CVE-2023-25165
MediumAdvisory
Published 8 Feb 2023In the index since 6 Sept 2026
- Severity
- Medium
- worst across findings
- CVSS
- 4.3
- base score, highest
- EPSS
- 0.008
- 54th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 102
- of 17,781 indexed, latest versions
- Container images
- 95
- deployed by those charts
- Fix available
- 1 of 1
- affected package
Helm vulnerable to information disclosure via getHostByName Function
Carried by container images the latest versions of 102 of 17,781 indexed charts deploy, on 95 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| helm.sh/ | v0.0.0-20221012195806-9f88ccb6aee4, v0.0.0-20221214143859-835b7334cfe2, v0.0.0-20230113165805-472c5736ab01, v0.0.0-20230308205603-912ebc1cd10d+47 more | 3.11.1 | 95 |
- OSV records
- GHSA-pwcw-6f5g-gxf8GO-2023-1547
- Also known as
- BIT-helm-2023-25165
Charts affected
102 by stars
Container images carrying it
95 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| layer5/ | ebd6a8faf21f | helm.sh/ | 3.11.1 | 1 |
| mavrick1/ | 45ca0429a1d4 | helm.sh/ | 3.11.1 | 1 |
| murtazashah46/ | 4d11726cf803 | helm.sh/ | 3.11.1 | 1 |
| newrelic/ | 1a448492b55a | helm.sh/ | 3.11.1 | 1 |
| phntom/ | 9242b4df9e65 | helm.sh/ | 3.11.1 | 1 |
| pnnlmiscscripts/ | 155131891741 | helm.sh/ | 3.11.1 | 1 |
| pnnlmiscscripts/ | 8af4b7551d40 | helm.sh/ | 3.11.1 | 1 |
| portainer/ | 3e61aaee1341 | helm.sh/ | 3.11.1 | 1 |
| sirrend/ | 699e79e3d4e2 | helm.sh/ | 3.11.1 | 1 |
| sstarcher/ | 11769d01ba35 | helm.sh/ | 3.11.1 | 1 |
| veecode/ | c69fd286b489 | helm.sh/ | 3.11.1 | 1 |
| ghcr.io/ | 68e17a8aaa40 | helm.sh/ | 3.11.1 | 1 |
| ghcr.io/ | 9ab9a675c405 | helm.sh/ | 3.11.1 | 1 |
| ghcr.io/ | a058034ca006 | helm.sh/ | 3.11.1 | 1 |
| ghcr.io/ | 700bb42ac21d | helm.sh/ | 3.11.1 | 1 |
| ghcr.io/ | f059af4de8ed | helm.sh/ | 3.11.1 | 1 |
| ghcr.io/ | 00984ba0f0eb | helm.sh/ | 3.11.1 | 1 |
| ghcr.io/ | c298183a5208 | helm.sh/ | 3.11.1 | 1 |
| ghcr.io/ | c8882543f693 | helm.sh/ | 3.11.1 | 1 |
| ghcr.io/ | f52e66eff50b | helm.sh/ | 3.11.1 | 1 |
| ghcr.io/ | b5ade0d9cc6b | helm.sh/ | 3.11.1 | 1 |
| ghcr.io/ | 5c109914ff73 | helm.sh/ | 3.11.1 | 1 |
| ghcr.io/ | 5dfa86b6451f | helm.sh/ | 3.11.1 | 1 |
| ghcr.io/ | 90097a08b87c | helm.sh/ | 3.11.1 | 1 |
| ghcr.io/ | b69bcdaa8492 | helm.sh/ | 3.11.1 | 1 |
| ghcr.io/ | 84f70425f4dd | helm.sh/ | 3.11.1 | 1 |
| ghcr.io/ | 45e744fc623f | helm.sh/ | 3.11.1 | 1 |
| ghcr.io/ | 0fae829caf29 | helm.sh/ | 3.11.1 | 1 |
| ghcr.io/ | 62370545ba3d | helm.sh/ | 3.11.1 | 1 |
| quay.io/ | 95b5cf7ba6fe | helm.sh/ | 3.11.1 | 1 |
| quay.io/ | a36ab0c0860c | helm.sh/ | 3.11.1 | 1 |
| quay.io/ | acaf37352569 | helm.sh/ | 3.11.1 | 1 |
| quay.io/ | 14b482c1f1b8 | helm.sh/ | 3.11.1 | 1 |
| quay.io/ | 3590af73f65a | helm.sh/ | 3.11.1 | 1 |
| quay.io/ | b741efae8d31 | helm.sh/ | 3.11.1 | 1 |
| quay.io/ | 595c548dee6f | helm.sh/ | 3.11.1 | 1 |
| quay.io/ | 81b2d775edad | helm.sh/ | 3.11.1 | 1 |
| quay.io/ | ebba936046ab | helm.sh/ | 3.11.1 | 1 |
| quay.io/ | 3e010e1188f1 | helm.sh/ | 3.11.1 | 1 |
| quay.io/ | 0bbe8b451fa3 | helm.sh/ | 3.11.1 | 1 |
| quay.io/ | 6ba82beff18e | helm.sh/ | 3.11.1 | 1 |
| quay.io/ | 5b62aaade3c9 | helm.sh/ | 3.11.1 | 1 |
| quay.io/ | 9a6c84560d44 | helm.sh/ | 3.11.1 | 1 |
| registry.gitlab.com/ | 80ef8ceffc92 | helm.sh/ | 3.11.1 | 1 |
| registry.gitlab.com/ | 36b19b72120e | helm.sh/ | 3.11.1 | 1 |