Search for packages
| purl | pkg:deb/debian/puppet@3.7.2-4%2Bdeb8u1 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-18aq-72zg-3uc9
Aliases: CVE-2017-2295 |
puppet: Unsafe YAML deserialization |
Affected by 1 other vulnerability. |
|
VCID-8xgm-pabz-hkeg
Aliases: CVE-2017-10689 GHSA-vw22-465p-8j5w |
Improper Privilege Management In previous versions of Puppet Agent it was possible to install a module with world writable permissions. Puppet Agent 5.3.4 and 1.10.10 included a fix to this vulnerability. |
Affected by 0 other vulnerabilities. |
|
VCID-bt3p-h1js-53gg
Aliases: CVE-2016-5713 |
Versions of Puppet Agent prior to 1.6.0 included a version of the Puppet Execution Protocol (PXP) agent that passed environment variables through to Puppet runs. This could allow unauthorized code to be loaded. This bug was first introduced in Puppet Agent 1.3.0. |
Affected by 2 other vulnerabilities. |
|
VCID-wkb1-dm1m-67db
Aliases: CVE-2016-5714 |
Multiple vulnerabilities have been found in Puppet Agent, the worst of which could result in the execution of arbitrary code. |
Affected by 2 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-18aq-72zg-3uc9 | puppet: Unsafe YAML deserialization |
CVE-2017-2295
|