CVE-2018-6508
N/A
N/A
Summary
Puppet Enterprise 2017.3.x prior to 2017.3.3 are vulnerable to a remote execution bug when a specially crafted string was passed into the facter_task or puppet_conf tasks. This vulnerability only affects tasks in the affected modules, if you are not using puppet tasks you are not affected by this vulnerability.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Puppet | Puppet Enterprise | 2017.3.x prior to 2017.3.4 | affected |
| Puppet | puppetlabs/facter_task | prior to 0.1.5 | affected |
| Puppet | puppetlabs/puppet_conf | prior to 0.1.5 | affected |
| Puppet | puppetlabs/apt | prior to 4.5.1 | affected |
| Puppet | puppetlabs/mysql | prior to 5.2.1 | affected |
| Puppet | puppetlabs/apache | prior to 2.3.1 | affected |
Weaknesses
- Remote Code Execution
ADP Enrichment
CVE Program Container
Additional References
References
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.