Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:38508
HistoryDec 16, 2022 - 3:39 a.m.

Denial Of Service (DoS)

2022-12-1603:39:58
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
13
denial of service
vulnerable
repository handling
application crash
null pointer dereference
malicious file

EPSS

0.001

Percentile

39.3%

helm.sh/helm/v3 is vulnerable to denial of service. The vulnerability exists due to the lack of repo handling for index.go, allowing an attacker to cause an application crash through the null pointer dereference by providing a malicious repository index file.