Vulnerability Report

CVE-2017-2295

RCE

Title: Puppet RCE

RCE

Proof Of Concept

No public PoC currently indexed for CVE-2017-2295.

CWE Category CWE-502

Published Date Jul 05, 2017

Modified Date May 13, 2026

Exploit Status Not Found

Score 8.2 CVSS v3.0

Exploit Probability (EPSS)

1.45%

Vulnerability Summary

CVE-2017-2295: Versions of Puppet prior to 4.10.1 will deserialize data off the wire (from the agent to the server, in this case) with a attacker-specified format. This could be used to force YAML deserialization in an unsafe manner, which would lead to remote code execution. This change constrains the format of data on the wire to PSON or safely decoded YAML.

Impacted Vendors

reductivelabs 1

puppet 1

Reference Links

http://www.debian.org/security/2017/dsa-3862 http://www.securityfocus.com/bid/98582 https://puppet.com/security/cve/cve-2017-2295 http://www.debian.org/security/2017/dsa-3862 http://www.securityfocus.com/bid/98582 https://puppet.com/security/cve/cve-2017-2295

CVSS v3.0

Source Entity [email protected]

Severity HIGH

8.2

Attack Vector

NETWORK

Complexity

HIGH

Privileges

N/A

Interaction

NONE

Confidentiality

N/A

Integrity

N/A

Availability

N/A

Scope

CHANGED

RAW VECTOR CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N

CVSS v2.0

Source Entity [email protected]

Severity MEDIUM

6.0

Access Vector

N/A

Authentication

N/A

RAW VECTOR AV:N/AC:M/Au:S/C:P/I:P/A:P

Associated Attack Patterns (CAPEC)

Total: Patterns