CVE-2012-1987 Puppet Denial of Service and Arbitrary File Write
LowCVSS 3.5
EPSS 2.5%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
Unspecified vulnerability in Puppet 2.6.x before 2.6.15 and 2.7.x before 2.7.13, and Puppet Enterprise (PE) Users 1.0, 1.1, 1.2.x, 2.0.x, and 2.5.x before 2.5.1 allows remote authenticated users with agent SSL keys to (1) cause a denial of service (memory consumption) via a REST request to a stream that triggers a thread block, as demonstrated using CVE-2012-1986 and /dev/random; or (2) cause a denial of service (filesystem consumption) via crafted REST requests that use "a marshaled form of a Puppet::FileBucket::File object" to write to arbitrary file locations.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| rubygems puppet(RubyGems) | >= 2.6.0, < 2.6.15 | 2.6.15 |
| rubygems puppet(RubyGems) | >= 2.7.0, < 2.7.13 | 2.7.13 |
| rubygems puppet(RubyGems) | = 2.6.0 | No fix listed |
| rubygems puppet(RubyGems) | = 2.6.1 | No fix listed |
| rubygems puppet(RubyGems) | = 2.6.10 | No fix listed |
| rubygems puppet(RubyGems) | = 2.6.11 | No fix listed |
| rubygems puppet(RubyGems) | = 2.6.12 | No fix listed |
| rubygems puppet(RubyGems) | = 2.6.13 | No fix listed |
| rubygems puppet(RubyGems) | = 2.6.14 | No fix listed |
| rubygems puppet(RubyGems) | = 2.6.2 | No fix listed |
| rubygems puppet(RubyGems) | = 2.6.3 | No fix listed |
| rubygems puppet(RubyGems) | = 2.6.4 | No fix listed |
| rubygems puppet(RubyGems) | = 2.6.5 | No fix listed |
| rubygems puppet(RubyGems) | = 2.6.6 | No fix listed |
| rubygems puppet(RubyGems) | = 2.6.7 | No fix listed |
| rubygems puppet(RubyGems) | = 2.6.8 | No fix listed |
| rubygems puppet(RubyGems) | = 2.6.9 | No fix listed |
| rubygems puppet(RubyGems) | = 2.7.1 | No fix listed |
| rubygems puppet(RubyGems) | = 2.7.11 | No fix listed |
| rubygems puppet(RubyGems) | = 2.7.12 | No fix listed |
| rubygems puppet(RubyGems) | = 2.7.3 | No fix listed |
| rubygems puppet(RubyGems) | = 2.7.4 | No fix listed |
| rubygems puppet(RubyGems) | = 2.7.5 | No fix listed |
| rubygems puppet(RubyGems) | = 2.7.6 | No fix listed |
| rubygems puppet(RubyGems) | = 2.7.8 | No fix listed |
Show 5 more
| Product | Affected versions | Fixed in |
|---|---|---|
| rubygems puppet(RubyGems) | = 2.7.9 | No fix listed |
| debian/puppet(Debian:11) | < 2.7.13-1 | 2.7.13-1 |
| puppet | >= 2.6.0, < 2.6.15 | 2.6.15 |
| puppet | >= 2.7.0, < 2.7.13 | 2.7.13 |
| puppet enterprise | >= 1.0, < 2.5.1 | 2.5.1 |
References
- nvd.nist.gov third-party-advisory vendor-advisory
- puppet-rest-dos(74795) third-party-advisory vdb-entry
- openSUSE-SU-2012:0608 broken-link vendor-advisory
- openSUSE-SU-2012:0835 broken-link vendor-advisory
- FEDORA-2012-5999 broken-link vendor-advisory
- FEDORA-2012-6055 broken-link vendor-advisory
- FEDORA-2012-6674 broken-link vendor-advisory
- USN-1419-1 third-party-advisory vendor-advisory
- DSA-2451 mailing-list third-party-advisory vendor-advisory
- github.com patch
- github.com patch
- web.archive.org
- web.archive.org
- web.archive.org
- web.archive.org
- web.archive.org
- github.com vendor-advisory
- github.com exploit
- github.com product
- security-tracker.debian.org vendor-advisory
- projects.puppetlabs.com broken-link vendor-advisory
- projects.puppetlabs.com broken-link vendor-advisory
- projects.puppetlabs.com broken-link
- puppetlabs.com broken-link vendor-advisory
- puppetlabs.com broken-link vendor-advisory
- 48743 broken-link third-party-advisory vendor-advisory
- 48748 broken-link third-party-advisory vendor-advisory
- 48789 broken-link third-party-advisory vendor-advisory
- 49136 broken-link third-party-advisory vendor-advisory
- 81308 broken-link vdb-entry
- 52975 broken-link vdb-entry