Lucene search
GoogleOSV:USN-4804-1HistoryMar 15, 2021 - 9:31 p.m.
puppet vulnerabilities
2021-03-1521:31:34
Google
osv.dev
10
puppet
world writable
modules
remote code execution
yaml deserialization
denial of service
It was discovered that Puppet installed modules with world writable
permissions. An attacker could use this vulnerability to execute arbitrary
code or cause a denial of service. (CVE-2017-10689)
It was discovered that Puppet could be used to force YAML deserialization in an
unsafe manner. A remote attacker could use this vulnerability for remote code
execution. (CVE-2017-2295)
Related
openvas
openvas
Ubuntu: Security Advisory (USN-4804-1)
2023-01-27 00:00:00
Ubuntu: Security Advisory (USN-3567-1)
2018-02-14 00:00:00
Mageia: Security Advisory (MGASA-2018-0199)
2022-01-28 00:00:00
nessus
nessus
Ubuntu 16.04 ESM : Puppet vulnerabilities (USN-4804-1)
2023-10-23 00:00:00
SUSE SLED12 Security Update : puppet (SUSE-SU-2018:0571-1)
2018-03-02 00:00:00
Fedora 27 : puppet (2018-45d8b8ae21)
2018-03-27 00:00:00
ubuntu
ubuntu
Puppet vulnerabilities
2021-03-15 00:00:00
Puppet vulnerability
2018-02-12 00:00:00
Puppet vulnerabilities
2017-06-05 00:00:00
debiancve
debiancve
CVE-2017-10689
2018-02-09 20:29:00
CVE-2017-2295
2017-07-05 15:29:00
veracode
veracode
Escalation Of Privileges
2018-02-12 06:28:08
Remote Code Execution (RCE) Through YAML Deserialization
2017-05-15 01:33:13
fedora
fedora
[SECURITY] Fedora 28 Update: puppet-4.10.10-1.fc28
2018-03-30 13:34:48
[SECURITY] Fedora 27 Update: puppet-4.10.10-1.fc27
2018-03-24 22:23:37
[SECURITY] Fedora 26 Update: puppet-4.6.2-4.fc26
2017-06-09 20:07:32
cve
cve
CVE-2017-10689
2018-02-09 20:29:00
CVE-2017-2295
2017-07-05 15:29:00
osv
osv
Tarball permission preservation in puppet
2022-05-13 01:41:57
CVE-2017-10689
2018-02-09 20:29:00
CVE-2017-2295
2017-07-05 15:29:00
redhatcve
redhatcve
CVE-2017-10689
2018-02-07 08:16:19
ubuntucve
ubuntucve
CVE-2017-10689
2017-12-31 00:00:00
CVE-2017-2295
2017-05-25 00:00:00
rubygems
rubygems
Tarball permission preservation in puppet
2022-05-12 21:00:00
cvelist
cvelist
CVE-2017-10689
2018-02-05 00:00:00
CVE-2017-2295
2017-05-11 00:00:00
github
github
Tarball permission preservation in puppet
2022-05-13 01:41:57
prion
prion
Design/Logic Flaw
2018-02-09 20:29:00
Deserialization of untrusted data
2017-07-05 15:29:00
mageia
mageia
Updated puppet packages fix security vulnerability
2018-04-13 23:08:48
Updated puppet packages fix security vulnerability
2017-06-09 00:39:47
nvd
nvd
CVE-2017-10689
2018-02-09 20:29:00
CVE-2017-2295
2017-07-05 15:29:00
amazon
amazon
Important: puppet3
2017-06-22 19:23:00
suse
suse
Security update for puppet (important)
2017-08-09 15:32:08
Security update for rubygem-puppet (important)
2017-07-25 00:11:18
debian
debian
[SECURITY] [DLA 1012-1] puppet security update
2017-07-03 15:29:45
[SECURITY] [DSA 3862-1] puppet security update
2017-05-25 21:31:45
redhat
redhat