-8. An upgraded version of the package is available that resolves this issue...

SUSE-SU-2023:1752-1 Security update for terraform-provider-helm

This update for terraform-provider-helm fixes the following issues: Updated terraform-provider-helm to version 2.9.0: - CVE-2023-25165: Fixed getHostByName Function Information Disclosure in helm embedded in the package bsc1208086...

SUSE SLED15: helm / helm-bash-completion / helm-fish-completion / etc (SUSE-SU-2023:1571-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:1571-1 advisory. Update to version 3.11.1 bsc1208084: - CVE-2023-25165: Fixed a information disclosure problem via...

SUSE-SU-2023:1571-1 Security update for helm

This update for helm fixes the following issues: Update to version 3.11.1 bsc1208084: - CVE-2023-25165: Fixed a information disclosure problem via getHostByName injection inside a chart to get values to a malicious DNS server...

CBL Mariner 2.0 Security Update: cert-manager / helm (CVE-2023-25165)

The version of cert-manager / helm installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-25165 advisory. - Helm is a tool that streamlines installing and managing Kubernetes applications.getHostByName i...

CVE-2023-25165 affecting package helm 3.4.1-15

CVE-2023-25165 affecting package helm 3.4.1-15. A patched version of the package is available...

openSUSE 15 Security Update : trivy (openSUSE-SU-2023:0064-1)

The remote openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2023:0064-1 advisory. - Helm is a tool that streamlines installing and managing Kubernetes applications.getHostByName is a Helm template function introduced in Helm v3. The...

Security update for trivy (moderate)

openSUSE Security Update: Security update for trivy Announcement ID: openSUSE-SU-2023:0064-1 Rating: moderate References: 1208091 Cross-References: CVE-2023-25165 CVSS scores: CVE-2023-25165 NVD : 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N CVE-2023-25165 SUSE: 4.3...

CVE-2023-25165

Helm is a tool that streamlines installing and managing Kubernetes applications.getHostByName is a Helm template function introduced in Helm v3. The function is able to accept a hostname and return an IP address for that hostname. To get the IP address the function performs a DNS lookup. The DNS...

CVE-2023-25165 vulnerabilities

Vulnerabilities for packages: helm...

CVE-2023-25165 vulnerabilities

Vulnerabilities for packages: helm...

CVE-2023-25165

The CVE-2023-25165 entry affects Helm. It concerns the getHostByName template function (introduced in Helm 3) which performs a DNS lookup to resolve a hostname to an IP address, potentially disclosing chart input values to DNS servers when used with helm install/upgrade/template or Helm SDK rende...