CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2013-3567

Puppet 2.7.x before 2.7.22 and 3.2.x before 3.2.2, and Puppet Enterprise before 2.8.2, deserializes untrusted YAML, which allows remote attackers to instantiate arbitrary Ruby classes and execute arbitrary code via a crafted REST API call.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.111

EPSS Ranking 93.2%

CVSS Severity

CVSS v2 Score 7.5

References

Products affected by CVE-2013-3567

Puppet » Puppet » Version: 2.7.10

cpe:2.3:a:puppet:puppet:2.7.10
Puppet » Puppet » Version: 2.7.11

cpe:2.3:a:puppet:puppet:2.7.11
Puppet » Puppet » Version: 2.7.12

cpe:2.3:a:puppet:puppet:2.7.12
Puppet » Puppet » Version: 2.7.13

cpe:2.3:a:puppet:puppet:2.7.13
Puppet » Puppet » Version: 2.7.14

cpe:2.3:a:puppet:puppet:2.7.14
Puppet » Puppet » Version: 2.7.16

cpe:2.3:a:puppet:puppet:2.7.16
Puppet » Puppet » Version: 2.7.17

cpe:2.3:a:puppet:puppet:2.7.17
Puppet » Puppet » Version: 2.7.18

cpe:2.3:a:puppet:puppet:2.7.18
Puppet » Puppet » Version: 2.7.2

cpe:2.3:a:puppet:puppet:2.7.2
Puppet » Puppet » Version: 2.7.21

cpe:2.3:a:puppet:puppet:2.7.21
Puppet » Puppet » Version: 3.2.1

cpe:2.3:a:puppet:puppet:3.2.1
Puppet » Puppet Enterprise » Version: N/A

cpe:2.3:a:puppet:puppet_enterprise:-
Puppet » Puppet Enterprise » Version: 1.0

cpe:2.3:a:puppet:puppet_enterprise:1.0
Puppet » Puppet Enterprise » Version: 1.1

cpe:2.3:a:puppet:puppet_enterprise:1.1
Puppet » Puppet Enterprise » Version: 1.2.0

cpe:2.3:a:puppet:puppet_enterprise:1.2.0
Puppet » Puppet Enterprise » Version: 1.2.1

cpe:2.3:a:puppet:puppet_enterprise:1.2.1
Puppet » Puppet Enterprise » Version: 1.2.2

cpe:2.3:a:puppet:puppet_enterprise:1.2.2
Puppet » Puppet Enterprise » Version: 1.2.3

cpe:2.3:a:puppet:puppet_enterprise:1.2.3
Puppet » Puppet Enterprise » Version: 1.2.4

cpe:2.3:a:puppet:puppet_enterprise:1.2.4
Puppet » Puppet Enterprise » Version: 1.2.5

cpe:2.3:a:puppet:puppet_enterprise:1.2.5
Puppet » Puppet Enterprise » Version: 1.2.6

cpe:2.3:a:puppet:puppet_enterprise:1.2.6
Puppet » Puppet Enterprise » Version: 1.2.7

cpe:2.3:a:puppet:puppet_enterprise:1.2.7
Puppet » Puppet Enterprise » Version: 2.0.0

cpe:2.3:a:puppet:puppet_enterprise:2.0.0
Puppet » Puppet Enterprise » Version: 2.0.1

cpe:2.3:a:puppet:puppet_enterprise:2.0.1
Puppet » Puppet Enterprise » Version: 2.0.2

cpe:2.3:a:puppet:puppet_enterprise:2.0.2
Puppet » Puppet Enterprise » Version: 2.0.3

cpe:2.3:a:puppet:puppet_enterprise:2.0.3
Puppet » Puppet Enterprise » Version: 2.5.0

cpe:2.3:a:puppet:puppet_enterprise:2.5.0
Puppet » Puppet Enterprise » Version: 2.5.1

cpe:2.3:a:puppet:puppet_enterprise:2.5.1
Puppet » Puppet Enterprise » Version: 2.5.2

cpe:2.3:a:puppet:puppet_enterprise:2.5.2
Puppet » Puppet Enterprise » Version: 2.5.3

cpe:2.3:a:puppet:puppet_enterprise:2.5.3
Puppet » Puppet Enterprise » Version: 2.6.0

cpe:2.3:a:puppet:puppet_enterprise:2.6.0
Puppet » Puppet Enterprise » Version: 2.6.1

cpe:2.3:a:puppet:puppet_enterprise:2.6.1
Puppet » Puppet Enterprise » Version: 2.7.0

cpe:2.3:a:puppet:puppet_enterprise:2.7.0
Puppet » Puppet Enterprise » Version: 2.7.1

cpe:2.3:a:puppet:puppet_enterprise:2.7.1
Puppet » Puppet Enterprise » Version: 2.7.2

cpe:2.3:a:puppet:puppet_enterprise:2.7.2
Puppet » Puppet Enterprise » Version: 2.8.0

cpe:2.3:a:puppet:puppet_enterprise:2.8.0
Puppet » Puppet Enterprise » Version: 2.8.1

cpe:2.3:a:puppet:puppet_enterprise:2.8.1
Puppetlabs » Puppet » Version: 1.0.0

cpe:2.3:a:puppetlabs:puppet:1.0.0
Puppetlabs » Puppet » Version: 1.1.0

cpe:2.3:a:puppetlabs:puppet:1.1.0
Puppetlabs » Puppet » Version: 1.2.0

cpe:2.3:a:puppetlabs:puppet:1.2.0
Puppetlabs » Puppet » Version: 2.5.0

cpe:2.3:a:puppetlabs:puppet:2.5.0
Puppetlabs » Puppet » Version: 2.6.0

cpe:2.3:a:puppetlabs:puppet:2.6.0
Puppetlabs » Puppet » Version: 2.7.0

cpe:2.3:a:puppetlabs:puppet:2.7.0
Puppetlabs » Puppet » Version: 2.7.1

cpe:2.3:a:puppetlabs:puppet:2.7.1
Puppetlabs » Puppet » Version: 2.7.19

cpe:2.3:a:puppetlabs:puppet:2.7.19
Puppetlabs » Puppet » Version: 2.7.2

cpe:2.3:a:puppetlabs:puppet:2.7.2
Puppetlabs » Puppet » Version: 2.7.20

cpe:2.3:a:puppetlabs:puppet:2.7.20
Puppetlabs » Puppet » Version: 3.2.0

cpe:2.3:a:puppetlabs:puppet:3.2.0
Canonical » Ubuntu Linux » Version: 12.04

cpe:2.3:o:canonical:ubuntu_linux:12.04
Canonical » Ubuntu Linux » Version: 12.10

cpe:2.3:o:canonical:ubuntu_linux:12.10
Canonical » Ubuntu Linux » Version: 13.04

cpe:2.3:o:canonical:ubuntu_linux:13.04
Novell » Suse Linux Enterprise Desktop » Version: 11

cpe:2.3:o:novell:suse_linux_enterprise_desktop:11
Novell » Suse Linux Enterprise Desktop » Version: 11.0

cpe:2.3:o:novell:suse_linux_enterprise_desktop:11.0
Novell » Suse Linux Enterprise Server » Version: 11.0

cpe:2.3:o:novell:suse_linux_enterprise_server:11.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2013-3567

Products

Pricing

Contact Us