CVE-2013-3567
Fixed in a distro release EPSS 3%
Puppet 2.7.x before 2.7.22 and 3.2.x before 3.2.2, and Puppet Enterprise before 2.8.2, deserializes untrusted YAML, which allows remote attackers to instantiate arbitrary Ruby classes and execute arbitrary code via a crafted REST API call.
Products: puppet, puppetlabs puppet, canonical ubuntu_linux, novell suse_linux_enterprise_desktop, novell suse_linux_enterprise_server, puppet_enterprise
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| RubyGems | puppet | 2.7.22 |
| RubyGems | puppet | 3.2.2 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 11 | puppet | 3.2.2-1 |
| Debian 6.0 | puppet | 2.6.2-5+squeeze8 |
| Debian 7 | puppet | 2.7.18-5 |
| Red Hat openstack 3 | facter | 0:1.6.6-1.el6_4 |
| Red Hat openstack 3 | hiera | 0:1.0.0-3.el6_4 |
| Red Hat openstack 3 | puppet | 0:3.2.4-1.el6_4 |
| Red Hat openstack 3 | puppet-server | 0:3.2.4-1.el6_4 |
| Red Hat openstack 3 | ruby-augeas | 0:0.4.1-1.el6_4 |
| Red Hat openstack 3 | ruby-augeas-debuginfo | 0:0.4.1-1.el6_4 |
| Red Hat openstack 3 | ruby-shadow | 0:1.4.1-13.el6_4 |
| Red Hat openstack 3 | ruby-shadow-debuginfo | 0:1.4.1-13.el6_4 |
| Red Hat openstack 3 | ruby193-puppet | 0:3.1.1-11.1.el6ost |
| Red Hat openstack 3 | ruby193-puppet-server | 0:3.1.1-11.1.el6ost |