Summary
It was discovered that Puppet installed modules with world writable
permissions. An attacker could use this vulnerability to execute arbitrary
code or cause a denial of service. (CVE-2017-10689)
It was discovered that Puppet could be used to force YAML deserialization in an
unsafe manner. A remote attacker could use this vulnerability for remote code
execution. (CVE-2017-2295)
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | puppet | 3.8.5-2ubuntu0.1+esm1 |
Vulnerabilities 2
-
Medium 5.5
Tarball permission preservation in puppet
In previous versions of Puppet Agent it was possible to install a module with world writable permissions. Puppet Agent 5.3.4 and 1.10.10 included a fix to this vulnerability.
-
Unscored —
Versions of Puppet prior to 4.10.1 will deserialize data off the wire (from the agent to the server, in this case) with…