CVE-2025-32387 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2025-32387 Interim 1 14 2026-03-05T01:08:57Z current 2025-04-10T23:12:00Z 2026-03-05T01:08:57Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2025-32387 Helm is a package manager for Charts for Kubernetes. A JSON Schema file within a chart can be crafted with a deeply nested chain of references, leading to parser recursion that can exceed the stack size limit and trigger a stack overflow. This issue has been resolved in Helm v3.17.3. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.suse.com/pipermail/sle-updates/2025-June/040175.html E-Mail link for SUSE-SU-2025:01830-1 https://lists.suse.com/pipermail/sle-updates/2025-July/040633.html E-Mail link for SUSE-SU-2025:01830-2 https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/E43FPQVMRXXDJFNVP6BBWLBUQXMXBJ3W/ E-Mail link for openSUSE-SU-2025:14995-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings Container suse/sl-micro/6.0/baremetal-os-container:latest Container suse/sl-micro/6.0/base-os-container:latest Container suse/sl-micro/6.0/kvm-os-container:latest Container suse/sl-micro/6.0/rt-os-container:latest Container suse/sl-micro/6.0/toolbox:latest Image SL-Micro Image SLE-Micro Image SLE-Micro-Azure Image SLE-Micro-BYOS Image SLE-Micro-BYOS-Azure Image SLE-Micro-BYOS-EC2 Image SLE-Micro-BYOS-GCE Image SLE-Micro-EC2 Image SLE-Micro-GCE SLES-LTSS-TERADATA 15 SP2 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS SUSE Linux Enterprise Module for Public Cloud 15 SP4 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS SUSE Linux Enterprise Module for Containers 15 SP6 SUSE Linux Enterprise Module for Containers 15 SP7 SUSE Linux Enterprise Micro 5.5 SUSE Linux Enterprise Module for Package Hub 15 SP6 SUSE Linux Enterprise Module for Package Hub 15 SP7 SUSE Linux Enterprise Server 15 SP1-LTSS SUSE Linux Enterprise Server 15 SP2-LTSS SUSE Linux Enterprise Server 15 SP3-LTSS SUSE Linux Enterprise Module for Public Cloud 15 SP4 SUSE Linux Enterprise Server 15 SP4-LTSS SUSE Linux Enterprise Server 15 SP4-TERADATA SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Server 15 SP5-LTSS SUSE Linux Enterprise Module for Containers 15 SP6 SUSE Linux Enterprise Server 15 SP6-LTSS SUSE Linux Enterprise Module for Containers 15 SP7 SUSE Linux Enterprise Server 15-LTSS SUSE Linux Enterprise Server 16.0 SUSE Linux Enterprise Server Teradata 15 SP4 SUSE Linux Enterprise Server for SAP Applications 15 SP3 SUSE Linux Enterprise Module for Public Cloud 15 SP4 SUSE Linux Enterprise Server for SAP Applications 15 SP4 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 SUSE Linux Enterprise Module for Containers 15 SP6 SUSE Linux Enterprise Server for SAP Applications 15 SP6 SUSE Linux Enterprise Module for Containers 15 SP7 SUSE Linux Enterprise Server for SAP applications 16.0 SUSE Linux Micro 6.0 SUSE Linux Micro 6.1 SUSE Linux Micro 6.2 SUSE Linux Enterprise Module for Public Cloud 15 SP4 SUSE Linux Enterprise Module for Public Cloud 15 SP4 SUSE Linux Enterprise Module for Public Cloud 15 SP4 openSUSE Leap 15.6 openSUSE Tumbleweed govulncheck-vulndb-0.0.20250410T162706-1.1 govulncheck-vulndb-0.0.20250814T182633-160000.1.2 helm helm-bash-completion helm-fish-completion helm-mirror helm-mirror-0.3.1-150000.1.18.2 helm-zsh-completion libexpat1-2.7.1-slfo.1.1_3.1 terraform-provider-helm libexpat1-2.7.1-slfo.1.1_3.1 as a component of Container suse/sl-micro/6.0/baremetal-os-container:latest libexpat1-2.7.1-slfo.1.1_3.1 as a component of Container suse/sl-micro/6.0/base-os-container:latest libexpat1-2.7.1-slfo.1.1_3.1 as a component of Container suse/sl-micro/6.0/kvm-os-container:latest libexpat1-2.7.1-slfo.1.1_3.1 as a component of Container suse/sl-micro/6.0/rt-os-container:latest libexpat1-2.7.1-slfo.1.1_3.1 as a component of Container suse/sl-micro/6.0/toolbox:latest libexpat1-2.7.1-slfo.1.1_3.1 as a component of Image SL-Micro libexpat1-2.7.1-slfo.1.1_3.1 as a component of Image SLE-Micro libexpat1-2.7.1-slfo.1.1_3.1 as a component of Image SLE-Micro-Azure libexpat1-2.7.1-slfo.1.1_3.1 as a component of Image SLE-Micro-BYOS libexpat1-2.7.1-slfo.1.1_3.1 as a component of Image SLE-Micro-BYOS-Azure libexpat1-2.7.1-slfo.1.1_3.1 as a component of Image SLE-Micro-BYOS-EC2 libexpat1-2.7.1-slfo.1.1_3.1 as a component of Image SLE-Micro-BYOS-GCE libexpat1-2.7.1-slfo.1.1_3.1 as a component of Image SLE-Micro-EC2 libexpat1-2.7.1-slfo.1.1_3.1 as a component of Image SLE-Micro-GCE helm-mirror-0.3.1-150000.1.18.2 as a component of SUSE Linux Enterprise Module for Containers 15 SP6 helm-mirror-0.3.1-150000.1.18.2 as a component of SUSE Linux Enterprise Module for Containers 15 SP7 helm-mirror-0.3.1-150000.1.18.2 as a component of SUSE Linux Enterprise Server 15 SP4-TERADATA govulncheck-vulndb-0.0.20250814T182633-160000.1.2 as a component of SUSE Linux Enterprise Server 16.0 helm-mirror-0.3.1-150000.1.18.2 as a component of openSUSE Leap 15.6 govulncheck-vulndb-0.0.20250410T162706-1.1 as a component of openSUSE Tumbleweed helm-mirror as a component of SLES-LTSS-TERADATA 15 SP2 helm as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS helm-bash-completion as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS helm-zsh-completion as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS helm-mirror as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS helm as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS helm-bash-completion as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS helm-zsh-completion as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS helm-mirror as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS helm as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS helm-bash-completion as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS helm-zsh-completion as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS helm-mirror as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS helm as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS helm-bash-completion as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS helm-zsh-completion as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS helm-mirror as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS helm as a component of SUSE Linux Enterprise Micro 5.5 helm-bash-completion as a component of SUSE Linux Enterprise Micro 5.5 helm as a component of SUSE Linux Enterprise Module for Containers 15 SP6 helm-bash-completion as a component of SUSE Linux Enterprise Module for Containers 15 SP6 helm-zsh-completion as a component of SUSE Linux Enterprise Module for Containers 15 SP6 helm as a component of SUSE Linux Enterprise Module for Containers 15 SP7 helm-bash-completion as a component of SUSE Linux Enterprise Module for Containers 15 SP7 helm-zsh-completion as a component of SUSE Linux Enterprise Module for Containers 15 SP7 helm-fish-completion as a component of SUSE Linux Enterprise Module for Package Hub 15 SP6 helm as a component of SUSE Linux Enterprise Module for Package Hub 15 SP6 helm-fish-completion as a component of SUSE Linux Enterprise Module for Package Hub 15 SP7 helm as a component of SUSE Linux Enterprise Module for Package Hub 15 SP7 terraform-provider-helm as a component of SUSE Linux Enterprise Module for Public Cloud 15 SP4 terraform-provider-helm as a component of SUSE Linux Enterprise Module for Public Cloud 15 SP5 helm-mirror as a component of SUSE Linux Enterprise Server 15 SP1-LTSS helm-mirror as a component of SUSE Linux Enterprise Server 15 SP2-LTSS helm as a component of SUSE Linux Enterprise Server 15 SP3-LTSS helm-bash-completion as a component of SUSE Linux Enterprise Server 15 SP3-LTSS helm-zsh-completion as a component of SUSE Linux Enterprise Server 15 SP3-LTSS helm-mirror as a component of SUSE Linux Enterprise Server 15 SP3-LTSS helm as a component of SUSE Linux Enterprise Server 15 SP4-LTSS helm-bash-completion as a component of SUSE Linux Enterprise Server 15 SP4-LTSS helm-zsh-completion as a component of SUSE Linux Enterprise Server 15 SP4-LTSS helm-mirror as a component of SUSE Linux Enterprise Server 15 SP4-LTSS helm as a component of SUSE Linux Enterprise Server 15 SP5-LTSS helm-bash-completion as a component of SUSE Linux Enterprise Server 15 SP5-LTSS helm-zsh-completion as a component of SUSE Linux Enterprise Server 15 SP5-LTSS helm-mirror as a component of SUSE Linux Enterprise Server 15 SP5-LTSS helm as a component of SUSE Linux Enterprise Server 15 SP6-LTSS helm-bash-completion as a component of SUSE Linux Enterprise Server 15 SP6-LTSS helm-zsh-completion as a component of SUSE Linux Enterprise Server 15 SP6-LTSS helm-mirror as a component of SUSE Linux Enterprise Server 15-LTSS helm as a component of SUSE Linux Enterprise Server 16.0 helm-bash-completion as a component of SUSE Linux Enterprise Server 16.0 helm-fish-completion as a component of SUSE Linux Enterprise Server 16.0 helm-zsh-completion as a component of SUSE Linux Enterprise Server 16.0 helm as a component of SUSE Linux Enterprise Server Teradata 15 SP4 terraform-provider-helm as a component of SUSE Linux Enterprise Server Teradata 15 SP4 helm as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 helm-bash-completion as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 helm-zsh-completion as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 helm-mirror as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 helm as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 helm-bash-completion as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 helm-zsh-completion as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 helm-mirror as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 helm as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP5 helm-bash-completion as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP5 helm-zsh-completion as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP5 helm-mirror as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP5 helm as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP6 helm-bash-completion as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP6 helm-zsh-completion as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP6 helm as a component of SUSE Linux Enterprise Server for SAP applications 16.0 helm-bash-completion as a component of SUSE Linux Enterprise Server for SAP applications 16.0 helm-fish-completion as a component of SUSE Linux Enterprise Server for SAP applications 16.0 helm-zsh-completion as a component of SUSE Linux Enterprise Server for SAP applications 16.0 helm as a component of SUSE Linux Micro 6.0 helm-bash-completion as a component of SUSE Linux Micro 6.0 helm as a component of SUSE Linux Micro 6.1 helm-bash-completion as a component of SUSE Linux Micro 6.1 helm as a component of SUSE Linux Micro 6.2 helm-bash-completion as a component of SUSE Linux Micro 6.2 helm as a component of openSUSE Leap 15.6 helm-bash-completion as a component of openSUSE Leap 15.6 helm-fish-completion as a component of openSUSE Leap 15.6 helm-zsh-completion as a component of openSUSE Leap 15.6 terraform-provider-helm as a component of openSUSE Leap 15.6 Helm is a package manager for Charts for Kubernetes. A JSON Schema file within a chart can be crafted with a deeply nested chain of references, leading to parser recursion that can exceed the stack size limit and trigger a stack overflow. This issue has been resolved in Helm v3.17.3. CVE-2025-32387 Container suse/sl-micro/6.0/baremetal-os-container:latest:libexpat1-2.7.1-slfo.1.1_3.1 Container suse/sl-micro/6.0/base-os-container:latest:libexpat1-2.7.1-slfo.1.1_3.1 Container suse/sl-micro/6.0/kvm-os-container:latest:libexpat1-2.7.1-slfo.1.1_3.1 Container suse/sl-micro/6.0/rt-os-container:latest:libexpat1-2.7.1-slfo.1.1_3.1 Container suse/sl-micro/6.0/toolbox:latest:libexpat1-2.7.1-slfo.1.1_3.1 Image SL-Micro:libexpat1-2.7.1-slfo.1.1_3.1 Image SLE-Micro:libexpat1-2.7.1-slfo.1.1_3.1 Image SLE-Micro-Azure:libexpat1-2.7.1-slfo.1.1_3.1 Image SLE-Micro-BYOS:libexpat1-2.7.1-slfo.1.1_3.1 Image SLE-Micro-BYOS-Azure:libexpat1-2.7.1-slfo.1.1_3.1 Image SLE-Micro-BYOS-EC2:libexpat1-2.7.1-slfo.1.1_3.1 Image SLE-Micro-BYOS-GCE:libexpat1-2.7.1-slfo.1.1_3.1 Image SLE-Micro-EC2:libexpat1-2.7.1-slfo.1.1_3.1 Image SLE-Micro-GCE:libexpat1-2.7.1-slfo.1.1_3.1 SUSE Linux Enterprise Module for Containers 15 SP6:helm-mirror-0.3.1-150000.1.18.2 SUSE Linux Enterprise Module for Containers 15 SP7:helm-mirror-0.3.1-150000.1.18.2 SUSE Linux Enterprise Server 15 SP4-TERADATA:helm-mirror-0.3.1-150000.1.18.2 SUSE Linux Enterprise Server 16.0:govulncheck-vulndb-0.0.20250814T182633-160000.1.2 openSUSE Leap 15.6:helm-mirror-0.3.1-150000.1.18.2 openSUSE Tumbleweed:govulncheck-vulndb-0.0.20250410T162706-1.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:helm SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:helm-bash-completion SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:helm-zsh-completion SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:helm SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:helm-bash-completion SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:helm-zsh-completion SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:helm SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:helm-bash-completion SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:helm-zsh-completion SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:helm SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:helm-bash-completion SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:helm-zsh-completion SUSE Linux Enterprise Micro 5.5:helm SUSE Linux Enterprise Micro 5.5:helm-bash-completion SUSE Linux Enterprise Module for Containers 15 SP6:helm SUSE Linux Enterprise Module for Containers 15 SP6:helm-bash-completion SUSE Linux Enterprise Module for Containers 15 SP6:helm-zsh-completion SUSE Linux Enterprise Module for Containers 15 SP7:helm SUSE Linux Enterprise Module for Containers 15 SP7:helm-bash-completion SUSE Linux Enterprise Module for Containers 15 SP7:helm-zsh-completion SUSE Linux Enterprise Module for Package Hub 15 SP6:helm SUSE Linux Enterprise Module for Package Hub 15 SP6:helm-fish-completion SUSE Linux Enterprise Module for Package Hub 15 SP7:helm SUSE Linux Enterprise Module for Package Hub 15 SP7:helm-fish-completion SUSE Linux Enterprise Server 15 SP3-LTSS:helm SUSE Linux Enterprise Server 15 SP3-LTSS:helm-bash-completion SUSE Linux Enterprise Server 15 SP3-LTSS:helm-zsh-completion SUSE Linux Enterprise Server 15 SP4-LTSS:helm SUSE Linux Enterprise Server 15 SP4-LTSS:helm-bash-completion SUSE Linux Enterprise Server 15 SP4-LTSS:helm-zsh-completion SUSE Linux Enterprise Server 15 SP5-LTSS:helm SUSE Linux Enterprise Server 15 SP5-LTSS:helm-bash-completion SUSE Linux Enterprise Server 15 SP5-LTSS:helm-zsh-completion SUSE Linux Enterprise Server 15 SP6-LTSS:helm SUSE Linux Enterprise Server 15 SP6-LTSS:helm-bash-completion SUSE Linux Enterprise Server 15 SP6-LTSS:helm-zsh-completion SUSE Linux Enterprise Server 16.0:helm SUSE Linux Enterprise Server 16.0:helm-bash-completion SUSE Linux Enterprise Server 16.0:helm-fish-completion SUSE Linux Enterprise Server 16.0:helm-zsh-completion SUSE Linux Enterprise Server Teradata 15 SP4:helm SUSE Linux Enterprise Server for SAP Applications 15 SP3:helm SUSE Linux Enterprise Server for SAP Applications 15 SP3:helm-bash-completion SUSE Linux Enterprise Server for SAP Applications 15 SP3:helm-zsh-completion SUSE Linux Enterprise Server for SAP Applications 15 SP4:helm SUSE Linux Enterprise Server for SAP Applications 15 SP4:helm-bash-completion SUSE Linux Enterprise Server for SAP Applications 15 SP4:helm-zsh-completion SUSE Linux Enterprise Server for SAP Applications 15 SP5:helm SUSE Linux Enterprise Server for SAP Applications 15 SP5:helm-bash-completion SUSE Linux Enterprise Server for SAP Applications 15 SP5:helm-zsh-completion SUSE Linux Enterprise Server for SAP Applications 15 SP6:helm SUSE Linux Enterprise Server for SAP Applications 15 SP6:helm-bash-completion SUSE Linux Enterprise Server for SAP Applications 15 SP6:helm-zsh-completion SUSE Linux Enterprise Server for SAP applications 16.0:helm SUSE Linux Enterprise Server for SAP applications 16.0:helm-bash-completion SUSE Linux Enterprise Server for SAP applications 16.0:helm-fish-completion SUSE Linux Enterprise Server for SAP applications 16.0:helm-zsh-completion SUSE Linux Micro 6.0:helm SUSE Linux Micro 6.0:helm-bash-completion SUSE Linux Micro 6.1:helm SUSE Linux Micro 6.1:helm-bash-completion SUSE Linux Micro 6.2:helm SUSE Linux Micro 6.2:helm-bash-completion openSUSE Leap 15.6:helm openSUSE Leap 15.6:helm-bash-completion openSUSE Leap 15.6:helm-fish-completion openSUSE Leap 15.6:helm-zsh-completion moderate 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H