Known vulnerabilities in puppet-common (Ubuntu package)
Vendor:
Canonical Ltd.
Software:
puppet-common (Ubuntu package)
Software CPE:
cpe:2.3:o:canonical:puppet-common_ubuntu_package:*:*:*:*:*:ubuntu:*:*
Website:
https://www.ubuntu.com/
Total vulnerabilities:
10
Public exploits:
0
Known exploited (KEV):
0
Breakdown by Severity Chart
3.8.5-2ubuntu0.1+esm1
5.5.2-2
4.10.4-2ubuntu2
4.10.4-2ubuntu3
5.4.0-2ubuntu1
5.4.0-2ubuntu2
5.5.10-4
5.5.10-4ubuntu1
5.5.10-4ubuntu2
5.5.10-2
5.5.10-3
5.5.3-1
5.5.6-1
5.5.8-1
5.5.10-1
4.8.2-5ubuntu1
4.10.4-2ubuntu1
4.8.0-1
4.8.1-1
4.8.1-2
4.8.1-3
4.8.2-1
4.8.2-2
4.8.2-3
4.8.2-3ubuntu1
4.8.2-3ubuntu2
4.5.2-1
4.5.2-1ubuntu1.1
4.5.2-1ubuntu1
3.8.4-1ubuntu1
3.8.5-1ubuntu1
3.1.1-1ubuntu1
3.2.2-1
3.2.3-1
3.2.4-2
3.2.4-2ubuntu1
3.2.4-2ubuntu2.1
3.2.4-2ubuntu2.2
3.2.4-2ubuntu2.3
2.7.18-1ubuntu2
2.7.18-4ubuntu1.1
2.7.18-4ubuntu1.2
2.7.18-4ubuntu1.3
2.7.18-4ubuntu1.4
2.7.18-4ubuntu1
2.7.11-1ubuntu3
2.7.18-1ubuntu1.1
2.7.18-1ubuntu1.2
2.7.18-1ubuntu1.3
2.7.18-1ubuntu1.4
2.7.18-1ubuntu1.5
2.7.18-1ubuntu1
2.7.6-1
2.7.6-1ubuntu1
2.7.9-1ubuntu1
2.7.9-1ubuntu2
2.7.10-1
2.7.10-1ubuntu1
2.7.11-1
2.7.11-1ubuntu1
2.7.11-1ubuntu2.1
2.7.11-1ubuntu2.2
2.7.11-1ubuntu2.3
2.7.11-1ubuntu2.4
2.7.11-1ubuntu2.5
2.7.11-1ubuntu2.6
2.6.8-1ubuntu1
2.7.1-1ubuntu1
2.7.1-1ubuntu2
2.7.1-1ubuntu3.2
2.7.1-1ubuntu3.4
2.7.1-1ubuntu3.5
2.7.1-1ubuntu3.6
2.7.1-1ubuntu3.7
2.7.1-1ubuntu3.8
2.7.1-1ubuntu3
2.6.3~rc1-0ubuntu1
2.6.3~rc2-0ubuntu1
2.6.3~rc3-0ubuntu1
2.6.3-0ubuntu1
2.6.4-2ubuntu1
2.6.4-2ubuntu2.2
2.6.4-2ubuntu2.3
2.6.4-2ubuntu2.5
2.6.4-2ubuntu2.6
2.7.1-1ubuntu3.2~natty1
2.6.4-2ubuntu2.7
2.6.4-2ubuntu2.8
2.7.1-1ubuntu3.5~natty1
2.6.4-2ubuntu2.9
2.7.1-1ubuntu3.6~natty1
2.6.4-2ubuntu2.10
2.6.4-2ubuntu2
0.25.5-1ubuntu1
2.6.0-1ubuntu1
2.6.0-1ubuntu2
2.6.0-1ubuntu3
2.6.1~rc2-0ubuntu1
2.6.1~rc3-1
2.6.1~rc4-0ubuntu1
2.6.1-0ubuntu1
2.6.1-0ubuntu2.1
2.6.1-0ubuntu2.2
2.6.1-0ubuntu2.4
2.7.1-1ubuntu3~maverick1
2.7.1-1ubuntu3.2~maverick1
2.6.1-0ubuntu2.5
2.7.1-1ubuntu3.5~maverick1
2.6.1-0ubuntu2.6
2.6.1-0ubuntu2
0.25.4-1ubuntu1
0.25.4-2ubuntu1
0.25.4-2ubuntu2
0.25.4-2ubuntu3
0.25.4-2ubuntu4
0.25.4-2ubuntu5
0.25.4-2ubuntu6.1
0.25.4-2ubuntu6.2
0.25.4-2ubuntu6.3
2.6.1-0ubuntu2~lucid1
0.25.4-2ubuntu6.4
0.25.4-2ubuntu6.5
2.7.1-1ubuntu3~lucid1
2.7.1-1ubuntu3.2~lucid1
0.25.4-2ubuntu6.6
2.7.1-1ubuntu3.5~lucid1
0.25.4-2ubuntu6.7
2.7.1-1ubuntu3.6~lucid1
2.7.1-1ubuntu3.8~ubuntu10.04.1
0.25.4-2ubuntu6.8
0.25.4-2ubuntu6
3.7.2-5ubuntu1
3.7.2-5ubuntu2
3.5.1-1
3.6.0-1
3.6.1-1ubuntu1
3.6.1-1
3.7.2-1
3.7.2-1ubuntu1
3.7.2-1ubuntu2
3.2.4-2ubuntu2
3.3.1-1ubuntu1
3.3.1-1ubuntu2
3.3.1-1ubuntu3
3.4.2-1
3.4.3-1ubuntu1
3.4.3-1ubuntu1.1
3.4.3-1ubuntu1.2
5.5.10-4ubuntu3
3.4.3-1ubuntu1.3
3.4.3-1
2.7.11-1ubuntu2
2.7.11-1ubuntu2.7
3.8.5-2ubuntu0.1
3.8.5-2
5.4.0-2ubuntu3
Vulnerabilities (10)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU10568 - Permissions, Privileges, and Access Controls CVE-2017-10689 |
CWE-264 | Low | 3.8.5-2ubuntu0.1+esm1 | 14.02.2018 |
SB2018021403 SB2018031549 SB2018031550 and 1 more |
||
| #VU6804 - Deserialization of Untrusted Data CVE-2017-2295 |
CWE-502 | High | 3.8.5-2ubuntu0.1+esm1 | 30.05.2017 |
SB2017053003 SB2017051216 SB2017060612 and 6 more |
||
| #VU42027 - Permissions, Privileges, and Access Controls CVE-2011-0528 |
CWE-264 | Low | 2.6.1-0ubuntu2.5, 2.6.4-2ubuntu2.7, 2.7.1-1ubuntu3.4 | 17.02.2014 |
SB2014021701 SB2012021408 |
||
| #VU31880 - Improper Link Resolution Before File Access ('Link Following') CVE-2013-4969 |
CWE-59 | Low | 2.7.11-1ubuntu2.6, 2.7.18-1ubuntu1.4, 2.7.18-4ubuntu1.3, 3.2.4-2ubuntu2.2 | 07.01.2014 |
SB2014010702 SB2014020305 SB2013122702 and 1 more |
||
| #VU42642 - Improper input validation CVE-2013-4761 |
CWE-20 | Medium | 2.7.11-1ubuntu2.4, 2.7.18-1ubuntu1.3, 2.7.18-4ubuntu1.2 | 21.08.2013 |
SB2014041006 SB2014012805 SB2013090403 and 1 more |
||
| #VU42645 - Permissions, Privileges, and Access Controls CVE-2013-4956 |
CWE-264 | Medium | 2.7.11-1ubuntu2.4, 2.7.18-1ubuntu1.3, 2.7.18-4ubuntu1.2 | 21.08.2013 |
SB2013090403 SB2015081504 |
||
| #VU44555 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2011-3848 |
CWE-22 | Medium | 0.25.4-2ubuntu6.2, 2.6.1-0ubuntu2.1, 2.6.4-2ubuntu2.2 | 27.10.2011 |
SB2011102702 SB2015092811 |
||
| #VU44556 - Improper Link Resolution Before File Access ('Link Following') CVE-2011-3869 |
CWE-59 | High | 0.25.4-2ubuntu6.3, 2.6.1-0ubuntu2.2, 2.6.4-2ubuntu2.3 | 27.10.2011 |
SB2011102703 SB2011103106 SB2011093002 and 2 more |
||
| #VU44557 - Improper Link Resolution Before File Access ('Link Following') CVE-2011-3870 |
CWE-59 | High | 0.25.4-2ubuntu6.3, 2.6.1-0ubuntu2.2, 2.6.4-2ubuntu2.3 | 27.10.2011 |
SB2011102703 SB2011103106 SB2011093002 and 2 more |
||
| #VU44558 - Permissions, Privileges, and Access Controls CVE-2011-3871 |
CWE-264 | Medium | 0.25.4-2ubuntu6.3, 2.6.1-0ubuntu2.2, 2.6.4-2ubuntu2.3 | 27.10.2011 |
SB2011102703 SB2011103106 SB2011093002 and 2 more |