Search for packages
| purl | pkg:deb/debian/puppet@4.8.2-5~bpo8%2B1 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-18aq-72zg-3uc9
Aliases: CVE-2017-2295 |
puppet: Unsafe YAML deserialization |
Affected by 1 other vulnerability. |
|
VCID-8xgm-pabz-hkeg
Aliases: CVE-2017-10689 GHSA-vw22-465p-8j5w |
Improper Privilege Management In previous versions of Puppet Agent it was possible to install a module with world writable permissions. Puppet Agent 5.3.4 and 1.10.10 included a fix to this vulnerability. |
Affected by 0 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-bt3p-h1js-53gg | Versions of Puppet Agent prior to 1.6.0 included a version of the Puppet Execution Protocol (PXP) agent that passed environment variables through to Puppet runs. This could allow unauthorized code to be loaded. This bug was first introduced in Puppet Agent 1.3.0. |
CVE-2016-5713
|
| VCID-wkb1-dm1m-67db | Multiple vulnerabilities have been found in Puppet Agent, the worst of which could result in the execution of arbitrary code. |
CVE-2016-5714
|