SUSE update for helm



Risk Medium
Patch available YES
Number of vulnerabilities 5
CVE-ID CVE-2021-21272
CVE-2022-1996
CVE-2022-23524
CVE-2022-23525
CVE-2022-23526
CWE-ID CWE-59
CWE-942
CWE-20
Exploitation vector Network
Public exploit N/A
Vulnerable software
 SUSE Linux Enterprise Module for Containers
Operating systems & Components / Operating system

SUSE Manager Retail Branch Server
Operating systems & Components / Operating system

SUSE Manager Server
Operating systems & Components / Operating system

SUSE Manager Proxy
Operating systems & Components / Operating system

openSUSE Leap
Operating systems & Components / Operating system

SUSE Linux Enterprise Server
Operating systems & Components / Operating system

SUSE Linux Enterprise Server for SAP Applications
Operating systems & Components / Operating system

SUSE Linux Enterprise High Performance Computing
Operating systems & Components / Operating system

SUSE Linux Enterprise Module for Packagehub Subpackages
Operating systems & Components / Operating system package or component

helm-zsh-completion
Operating systems & Components / Operating system package or component

helm-fish-completion
Operating systems & Components / Operating system package or component

helm-bash-completion
Operating systems & Components / Operating system package or component

helm-debuginfo
Operating systems & Components / Operating system package or component

helm
Operating systems & Components / Operating system package or component

Vendor SUSE

Security Bulletin

This security bulletin contains information about 5 vulnerabilities.

1) Link following

EUVDB-ID: #VU70623

Risk: Medium

CVSSv4.0: 4.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/U:Green]

CVE-ID: CVE-2021-21272

CWE-ID: CWE-59 - Improper Link Resolution Before File Access ('Link Following')

Exploit availability: No

Description

The vulnerability allows a remote attacker to overwrite files on the system.

The vulnerability exists due to insecure hardlink following when extracting files from an archive. A remote attacker can trick the victim into downloading a gzipped tarballs that will be automatically extracted to the user-specified directory where the tarball can have symbolic links and hard links.

Mitigation

Update the affected package helm to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Module for Containers: 15-SP4

SUSE Manager Retail Branch Server: 4.3

SUSE Linux Enterprise Module for Packagehub Subpackages: 15-SP4

SUSE Manager Server: 4.3

SUSE Manager Proxy: 4.3

openSUSE Leap: 15.3 - 15.4

SUSE Linux Enterprise Server: 15-SP4

SUSE Linux Enterprise Server for SAP Applications: 15-SP4

SUSE Linux Enterprise High Performance Computing: 15-SP4

helm-zsh-completion: before 3.10.3-150000.1.13.1

helm-fish-completion: before 3.10.3-150000.1.13.1

helm-bash-completion: before 3.10.3-150000.1.13.1

helm-debuginfo: before 3.10.3-150000.1.13.1

helm: before 3.10.3-150000.1.13.1

CPE2.3 External links

https://www.suse.com/support/update/announcement/2022/suse-su-20224606-1/


Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

2) Overly permissive cross-domain whitelist

EUVDB-ID: #VU66447

Risk: Low

CVSSv4.0: 1.2 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2022-1996

CWE-ID: CWE-942 - Overly Permissive Cross-domain Whitelist

Exploit availability: No

Description

The vulnerability allows a remote attacker to bypass the CORS protection mechanism.

The vulnerability exists due to incorrect processing of the "Origin" HTTP header that is supplied within HTTP request. A remote attacker can supply arbitrary value via the "Origin" HTTP header, bypass implemented CORS protection mechanism and perform cross-site scripting attacks against the vulnerable application.

Mitigation

Update the affected package helm to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Module for Containers: 15-SP4

SUSE Manager Retail Branch Server: 4.3

SUSE Linux Enterprise Module for Packagehub Subpackages: 15-SP4

SUSE Manager Server: 4.3

SUSE Manager Proxy: 4.3

openSUSE Leap: 15.3 - 15.4

SUSE Linux Enterprise Server: 15-SP4

SUSE Linux Enterprise Server for SAP Applications: 15-SP4

SUSE Linux Enterprise High Performance Computing: 15-SP4

helm-zsh-completion: before 3.10.3-150000.1.13.1

helm-fish-completion: before 3.10.3-150000.1.13.1

helm-bash-completion: before 3.10.3-150000.1.13.1

helm-debuginfo: before 3.10.3-150000.1.13.1

helm: before 3.10.3-150000.1.13.1

CPE2.3 External links

https://www.suse.com/support/update/announcement/2022/suse-su-20224606-1/


Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

3) Input validation error

EUVDB-ID: #VU70620

Risk: Medium

CVSSv4.0: 6.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Green]

CVE-ID: CVE-2022-23524

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

Description

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to insufficient validation of user-supplied input in the strvals package when parsing string values. A remote attacker can pass specially crafted input to the application and perform a denial of service (DoS) attack.

Mitigation

Update the affected package helm to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Module for Containers: 15-SP4

SUSE Manager Retail Branch Server: 4.3

SUSE Linux Enterprise Module for Packagehub Subpackages: 15-SP4

SUSE Manager Server: 4.3

SUSE Manager Proxy: 4.3

openSUSE Leap: 15.3 - 15.4

SUSE Linux Enterprise Server: 15-SP4

SUSE Linux Enterprise Server for SAP Applications: 15-SP4

SUSE Linux Enterprise High Performance Computing: 15-SP4

helm-zsh-completion: before 3.10.3-150000.1.13.1

helm-fish-completion: before 3.10.3-150000.1.13.1

helm-bash-completion: before 3.10.3-150000.1.13.1

helm-debuginfo: before 3.10.3-150000.1.13.1

helm: before 3.10.3-150000.1.13.1

CPE2.3 External links

https://www.suse.com/support/update/announcement/2022/suse-su-20224606-1/


Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

4) Input validation error

EUVDB-ID: #VU70619

Risk: Medium

CVSSv4.0: 6.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Green]

CVE-ID: CVE-2022-23525

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

Description

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to insufficient validation of user-supplied input in the repo package when parsing a repository index file. A remote attacker can pass specially crafted repository index file to the application and perform a denial of service (DoS) attack.

Mitigation

Update the affected package helm to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Module for Containers: 15-SP4

SUSE Manager Retail Branch Server: 4.3

SUSE Linux Enterprise Module for Packagehub Subpackages: 15-SP4

SUSE Manager Server: 4.3

SUSE Manager Proxy: 4.3

openSUSE Leap: 15.3 - 15.4

SUSE Linux Enterprise Server: 15-SP4

SUSE Linux Enterprise Server for SAP Applications: 15-SP4

SUSE Linux Enterprise High Performance Computing: 15-SP4

helm-zsh-completion: before 3.10.3-150000.1.13.1

helm-fish-completion: before 3.10.3-150000.1.13.1

helm-bash-completion: before 3.10.3-150000.1.13.1

helm-debuginfo: before 3.10.3-150000.1.13.1

helm: before 3.10.3-150000.1.13.1

CPE2.3 External links

https://www.suse.com/support/update/announcement/2022/suse-su-20224606-1/


Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

5) Input validation error

EUVDB-ID: #VU70618

Risk: Medium

CVSSv4.0: 6.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Green]

CVE-ID: CVE-2022-23526

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

Description

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to insufficient validation of user-supplied input in the chartutil package. A remote attacker can pass specially crafted JSON Schema validation file to the application and perform a denial of service (DoS) attack.

Mitigation

Update the affected package helm to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Module for Containers: 15-SP4

SUSE Manager Retail Branch Server: 4.3

SUSE Linux Enterprise Module for Packagehub Subpackages: 15-SP4

SUSE Manager Server: 4.3

SUSE Manager Proxy: 4.3

openSUSE Leap: 15.3 - 15.4

SUSE Linux Enterprise Server: 15-SP4

SUSE Linux Enterprise Server for SAP Applications: 15-SP4

SUSE Linux Enterprise High Performance Computing: 15-SP4

helm-zsh-completion: before 3.10.3-150000.1.13.1

helm-fish-completion: before 3.10.3-150000.1.13.1

helm-bash-completion: before 3.10.3-150000.1.13.1

helm-debuginfo: before 3.10.3-150000.1.13.1

helm: before 3.10.3-150000.1.13.1

CPE2.3 External links

https://www.suse.com/support/update/announcement/2022/suse-su-20224606-1/


Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.



###SIDEBAR###