Helm is a package manager for Charts for Kubernetes. Versions prior to 3.14.2 contain an uninitialized variable vulnerability when Helm parses index and plugin yaml files missing expected content. When either an `index.yaml` file or a plugins `plugin.yaml` file were missing all metadata a panic would occur in Helm. In the Helm SDK, this is found when using the `LoadIndexFile` or `DownloadIndexFile` functions in the `repo` package or the `LoadDir` function in the `plugin` package. For the Helm client this impacts functions around adding a repository and all Helm functions if a malicious plugin is added as Helm inspects all known plugins on each invocation. This issue has been resolved in Helm v3.14.2. If a malicious plugin has been added which is causing all Helm client commands to panic, the malicious plugin can be manually removed from the filesystem. If using Helm SDK versions prior to 3.14.2, calls to affected functions can use `recover` to catch the panic.

The version of helm / cert-manager installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-26147 advisory.

  - Helm is a package manager for Charts for Kubernetes. Versions prior to 3.14.2 contain an uninitialized     variable vulnerability when Helm parses index and plugin yaml files missing expected content. When either     an `index.yaml` file or a plugins `plugin.yaml` file were missing all metadata a panic would occur in     Helm. In the Helm SDK, this is found when using the `LoadIndexFile` or `DownloadIndexFile` functions in     the `repo` package or the `LoadDir` function in the `plugin` package. For the Helm client this impacts     functions around adding a repository and all Helm functions if a malicious plugin is added as Helm     inspects all known plugins on each invocation. This issue has been resolved in Helm v3.14.2. If a     malicious plugin has been added which is causing all Helm client commands to panic, the malicious plugin     can be manually removed from the filesystem. If using Helm SDK versions prior to 3.14.2, calls to affected     functions can use `recover` to catch the panic. (CVE-2024-26147)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:1137-1 advisory.

  - Helm is a tool for managing Charts. Charts are packages of pre-configured Kubernetes resources. When     either the Helm client or SDK is used to save a chart whose name within the `Chart.yaml` file includes a     relative path change, the chart would be saved outside its expected directory based on the changes in the     relative path. The validation and linting did not detect the path changes in the name. This issue has been     resolved in Helm v3.14.1. Users unable to upgrade should check all charts used by Helm for path changes in     their name as found in the `Chart.yaml` file. This includes dependencies. (CVE-2024-25620)

  - Helm is a package manager for Charts for Kubernetes. Versions prior to 3.14.2 contain an uninitialized     variable vulnerability when Helm parses index and plugin yaml files missing expected content. When either     an `index.yaml` file or a plugins `plugin.yaml` file were missing all metadata a panic would occur in     Helm. In the Helm SDK, this is found when using the `LoadIndexFile` or `DownloadIndexFile` functions in     the `repo` package or the `LoadDir` function in the `plugin` package. For the Helm client this impacts     functions around adding a repository and all Helm functions if a malicious plugin is added as Helm     inspects all known plugins on each invocation. This issue has been resolved in Helm v3.14.2. If a     malicious plugin has been added which is causing all Helm client commands to panic, the malicious plugin     can be manually removed from the filesystem. If using Helm SDK versions prior to 3.14.2, calls to affected     functions can use `recover` to catch the panic. (CVE-2024-26147)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
201703	CBL Mariner 2.0 Security Update: helm / cert-manager (CVE-2024-26147)	Nessus	MarinerOS Local Security Checks	high
193054	SUSE SLES15 / openSUSE 15 Security Update : helm (SUSE-SU-2024:1137-1)	Nessus	SuSE Local Security Checks	medium

Detections

Analytics

CVE-2024-26147

high

Tenable Plugins

high

medium