Read the docs
TI-2023-10627 Aliases CVE-2023-25165GHSA-pwcw-6f5g-gxf8

getHostByName Function Information Disclosure

Priority MEDIUM 53CWE-200Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
Information disclosure
Confidentiality · integrity · availability
Low · None · None
Fix status
Partial Red Hat: 3 fixed, 11 without a fix

Attack profile from CVSS 3.1 · CNA. Fix status from CNA, GitHub and Red Hat. Impact type from CWE-200.

Summary

Helm is a tool that streamlines installing and managing Kubernetes applications.`getHostByName` is a Helm template function introduced in Helm v3. The function is able to accept a hostname and return an IP address for that hostname. To get the IP address the function performs a DNS lookup. The DNS lookup happens when used with `helm install|upgrade|template` or when the Helm SDK is used to render a chart. Information passed into the chart can be disclosed to the DNS servers used to lookup the IP address. For example, a malicious chart could inject `getHostByName` into a chart in order to disclose values to a malicious DNS server. The issue has been fixed in Helm 3.11.1. Prior to using a chart with Helm verify the `getHostByName` function is not being used in a template to disclose any information you do not want passed to DNS servers.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.00768 55th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix Partial helm (helm): 3.11.1helm.sh/helm/v3 (Go): 3.11.1Red Hat: 3 advisoriesRed Hat: 3 fixed, 11 without a fix

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
Poc
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
helmhelm3.0.0 to before 3.11.13.11.1Patch availableCNA
—helm.sh/helm/v3 (Go)3.0.0 to before 3.11.13.11.1Patch availableGHSA-pwcw-6f5g-gxf8
  • helm Vendorhelm Affected 3.0.0 to before 3.11.1 Fixed in 3.11.1 Patch available CNA
  • helm.sh/helm/v3 (Go) Vendor— Affected 3.0.0 to before 3.11.1 Fixed in 3.11.1 Patch available GHSA-pwcw-6f5g-gxf8

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:helm:helm:*:*:*:*:*:*:*:*3.0.0 to before 3.11.1Vulnerablehelm
  • cpe:2.3:a:helm:helm:*:*:*:*:*:*:*:* Versions 3.0.0 to before 3.11.1 Vulnerable ·helm

Remediation

  • Fix · CNA helm (helm) Fixed in 3.11.1
  • Fix · GHSA-pwcw-6f5g-gxf8 helm.sh/helm/v3 (Go) Fixed in 3.11.1 Advisory →

Red Hat 3 advisories

  • RHSA-2024:1265 Released 2024-03-20 · Red Hat rating Moderate
    OpenShift Container Platform 4.12.53 bug fix and security update
    • Red Hat OpenShift Container Platform 4.12 openshift4/ose-console-operator
  • RHSA-2023:5006 Released 2023-10-31 · Red Hat rating Important
    OpenShift Container Platform 4.14.0 bug fix and security update
    • Red Hat OpenShift Container Platform 4.14 openshift4/cloud-network-config-controller-rhel8, openshift4/driver-toolkit-rhel9, openshift4/egress-router-cni-rhel8 +47
  • RHSA-2023:1326 Released 2023-05-17 · Red Hat rating Important
    OpenShift Container Platform 4.13.0 security update
    • Red Hat OpenShift Container Platform 4.13 openshift4/cloud-network-config-controller-rhel8, openshift4/egress-router-cni-rhel8, openshift4/kubevirt-csi-driver-rhel8 +47

Vendor assessments

Red Hat

Red Hat rating: Moderate. Red Hat's page for this CVE →

ProductStatusPlan or fix
Cryostat 2AffectedNo fix yet
OpenShift Developer Tools and ServicesAffectedNo fix planned: Will not fix
OpenShift ServerlessAffectedNo fix yet
Red Hat 3scale API Management Platform 2AffectedNo fix yet
Red Hat Advanced Cluster Security 3AffectedNo fix yet
Red Hat OpenShift Container Platform 4AffectedNo fix yet
Red Hat OpenShift Container Platform Assisted Installer 1AffectedNo fix yet
Red Hat OpenShift Virtualization 4AffectedNo fix planned: Will not fix
Red Hat Openshift Container Storage 4AffectedNo fix planned: Out of support scope
Red Hat Openshift Data Foundation 4AffectedNo fix yet
cert-manager Operator for Red Hat OpenShiftAffectedNo fix planned: Will not fix
Red Hat OpenShift Container Platform 4.12Fixed RHSA-2024:1265
Red Hat OpenShift Container Platform 4.13Fixed RHSA-2023:1326
Red Hat OpenShift Container Platform 4.14Fixed RHSA-2023:5006
Not affected: 10 products
  • OpenShift Service Mesh 2
  • Red Hat Advanced Cluster Management for Kubernetes 2
  • Red Hat Advanced Cluster Security 4
  • Red Hat OpenShift Container Platform 4
  • Red Hat OpenShift Container Platform 4.12
  • Red Hat OpenShift Container Platform 4.13
  • Red Hat OpenShift Container Platform 4.14
  • Red Hat OpenShift GitOps
  • Red Hat OpenStack Platform 16.2
  • Red Hat Openshift Data Foundation 4

Timeline

  1. 2026-10-02 Threatist record created from CVE-2023-25165
  2. 2026-10-03 Alias added: GHSA-pwcw-6f5g-gxf8

References

Exploit 1

Patch 1

Advisory 1

Other 3

  • TI-2024-16848 Dependency management path traversal in helm CVSS 3.1MEDIUM 6.4
  • TI-2026-45154 Helm Files.Lines Denial of Service via Empty Chart Files CVSS 4.0MEDIUM 5.3
  • TI-2019-15264 An issue was discovered in Cloud Native Computing Foundation (CNCF) Helm through 3.13.3. CVSS 3.1CRITICAL 9.1
  • TI-2019-13497 In Helm 2.x before 2.15.2, commands that deal with loading a chart as a directory or… CVSS 3.1CRITICAL 9.8
  • TI-2019-16052 Improper certificate validation in helm CVSS 3.0CRITICAL 9.8
  • TI-2024-17237 Helm's Missing YAML Content Leads To Panic CVSS 3.1HIGH 7.5
See all 28 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences