Skip to content
OpenAdvisories
Unscored DSA-2761-1 2 CVEs

puppet - several

Published Sep 19, 2013 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 7 puppet 2.7.23-1~deb7u1

Vulnerabilities 2

  • Medium —

    Puppet allows remote attackers to execute arbitrary Ruby programs from the master via the resource_type service

    Unspecified vulnerability in Puppet 2.7.x before 2.7.23 and 3.2.x before 3.2.4, and Puppet Enterprise 2.8.x before 2.8.3 and 3.0.x before 3.0.1, allows remote attackers to execute arbitrary Ruby programs from the master via the resource_type service. NOTE: th…

  • Unscored —

    Puppet Module Tool (PMT), as used in Puppet 2.7.x before 2.7.23 and 3.2.x before 3.2.4, and Puppet Enterprise 2.8.x bef…