CVE-2023-1894
Fixed in a distro release EPSS <1%CVSS 5.3
A Regular Expression Denial of Service (ReDoS) issue was discovered in Puppet Server 7.9.2 certificate validation. An issue related to specifically crafted certificate names significantly slowed down server operations.
Products: Puppet Enterprise, Puppet server
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | puppetserver | 7.9.5-2 |
| Debian 13 | puppetserver | 7.9.5-2 |
| Red Hat satellite 6.14 | foreman | 0:3.7.0.9-1.el8sat |
| Red Hat satellite 6.14 | foreman-cli | 0:3.7.0.9-1.el8sat |
| Red Hat satellite 6.14 | foreman-debug | 0:3.7.0.9-1.el8sat |
| Red Hat satellite 6.14 | foreman-dynflow-sidekiq | 0:3.7.0.9-1.el8sat |
| Red Hat satellite 6.14 | foreman-ec2 | 0:3.7.0.9-1.el8sat |
| Red Hat satellite 6.14 | foreman-journald | 0:3.7.0.9-1.el8sat |
| Red Hat satellite 6.14 | foreman-libvirt | 0:3.7.0.9-1.el8sat |
| Red Hat satellite 6.14 | foreman-openstack | 0:3.7.0.9-1.el8sat |
| Red Hat satellite 6.14 | foreman-ovirt | 0:3.7.0.9-1.el8sat |
| Red Hat satellite 6.14 | foreman-postgresql | 0:3.7.0.9-1.el8sat |
| Red Hat satellite 6.14 | foreman-redis | 0:3.7.0.9-1.el8sat |
| Red Hat satellite 6.14 | foreman-service | 0:3.7.0.9-1.el8sat |
| Red Hat satellite 6.14 | foreman-telemetry | 0:3.7.0.9-1.el8sat |
| Red Hat satellite 6.14 | foreman-vmware | 0:3.7.0.9-1.el8sat |
| Red Hat satellite 6.14 | puppet-agent | 0:7.26.0-3.el8sat |
| Red Hat satellite 6.14 | puppetserver | 0:7.11.0-1.el8sat |
| Red Hat satellite 6.14 | python-django | 0:3.2.21-1.el8pc |
| Red Hat satellite 6.14 | python-future | 0:0.18.3-1.el8pc |
| Red Hat satellite 6.14 | python-gitpython | 0:3.1.32-1.el8pc |
| Red Hat satellite 6.14 | python-pulp-ansible | 1:0.16.0-1.el8pc |
| Red Hat satellite 6.14 | python-requests | 0:2.31.0-1.el8pc |
| Red Hat satellite 6.14 | python-sqlparse | 0:0.4.4-1.el8pc |
| Red Hat satellite 6.14 | python39-django | 0:3.2.21-1.el8pc |
| Red Hat satellite 6.14 | python39-future | 0:0.18.3-1.el8pc |
| Red Hat satellite 6.14 | python39-gitpython | 0:3.1.32-1.el8pc |
| Red Hat satellite 6.14 | python39-pulp-ansible | 1:0.16.0-1.el8pc |
| Red Hat satellite 6.14 | python39-requests | 0:2.31.0-1.el8pc |
| Red Hat satellite 6.14 | python39-sqlparse | 0:0.4.4-1.el8pc |
| Red Hat satellite 6.14 | rubygem-actionpack | 0:6.1.7.3-1.el8sat |
| Red Hat satellite 6.14 | rubygem-activerecord | 0:6.1.7.3-1.el8sat |
| Red Hat satellite 6.14 | rubygem-activesupport | 0:6.1.7.3-1.el8sat |
| Red Hat satellite 6.14 | rubygem-git | 0:1.18.0-1.el8sat |
| Red Hat satellite 6.14 | rubygem-globalid | 0:1.1.0-1.el8sat |
| Red Hat satellite 6.14 | rubygem-kubeclient | 0:4.10.1-1.el8sat |
| Red Hat satellite 6.14 | rubygem-rack | 0:2.2.7-1.el8sat |
| Red Hat satellite 6.14 | yggdrasil-worker-forwarder | 0:0.0.3-1.el8sat |
| Red Hat satellite capsule 6.14 | foreman | 0:3.7.0.9-1.el8sat |
| Red Hat satellite capsule 6.14 | foreman-debug | 0:3.7.0.9-1.el8sat |
| Red Hat satellite capsule 6.14 | puppet-agent | 0:7.26.0-3.el8sat |
| Red Hat satellite capsule 6.14 | puppetserver | 0:7.11.0-1.el8sat |
| Red Hat satellite capsule 6.14 | python-django | 0:3.2.21-1.el8pc |
| Red Hat satellite capsule 6.14 | python-future | 0:0.18.3-1.el8pc |
| Red Hat satellite capsule 6.14 | python-gitpython | 0:3.1.32-1.el8pc |
| Red Hat satellite capsule 6.14 | python-pulp-ansible | 1:0.16.0-1.el8pc |
| Red Hat satellite capsule 6.14 | python-requests | 0:2.31.0-1.el8pc |
| Red Hat satellite capsule 6.14 | python-sqlparse | 0:0.4.4-1.el8pc |
| Red Hat satellite capsule 6.14 | python39-django | 0:3.2.21-1.el8pc |
| Red Hat satellite capsule 6.14 | python39-future | 0:0.18.3-1.el8pc |
| Red Hat satellite capsule 6.14 | python39-gitpython | 0:3.1.32-1.el8pc |
| Red Hat satellite capsule 6.14 | python39-pulp-ansible | 1:0.16.0-1.el8pc |
| Red Hat satellite capsule 6.14 | python39-requests | 0:2.31.0-1.el8pc |
| Red Hat satellite capsule 6.14 | python39-sqlparse | 0:0.4.4-1.el8pc |
| Red Hat satellite capsule 6.14 | rubygem-rack | 0:2.2.7-1.el8sat |
| Red Hat satellite utils 6.14 | foreman | 0:3.7.0.9-1.el8sat |
| Red Hat satellite utils 6.14 | foreman-cli | 0:3.7.0.9-1.el8sat |
| Ubuntu 14.04 LTS | puppet | no fix |
| Ubuntu 18.04 LTS | puppet | no fix |
| Ubuntu 20.04 LTS | puppet | no fix |
| Ubuntu 22.04 LTS | puppet | no fix |
| Ubuntu 24.04 LTS | puppetserver | no fix |
| Ubuntu 25.10 | puppetserver | no fix |
| Ubuntu 26.04 LTS | puppetserver | no fix |
| Ubuntu 26.10 | puppetserver | no fix |
| Ubuntu Pro 16.04 LTS | puppet | no fix |