Skip to content
OpenAdvisories

Package · Debian

puppet

40 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High —
    CVE-2013-3567

    Puppet Improper Input Validation vulnerability

    Puppet 2.7.x before 2.7.22 and 3.2.x before 3.2.2, and Puppet Enterprise before 2.8.2, deserializes untrusted YAML, which allows remote attackers to instantiate arbitrary Ruby classes and execute arbitrary code via a crafted REST API call.

    puppet puppet Debian RubyGems
  • High —
    CVE-2013-1655

    Puppet Improper Input Validation vulnerability

    Puppet 2.7.x before 2.7.21 and 3.1.x before 3.1.1, when running Ruby 1.9.3 or later, allows remote attackers to execute arbitrary code via vectors related to "serialized attributes."

    puppet puppet Debian RubyGems