Puppet 2.7.x before 2.7.22 and 3.2.x before 3.2.2, and Puppet Enterprise before 2.8.2, deserializes untrusted YAML, which allows remote attackers to instantiate arbitrary Ruby classes and execute arbitrary code via a crafted REST API call.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact Partial

Integrity Impact Partial

Availability Impact Partial

This CVE is not in the KEV list.

The EPSS score is 0.11139.

Key SSVC decision points have not yet been added.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
n/a n/a affected
Version Status Constraints
n/a affected —

Configuration 1 [-]

OR cpe:2.3:a:puppet:puppet:2.7.2:*:*:*:*:*:*:*
cpe:2.3:a:puppet:puppet:2.7.10:*:*:*:*:*:*:*
cpe:2.3:a:puppet:puppet:2.7.11:*:*:*:*:*:*:*
cpe:2.3:a:puppet:puppet:2.7.12:*:*:*:*:*:*:*
cpe:2.3:a:puppet:puppet:2.7.13:*:*:*:*:*:*:*
cpe:2.3:a:puppet:puppet:2.7.14:*:*:*:*:*:*:*
cpe:2.3:a:puppet:puppet:2.7.16:*:*:*:*:*:*:*
cpe:2.3:a:puppet:puppet:2.7.17:*:*:*:*:*:*:*
cpe:2.3:a:puppet:puppet:2.7.18:*:*:*:*:*:*:*
cpe:2.3:a:puppet:puppet:2.7.21:*:*:*:*:*:*:*
cpe:2.3:a:puppet:puppet:3.2.1:*:*:*:*:*:*:*
cpe:2.3:a:puppetlabs:puppet:2.7.0:*:*:*:*:*:*:*
cpe:2.3:a:puppetlabs:puppet:2.7.1:*:*:*:*:*:*:*
cpe:2.3:a:puppetlabs:puppet:2.7.19:*:*:*:*:*:*:*
cpe:2.3:a:puppetlabs:puppet:2.7.20:*:*:*:*:*:*:*
cpe:2.3:a:puppetlabs:puppet:2.7.20:rc1:*:*:*:*:*:*
cpe:2.3:a:puppetlabs:puppet:3.2.0:*:*:*:*:*:*:*

Configuration 2 [-]

OR cpe:2.3:o:canonical:ubuntu_linux:12.04:-:lts:*:*:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:12.10:*:*:*:*:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:13.04:*:*:*:*:*:*:*

Configuration 3 [-]

OR cpe:2.3:o:novell:suse_linux_enterprise_desktop:11:sp3:*:*:*:*:*:*
cpe:2.3:o:novell:suse_linux_enterprise_desktop:11.0:sp2:*:*:*:*:*:*
cpe:2.3:o:novell:suse_linux_enterprise_server:11.0:sp2:*:*:*:vmware:*:*
cpe:2.3:o:novell:suse_linux_enterprise_server:11.0:sp3:*:*:*:*:*:*
cpe:2.3:o:novell:suse_linux_enterprise_server:11.0:sp3:*:*:*:vmware:*:*

Configuration 4 [-]

OR cpe:2.3:a:puppet:puppet_enterprise:*:*:*:*:*:*:*:*
cpe:2.3:a:puppet:puppet_enterprise:1.0:*:*:*:*:*:*:*
cpe:2.3:a:puppet:puppet_enterprise:1.1:*:*:*:*:*:*:*
cpe:2.3:a:puppet:puppet_enterprise:1.2.0:*:*:*:*:*:*:*
cpe:2.3:a:puppet:puppet_enterprise:2.0.0:*:*:*:*:*:*:*
cpe:2.3:a:puppet:puppet_enterprise:2.5.1:*:*:*:*:*:*:*
cpe:2.3:a:puppet:puppet_enterprise:2.5.2:*:*:*:*:*:*:*
cpe:2.3:a:puppet:puppet_enterprise:2.8.0:*:*:*:*:*:*:*
cpe:2.3:a:puppetlabs:puppet:1.0.0:-:enterprise:*:*:*:*:*
cpe:2.3:a:puppetlabs:puppet:1.1.0:-:enterprise:*:*:*:*:*
cpe:2.3:a:puppetlabs:puppet:1.2.0:-:enterprise:*:*:*:*:*
cpe:2.3:a:puppetlabs:puppet:2.5.0:-:enterprise:*:*:*:*:*
cpe:2.3:a:puppetlabs:puppet:2.6.0:-:enterprise:*:*:*:*:*
cpe:2.3:a:puppetlabs:puppet:2.7.0:-:enterprise:*:*:*:*:*
cpe:2.3:a:puppetlabs:puppet:2.7.1:-:enterprise:*:*:*:*:*
cpe:2.3:a:puppetlabs:puppet:2.7.2:-:enterprise:*:*:*:*:*
Package CPE Advisory Released Date
OpenStack 3 for RHEL 6
facter-0:1.6.6-1.el6_4 cpe:/a:redhat:openstack:3::el6 RHSA-2013:1283 2013-09-24T00:00:00Z
hiera-0:1.0.0-3.el6_4 cpe:/a:redhat:openstack:3::el6 RHSA-2013:1283 2013-09-24T00:00:00Z
puppet-0:3.2.4-1.el6_4 cpe:/a:redhat:openstack:3::el6 RHSA-2013:1283 2013-09-24T00:00:00Z
ruby-augeas-0:0.4.1-1.el6_4 cpe:/a:redhat:openstack:3::el6 RHSA-2013:1283 2013-09-24T00:00:00Z
ruby-shadow-0:1.4.1-13.el6_4 cpe:/a:redhat:openstack:3::el6 RHSA-2013:1283 2013-09-24T00:00:00Z
ruby193-puppet-0:3.1.1-11.1.el6ost cpe:/a:redhat:openstack:3::el6 RHSA-2013:1284 2013-09-24T00:00:00Z

No data.

Project Subscriptions

Vendors Products
Canonical Subscribe
Ubuntu Linux Subscribe
Novell Subscribe
Suse Linux Enterprise Desktop Subscribe
Suse Linux Enterprise Server Subscribe
Puppet Subscribe
Puppet Subscribe
Puppet Enterprise Subscribe
Puppetlabs Subscribe
Puppet Subscribe
Redhat Subscribe
Openstack Subscribe
Advisories
Source ID Title
Debian DSA Debian DSA DSA-2715-1 puppet security update
Github GHSA Github GHSA GHSA-f7p5-w2cr-7cp7 Puppet Improper Input Validation vulnerability
Ubuntu USN Ubuntu USN USN-1886-1 Puppet vulnerability
Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00002.html cve-icon cve-icon
http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00019.html cve-icon cve-icon
http://puppetlabs.com/security/cve/cve-2013-3567/ cve-icon
http://rhn.redhat.com/errata/RHSA-2013-1283.html cve-icon cve-icon
http://rhn.redhat.com/errata/RHSA-2013-1284.html cve-icon cve-icon
http://secunia.com/advisories/54429 cve-icon cve-icon
http://www.debian.org/security/2013/dsa-2715 cve-icon cve-icon
http://www.ubuntu.com/usn/USN-1886-1 cve-icon cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2013-3567 cve-icon
https://puppetlabs.com/security/cve/cve-2013-3567/ cve-icon cve-icon
https://www.cve.org/CVERecord?id=CVE-2013-3567 cve-icon
History

No history.

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published:

Updated: 2024-08-06T16:14:56.276Z

Reserved: 2013-05-21T00:00:00

Link: CVE-2013-3567

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Deferred

Published: 2013-08-19T23:55:08.523

Modified: 2025-04-11T00:51:21.963

Link: CVE-2013-3567

cve-icon Redhat

Severity : Critical

Publid Date: 2013-06-18T00:00:00Z

Links: CVE-2013-3567 - Bugzilla

cve-icon OpenCVE Enrichment

No data.

Weaknesses