Skip to content
OpenAdvisories
Unscored CVE-2017-2296 EUVD-2017-11479GHSA-cc93-3xjh-46wh

In Puppet Enterprise 2017.1.x and 2017.2.1, using specially formatted strings with certain formatting characters as Classifier node group n…

Published Feb 1, 2018 · Updated Sep 17, 2024 · Assigned by puppet

Description

In Puppet Enterprise 2017.1.x and 2017.2.1, using specially formatted strings with certain formatting characters as Classifier node group names or RBAC role display names causes errors, effectively causing a DOS to the service. This was resolved in Puppet Enterprise 2017.2.2.

Affected products

VendorProductAffectedFixed
Puppet Puppet Enterprise 2017.1.x, 2017.2.1. Fixed in 2017.2.2 —

References