Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-ay8r-6fdd-eqdp
Vulnerability ID VCID-ay8r-6fdd-eqdp
Aliases CVE-2013-1655
GHSA-574q-fxfj-wv6h
Summary Multiple vulnerabilities have been found in Puppet, the worst of which could lead to execution of arbitrary code.
Status Published
Exploitability 0.5
Weighted Severity 8.0
Risk 4.0
Affected and Fixed Packages Package Details
Weaknesses (4)
CWE-20 Improper Input Validation
CWE-1035 OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CWE-937 OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
System Score Found at
generic_textual HIGH http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00004.html
generic_textual HIGH http://lists.opensuse.org/opensuse-updates/2013-04/msg00056.html
epss 0.00536 https://api.first.org/data/v1/epss?cve=CVE-2013-1655
epss 0.00536 https://api.first.org/data/v1/epss?cve=CVE-2013-1655
epss 0.00536 https://api.first.org/data/v1/epss?cve=CVE-2013-1655
epss 0.00536 https://api.first.org/data/v1/epss?cve=CVE-2013-1655
cvssv3.1_qr HIGH https://github.com/advisories/GHSA-574q-fxfj-wv6h
generic_textual HIGH https://github.com/puppetlabs/puppet
generic_textual HIGH https://github.com/rubysec/ruby-advisory-db/blob/master/gems/puppet/CVE-2013-1655.yml
generic_textual HIGH https://nvd.nist.gov/vuln/detail/CVE-2013-1655
generic_textual HIGH https://puppetlabs.com/security/cve/cve-2013-1655
generic_textual HIGH https://web.archive.org/web/20200228144801/http://www.securityfocus.com/bid/58442
generic_textual HIGH https://www.puppet.com/security/cve/cve-2013-1655-unauthenticated-remote-code-execution-vulnerability
generic_textual HIGH http://ubuntu.com/usn/usn-1759-1
generic_textual HIGH http://www.debian.org/security/2013/dsa-2643
Reference id Reference type URL
http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00004.html
http://lists.opensuse.org/opensuse-updates/2013-04/msg00056.html
https://api.first.org/data/v1/epss?cve=CVE-2013-1655
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1655
http://secunia.com/advisories/52596
https://github.com/puppetlabs/puppet
https://puppetlabs.com/security/cve/cve-2013-1655
https://web.archive.org/web/20200228144801/http://www.securityfocus.com/bid/58442
http://ubuntu.com/usn/usn-1759-1
http://www.debian.org/security/2013/dsa-2643
http://www.securityfocus.com/bid/58442
CVE-2013-1655 https://nvd.nist.gov/vuln/detail/CVE-2013-1655
CVE-2013-1655 https://puppetlabs.com/security/cve/cve-2013-1655/
CVE-2013-1655-UNAUTHENTICATED-REMOTE-CODE-EXECUTION-VULNERABILITY https://www.puppet.com/security/cve/cve-2013-1655-unauthenticated-remote-code-execution-vulnerability
CVE-2013-1655.YML https://github.com/rubysec/ruby-advisory-db/blob/master/gems/puppet/CVE-2013-1655.yml
GHSA-574q-fxfj-wv6h https://github.com/advisories/GHSA-574q-fxfj-wv6h
GLSA-201308-04 https://security.gentoo.org/glsa/201308-04
USN-1759-1 https://usn.ubuntu.com/1759-1/
No exploits are available.
Exploit Prediction Scoring System (EPSS)
Percentile 0.67915
EPSS Score 0.00536
Published At June 11, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-06-11T17:56:58.058435+00:00 Gentoo Importer Import https://security.gentoo.org/glsa/201308-04 38.6.0