Helm Out-of-Memory Denial-of-Service Vulnerability

A denial-of-service vulnerability has been identified in Helm versions prior to 3.17.2. This issue arises when a chart archive file is crafted to be significantly larger when uncompressed than when compressed, with some cases showing over an 800-fold difference. When Helm processes these specially crafted charts, the application can exhaust available memory, leading to termination.

Impact

Exploiting this vulnerability can cause Helm to run out of memory and terminate, disrupting any ongoing processes or operations that rely on the Helm application.

Remediation

Users can upgrade to Helm version 3.17.3 or later to address this vulnerability. Additionally, ensure that chart archive files do not contain excessively large files that could overwhelm the Helm Client or SDK's memory capacity.