CVE-2013-3567 Puppet Improper Input Validation vulnerability
HighCVSS 7.5
EPSS 3.4%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
Puppet 2.7.x before 2.7.22 and 3.2.x before 3.2.2, and Puppet Enterprise before 2.8.2, deserializes untrusted YAML, which allows remote attackers to instantiate arbitrary Ruby classes and execute arbitrary code via a crafted REST API call.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| rubygems puppet(RubyGems) | >= 2.7.0, < 2.7.22 | 2.7.22 |
| rubygems puppet(RubyGems) | >= 3.2.0, < 3.2.2 | 3.2.2 |
| rubygems puppet(RubyGems) | = 2.7.1 | No fix listed |
| rubygems puppet(RubyGems) | = 2.7.11 | No fix listed |
| rubygems puppet(RubyGems) | = 2.7.12 | No fix listed |
| rubygems puppet(RubyGems) | = 2.7.13 | No fix listed |
| rubygems puppet(RubyGems) | = 2.7.14 | No fix listed |
| rubygems puppet(RubyGems) | = 2.7.16 | No fix listed |
| rubygems puppet(RubyGems) | = 2.7.17 | No fix listed |
| rubygems puppet(RubyGems) | = 2.7.18 | No fix listed |
| rubygems puppet(RubyGems) | = 2.7.19 | No fix listed |
| rubygems puppet(RubyGems) | = 2.7.20 | No fix listed |
| rubygems puppet(RubyGems) | = 2.7.20.rc1 | No fix listed |
| rubygems puppet(RubyGems) | = 2.7.21 | No fix listed |
| rubygems puppet(RubyGems) | = 2.7.3 | No fix listed |
| rubygems puppet(RubyGems) | = 2.7.4 | No fix listed |
| rubygems puppet(RubyGems) | = 2.7.5 | No fix listed |
| rubygems puppet(RubyGems) | = 2.7.6 | No fix listed |
| rubygems puppet(RubyGems) | = 2.7.8 | No fix listed |
| rubygems puppet(RubyGems) | = 2.7.9 | No fix listed |
| rubygems puppet(RubyGems) | = 3.2.1 | No fix listed |
| rubygems puppet(RubyGems) | = 3.2.1.rc1 | No fix listed |
| debian/puppet(Debian:11) | < 3.2.2-1 | 3.2.2-1 |
| puppet | = 2.7.2 | No fix listed |
| puppet | = 2.7.10 | No fix listed |
Show 36 more
| Product | Affected versions | Fixed in |
|---|---|---|
| puppet | = 2.7.11 | No fix listed |
| puppet | = 2.7.12 | No fix listed |
| puppet | = 2.7.13 | No fix listed |
| puppet | = 2.7.14 | No fix listed |
| puppet | = 2.7.16 | No fix listed |
| puppet | = 2.7.17 | No fix listed |
| puppet | = 2.7.18 | No fix listed |
| puppet | = 2.7.21 | No fix listed |
| puppet | = 3.2.1 | No fix listed |
| puppetlabs puppet | = 2.7.0 | No fix listed |
| puppetlabs puppet | = 2.7.1 | No fix listed |
| puppetlabs puppet | = 2.7.19 | No fix listed |
| puppetlabs puppet | = 2.7.20 | No fix listed |
| puppetlabs puppet | = 2.7.20-rc1 | No fix listed |
| puppetlabs puppet | = 3.2.0 | No fix listed |
| puppetlabs puppet | = 1.0.0 | No fix listed |
| puppetlabs puppet | = 1.1.0 | No fix listed |
| puppetlabs puppet | = 1.2.0 | No fix listed |
| puppetlabs puppet | = 2.5.0 | No fix listed |
| puppetlabs puppet | = 2.6.0 | No fix listed |
| puppetlabs puppet | = 2.7.2 | No fix listed |
| Canonical Ubuntu Linux | = 12.04 | No fix listed |
| Canonical Ubuntu Linux | = 12.10 | No fix listed |
| Canonical Ubuntu Linux | = 13.04 | No fix listed |
| novell suse linux enterprise desktop | = 11-sp3 | No fix listed |
| novell suse linux enterprise desktop | = 11.0-sp2 | No fix listed |
| novell suse linux enterprise server | = 11.0-sp2 | No fix listed |
| novell suse linux enterprise server | = 11.0-sp3 | No fix listed |
| puppet enterprise | <= 2.8.1 | No fix listed |
| puppet enterprise | = 1.0 | No fix listed |
| puppet enterprise | = 1.1 | No fix listed |
| puppet enterprise | = 1.2.0 | No fix listed |
| puppet enterprise | = 2.0.0 | No fix listed |
| puppet enterprise | = 2.5.1 | No fix listed |
| puppet enterprise | = 2.5.2 | No fix listed |
| puppet enterprise | = 2.8.0 | No fix listed |
References
- nvd.nist.gov third-party-advisory vendor-advisory
- puppetlabs.com vendor-advisory
- SUSE-SU-2013:1304 vendor-advisory
- openSUSE-SU-2013:1370 vendor-advisory
- RHSA-2013:1283 vendor-advisory
- RHSA-2013:1284 vendor-advisory
- DSA-2715 vendor-advisory
- USN-1886-1 vendor-advisory
- github.com exploit
- www.puppet.com
- github.com
- github.com product
- security-tracker.debian.org vendor-advisory
- 54429 third-party-advisory vendor-advisory