CyberRota Analysis
This is a critical severity vulnerability with a CVSS score of 9.8. It may lead to a denial-of-service condition.
CVE
CVE-2019-18658
Severity
CRITICAL
CVSS
9.8
EPSS
1.75%
Original NVD Description
In Helm 2.x before 2.15.2, commands that deal with loading a chart as a directory or packaging a chart provide an opportunity for a maliciously designed chart to include sensitive content such as /etc/passwd, or to execute a denial of service (DoS) via a special file such as /dev/urandom, via symlinks. No version of Tiller is known to be impacted. This is a client-only issue.
Related CVEs
Other vulnerabilities affecting the same vendor(s)