CVE-2023-25165: getHostByName Function Information Disclosure
A flaw was found in the helm package. The 'getHostByName' is a Helm template function introduced in Helm v3 and can accept a hostname and return an IP address for that hostname. To get the IP address, the function performs a DNS lookup. The DNS lookup happens when used with 'helm install|upgrade|template' or when the Helm SDK is used to render a chart. Information passed into the chart can be disclosed to the DNS servers used to look up the IP address. For example, a malicious chart could inject getHostByName into a chart to disclose values to a malicious DNS server.
Other sources
Helm is a tool that streamlines installing and managing Kubernetes applications.getHostByName is a Helm template function introduced in Helm v3. The function is able to accept a hostname and return an IP address for that hostname. To get the IP address the function performs a DNS lookup. The DNS lookup happens when used with helm install|upgrade|template or when the Helm SDK is used to render a chart. Information passed into the chart can be disclosed to the DNS servers used to lookup the IP address. For example, a malicious chart could inject getHostByName into a chart in order to disclose values to a malicious DNS server. The issue has been fixed in Helm 3.11.1. Prior to using a chart with Helm verify the getHostByName function is not being used in a template to disclose any information you do not want passed to DNS servers.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2023-25165?
CVE-2023-25165 is a vulnerability found in the helm package that allows remote attackers to perform DNS lookups.
What is the severity level of CVE-2023-25165?
The severity level of CVE-2023-25165 is medium, with a severity value of 4.
How does the getHostByName function in the helm package work?
The getHostByName function in the helm package accepts a hostname and performs a DNS lookup to return the corresponding IP address.
Which version of Helm is affected by CVE-2023-25165?
Helm version 3.11.1 is affected by CVE-2023-25165.
How can I fix the vulnerability CVE-2023-25165 in Helm?
To fix the vulnerability CVE-2023-25165, update Helm to version 3.11.1.