Puppet vulnerability

2013-06-1800:00:00

ubuntu.com

7 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.223 Low

EPSS

Percentile

96.5%

JSON

Releases

Ubuntu 13.04
Ubuntu 12.10
Ubuntu 12.04

Packages

puppet - Centralized configuration management

Details

It was discovered that Puppet incorrectly handled YAML payloads. An
attacker on an untrusted client could use this issue to execute arbitrary
code on the primary server.

OSVersionArchitecturePackageVersionFilename
Ubuntu13.04noarchpuppet-common< 2.7.18-4ubuntu1.1UNKNOWN
Ubuntu13.04noarchpuppet< 2.7.18-4ubuntu1.1UNKNOWN
Ubuntu13.04noarchpuppet-el< 2.7.18-4ubuntu1.1UNKNOWN
Ubuntu13.04noarchpuppet-testsuite< 2.7.18-4ubuntu1.1UNKNOWN
Ubuntu13.04noarchpuppetmaster< 2.7.18-4ubuntu1.1UNKNOWN
Ubuntu13.04noarchpuppetmaster-common< 2.7.18-4ubuntu1.1UNKNOWN
Ubuntu13.04noarchpuppetmaster-passenger< 2.7.18-4ubuntu1.1UNKNOWN
Ubuntu13.04noarchvim-puppet< 2.7.18-4ubuntu1.1UNKNOWN
Ubuntu12.10noarchpuppet-common< 2.7.18-1ubuntu1.2UNKNOWN
Ubuntu12.10noarchpuppet< 2.7.18-1ubuntu1.2UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	13.04	noarch	puppet-common	< 2.7.18-4ubuntu1.1	UNKNOWN
Ubuntu	13.04	noarch	puppet	< 2.7.18-4ubuntu1.1	UNKNOWN
Ubuntu	13.04	noarch	puppet-el	< 2.7.18-4ubuntu1.1	UNKNOWN
Ubuntu	13.04	noarch	puppet-testsuite	< 2.7.18-4ubuntu1.1	UNKNOWN
Ubuntu	13.04	noarch	puppetmaster	< 2.7.18-4ubuntu1.1	UNKNOWN
Ubuntu	13.04	noarch	puppetmaster-common	< 2.7.18-4ubuntu1.1	UNKNOWN
Ubuntu	13.04	noarch	puppetmaster-passenger	< 2.7.18-4ubuntu1.1	UNKNOWN
Ubuntu	13.04	noarch	vim-puppet	< 2.7.18-4ubuntu1.1	UNKNOWN
Ubuntu	12.10	noarch	puppet-common	< 2.7.18-1ubuntu1.2	UNKNOWN
Ubuntu	12.10	noarch	puppet	< 2.7.18-1ubuntu1.2	UNKNOWN