Puppet Enterprise 2017.3.x prior to 2017.3.3 are vulnerable to a remote execution bug when a specially crafted string was passed into the facter_task or puppet_conf tasks. This vulnerability only affects tasks in the affected modules, if you are not using puppet tasks you are not affected by this vulnerability.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Puppet Enterprise
Vendor
Puppet
Product
Puppet Enterprise
Platforms
Unknown
Default status
Unknown
Puppet Enterprise · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
2017.3.x prior to 2017.3.4
affected
Unavailable
Unavailable
Unavailable
None listed
puppetlabs/facter_task
Vendor
Puppet
Product
puppetlabs/facter_task
Platforms
Unknown
Default status
Unknown
puppetlabs/facter_task · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
prior to 0.1.5
affected
Unavailable
Unavailable
Unavailable
None listed
puppetlabs/puppet_conf
Vendor
Puppet
Product
puppetlabs/puppet_conf
Platforms
Unknown
Default status
Unknown
puppetlabs/puppet_conf · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
prior to 0.1.5
affected
Unavailable
Unavailable
Unavailable
None listed
puppetlabs/apt
Vendor
Puppet
Product
puppetlabs/apt
Platforms
Unknown
Default status
Unknown
puppetlabs/apt · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
prior to 4.5.1
affected
Unavailable
Unavailable
Unavailable
None listed
puppetlabs/mysql
Vendor
Puppet
Product
puppetlabs/mysql
Platforms
Unknown
Default status
Unknown
puppetlabs/mysql · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
prior to 5.2.1
affected
Unavailable
Unavailable
Unavailable
None listed
puppetlabs/apache
Vendor
Puppet
Product
puppetlabs/apache
Platforms
Unknown
Default status
Unknown
puppetlabs/apache · Scoped product and version facts