Lucene search
K

MCollective: Remote Code Execution

🗓️ 04 Sep 2017 00:00:00Reported by Gentoo FoundationType 
gentoo
 gentoo
🔗 security.gentoo.org👁 33 Views

MCollective vulnerability allows remote code execution via deserialized YAML without safe_load, leading to potential arbitrary code execution and Denial of Service

Related
Packages
ReporterTitlePublishedViews
Family
CNVD
MCollective Remote Code Execution Vulnerability
4 Jul 201700:00
cnvd
CVE
CVE-2017-2292
30 Jun 201720:00
cve
Cvelist
CVE-2017-2292
30 Jun 201720:00
cvelist
Debian CVE
CVE-2017-2292
30 Jun 201720:00
debiancve
EUVD
EUVD-2017-11475
7 Oct 202500:30
euvd
Tenable Nessus
GLSA-201709-01 : MCollective: Remote Code Execution
5 Sep 201700:00
nessus
Tenable Nessus
Puppet Enterprise < 2016.4.5 / 2016.5.x / 2017.1.x Multiple Vulnerabilities
9 Oct 201900:00
nessus
Tenable Nessus
Linux Distros Unpatched Vulnerability : CVE-2017-2292
25 Aug 202500:00
nessus
NVD
CVE-2017-2292
30 Jun 201720:29
nvd
OpenVAS
Puppet Enterprise < 2016.4.5, 2016.5.x < 2017.2.1 Multiple Vulnerabilities
6 Jul 201700:00
openvas
Rows per page
OSOS VersionArchitecturePackagePackage VersionFilename
Gentooanyallapp-admin/mcollective2.11.0UNKNOWN

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

04 Sep 2017 00:00Current
9.5High risk
Vulners AI Score9.5
CVSS 27.5
CVSS 39
EPSS0.01805
33