Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-fwaq-2kzp-2kgc
SummaryPuppet 2.7.x before 2.7.21 and 3.1.x before 3.1.1, and Puppet Enterprise 2.7.x before 2.7.2, does not properly negotiate the SSL protocol between client and master, which allows remote attackers to conduct SSLv2 downgrade attacks against SSLv3 sessions via unspecified vectors.
Aliases
0
alias CVE-2013-1654
Fixed_packages
0
url pkg:deb/debian/puppet@2.7.18-3?distro=bullseye
purl pkg:deb/debian/puppet@2.7.18-3?distro=bullseye
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/puppet@2.7.18-3%3Fdistro=bullseye
1
url pkg:deb/debian/puppet@2.7.23-1~deb7u3
purl pkg:deb/debian/puppet@2.7.23-1~deb7u3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1n9j-3ymz-dub5
1
vulnerability VCID-38dv-ps67-r7f7
2
vulnerability VCID-3xtf-acbg-nqhe
3
vulnerability VCID-86jb-mnzj-e3cy
4
vulnerability VCID-b5ns-wtb6-fkha
5
vulnerability VCID-jj8h-wz8z-xfbq
6
vulnerability VCID-mn3q-6cs1-ukcq
7
vulnerability VCID-nrht-tzzq-eqhs
8
vulnerability VCID-wqeh-3r7d-7ffz
9
vulnerability VCID-wqm7-m41f-pqfm
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/puppet@2.7.23-1~deb7u3
2
url pkg:deb/debian/puppet@5.5.22-2?distro=bullseye
purl pkg:deb/debian/puppet@5.5.22-2?distro=bullseye
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/puppet@5.5.22-2%3Fdistro=bullseye
3
url pkg:ebuild/app-admin/puppet@2.7.23
purl pkg:ebuild/app-admin/puppet@2.7.23
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:ebuild/app-admin/puppet@2.7.23
Affected_packages
0
url pkg:deb/debian/puppet@0.20.1-1
purl pkg:deb/debian/puppet@0.20.1-1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1n9j-3ymz-dub5
1
vulnerability VCID-38dv-ps67-r7f7
2
vulnerability VCID-3xtf-acbg-nqhe
3
vulnerability VCID-6816-tprb-zqgt
4
vulnerability VCID-7gsz-qxb2-mbe7
5
vulnerability VCID-7wuf-dtva-x7ej
6
vulnerability VCID-86jb-mnzj-e3cy
7
vulnerability VCID-982t-up4e-t7eg
8
vulnerability VCID-9t7v-tnzt-cqa6
9
vulnerability VCID-b5ns-wtb6-fkha
10
vulnerability VCID-c6dw-92d3-n7c5
11
vulnerability VCID-df8e-jf8b-puec
12
vulnerability VCID-djqs-7e92-wbb7
13
vulnerability VCID-ear8-9pcm-zqfz
14
vulnerability VCID-ej47-hdx8-pbhp
15
vulnerability VCID-fjyu-jwpx-sfe5
16
vulnerability VCID-fwaq-2kzp-2kgc
17
vulnerability VCID-g1nc-3ca8-xkes
18
vulnerability VCID-g5ek-ebw1-ebhf
19
vulnerability VCID-gfnp-y7y2-f7fu
20
vulnerability VCID-jj8h-wz8z-xfbq
21
vulnerability VCID-jrdk-dzhe-z7ff
22
vulnerability VCID-jwz8-kbu1-f3d7
23
vulnerability VCID-khb1-phav-ukf8
24
vulnerability VCID-mn3q-6cs1-ukcq
25
vulnerability VCID-mntc-3nm2-xybw
26
vulnerability VCID-msp5-ahmq-hbc3
27
vulnerability VCID-nrht-tzzq-eqhs
28
vulnerability VCID-qhz5-1muw-dqgn
29
vulnerability VCID-ta3j-j5s5-hfba
30
vulnerability VCID-thv1-66q2-uuc9
31
vulnerability VCID-vxdt-q1t7-27hh
32
vulnerability VCID-wmv1-2hjk-8ycf
33
vulnerability VCID-wpqq-eg3b-3kcc
34
vulnerability VCID-wqeh-3r7d-7ffz
35
vulnerability VCID-wqm7-m41f-pqfm
36
vulnerability VCID-xhmp-nrhy-zfcn
37
vulnerability VCID-xxht-cd83-7qb9
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/puppet@0.20.1-1
1
url pkg:deb/debian/puppet@0.24.5-3%2Blenny2
purl pkg:deb/debian/puppet@0.24.5-3%2Blenny2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1n9j-3ymz-dub5
1
vulnerability VCID-38dv-ps67-r7f7
2
vulnerability VCID-3xtf-acbg-nqhe
3
vulnerability VCID-6816-tprb-zqgt
4
vulnerability VCID-7gsz-qxb2-mbe7
5
vulnerability VCID-7wuf-dtva-x7ej
6
vulnerability VCID-86jb-mnzj-e3cy
7
vulnerability VCID-982t-up4e-t7eg
8
vulnerability VCID-9t7v-tnzt-cqa6
9
vulnerability VCID-b5ns-wtb6-fkha
10
vulnerability VCID-c6dw-92d3-n7c5
11
vulnerability VCID-df8e-jf8b-puec
12
vulnerability VCID-djqs-7e92-wbb7
13
vulnerability VCID-ear8-9pcm-zqfz
14
vulnerability VCID-ej47-hdx8-pbhp
15
vulnerability VCID-fjyu-jwpx-sfe5
16
vulnerability VCID-fwaq-2kzp-2kgc
17
vulnerability VCID-g1nc-3ca8-xkes
18
vulnerability VCID-g5ek-ebw1-ebhf
19
vulnerability VCID-gfnp-y7y2-f7fu
20
vulnerability VCID-jj8h-wz8z-xfbq
21
vulnerability VCID-jrdk-dzhe-z7ff
22
vulnerability VCID-jwz8-kbu1-f3d7
23
vulnerability VCID-khb1-phav-ukf8
24
vulnerability VCID-mn3q-6cs1-ukcq
25
vulnerability VCID-mntc-3nm2-xybw
26
vulnerability VCID-msp5-ahmq-hbc3
27
vulnerability VCID-nrht-tzzq-eqhs
28
vulnerability VCID-qhz5-1muw-dqgn
29
vulnerability VCID-ta3j-j5s5-hfba
30
vulnerability VCID-thv1-66q2-uuc9
31
vulnerability VCID-vxdt-q1t7-27hh
32
vulnerability VCID-wmv1-2hjk-8ycf
33
vulnerability VCID-wpqq-eg3b-3kcc
34
vulnerability VCID-wqeh-3r7d-7ffz
35
vulnerability VCID-wqm7-m41f-pqfm
36
vulnerability VCID-xhmp-nrhy-zfcn
37
vulnerability VCID-xxht-cd83-7qb9
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/puppet@0.24.5-3%252Blenny2
2
url pkg:deb/debian/puppet@2.6.2-5%2Bsqueeze9
purl pkg:deb/debian/puppet@2.6.2-5%2Bsqueeze9
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1n9j-3ymz-dub5
1
vulnerability VCID-38dv-ps67-r7f7
2
vulnerability VCID-3xtf-acbg-nqhe
3
vulnerability VCID-6816-tprb-zqgt
4
vulnerability VCID-7gsz-qxb2-mbe7
5
vulnerability VCID-7wuf-dtva-x7ej
6
vulnerability VCID-86jb-mnzj-e3cy
7
vulnerability VCID-9t7v-tnzt-cqa6
8
vulnerability VCID-b5ns-wtb6-fkha
9
vulnerability VCID-c6dw-92d3-n7c5
10
vulnerability VCID-df8e-jf8b-puec
11
vulnerability VCID-djqs-7e92-wbb7
12
vulnerability VCID-ear8-9pcm-zqfz
13
vulnerability VCID-ej47-hdx8-pbhp
14
vulnerability VCID-fjyu-jwpx-sfe5
15
vulnerability VCID-fwaq-2kzp-2kgc
16
vulnerability VCID-g1nc-3ca8-xkes
17
vulnerability VCID-g5ek-ebw1-ebhf
18
vulnerability VCID-gfnp-y7y2-f7fu
19
vulnerability VCID-jj8h-wz8z-xfbq
20
vulnerability VCID-jrdk-dzhe-z7ff
21
vulnerability VCID-jwz8-kbu1-f3d7
22
vulnerability VCID-khb1-phav-ukf8
23
vulnerability VCID-mn3q-6cs1-ukcq
24
vulnerability VCID-mntc-3nm2-xybw
25
vulnerability VCID-nrht-tzzq-eqhs
26
vulnerability VCID-qhz5-1muw-dqgn
27
vulnerability VCID-ta3j-j5s5-hfba
28
vulnerability VCID-thv1-66q2-uuc9
29
vulnerability VCID-vxdt-q1t7-27hh
30
vulnerability VCID-wmv1-2hjk-8ycf
31
vulnerability VCID-wqeh-3r7d-7ffz
32
vulnerability VCID-wqm7-m41f-pqfm
33
vulnerability VCID-xhmp-nrhy-zfcn
34
vulnerability VCID-xxht-cd83-7qb9
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/puppet@2.6.2-5%252Bsqueeze9
3
url pkg:deb/debian/puppet@2.6.2-5%2Bsqueeze10
purl pkg:deb/debian/puppet@2.6.2-5%2Bsqueeze10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1n9j-3ymz-dub5
1
vulnerability VCID-38dv-ps67-r7f7
2
vulnerability VCID-3xtf-acbg-nqhe
3
vulnerability VCID-6816-tprb-zqgt
4
vulnerability VCID-7gsz-qxb2-mbe7
5
vulnerability VCID-7wuf-dtva-x7ej
6
vulnerability VCID-86jb-mnzj-e3cy
7
vulnerability VCID-9t7v-tnzt-cqa6
8
vulnerability VCID-b5ns-wtb6-fkha
9
vulnerability VCID-c6dw-92d3-n7c5
10
vulnerability VCID-df8e-jf8b-puec
11
vulnerability VCID-djqs-7e92-wbb7
12
vulnerability VCID-ear8-9pcm-zqfz
13
vulnerability VCID-ej47-hdx8-pbhp
14
vulnerability VCID-fjyu-jwpx-sfe5
15
vulnerability VCID-fwaq-2kzp-2kgc
16
vulnerability VCID-g1nc-3ca8-xkes
17
vulnerability VCID-g5ek-ebw1-ebhf
18
vulnerability VCID-gfnp-y7y2-f7fu
19
vulnerability VCID-jj8h-wz8z-xfbq
20
vulnerability VCID-jrdk-dzhe-z7ff
21
vulnerability VCID-jwz8-kbu1-f3d7
22
vulnerability VCID-khb1-phav-ukf8
23
vulnerability VCID-mn3q-6cs1-ukcq
24
vulnerability VCID-mntc-3nm2-xybw
25
vulnerability VCID-nrht-tzzq-eqhs
26
vulnerability VCID-qhz5-1muw-dqgn
27
vulnerability VCID-ta3j-j5s5-hfba
28
vulnerability VCID-thv1-66q2-uuc9
29
vulnerability VCID-vxdt-q1t7-27hh
30
vulnerability VCID-wmv1-2hjk-8ycf
31
vulnerability VCID-wqeh-3r7d-7ffz
32
vulnerability VCID-wqm7-m41f-pqfm
33
vulnerability VCID-xhmp-nrhy-zfcn
34
vulnerability VCID-xxht-cd83-7qb9
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/puppet@2.6.2-5%252Bsqueeze10
4
url pkg:rpm/redhat/puppet@2.6.18-1?arch=el6ost
purl pkg:rpm/redhat/puppet@2.6.18-1?arch=el6ost
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7gsz-qxb2-mbe7
1
vulnerability VCID-9t7v-tnzt-cqa6
2
vulnerability VCID-c6dw-92d3-n7c5
3
vulnerability VCID-ej47-hdx8-pbhp
4
vulnerability VCID-fwaq-2kzp-2kgc
5
vulnerability VCID-wmv1-2hjk-8ycf
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/puppet@2.6.18-1%3Farch=el6ost
References
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1654.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1654.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2013-1654
reference_id
reference_type
scores
0
value 0.00595
scoring_system epss
scoring_elements 0.69685
published_at 2026-06-04T12:55:00Z
1
value 0.00595
scoring_system epss
scoring_elements 0.69725
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2013-1654
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1654
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1654
3
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=919770
reference_id 919770
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=919770
4
reference_url https://security.gentoo.org/glsa/201308-04
reference_id GLSA-201308-04
reference_type
scores
url https://security.gentoo.org/glsa/201308-04
5
reference_url https://access.redhat.com/errata/RHSA-2013:0710
reference_id RHSA-2013:0710
reference_type
scores
url https://access.redhat.com/errata/RHSA-2013:0710
6
reference_url https://usn.ubuntu.com/1759-1/
reference_id USN-1759-1
reference_type
scores
url https://usn.ubuntu.com/1759-1/
Weaknesses
Exploits
Severity_range_scorenull
Exploitability0.5
Weighted_severity0.0
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-fwaq-2kzp-2kgc