Known vulnerabilities in Puppet Agent

Software: Puppet Agent
Software CPE: cpe:2.3:a:puppet_labs:puppet:*:*:*:*:*:*:*:*
Website:
Total vulnerabilities: 35
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Puppet Agent Puppet Agent is affected by 35 known vulnerabilities: 5 high, 15 medium, 15 low Critical High Medium Low

Vulnerabilities (35)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU62794 - Unprotected Transport of Credentials
CVE-2021-27023
CWE-523 Medium
No
No
6.25.1, 7.12.1 04.05.2022 SB2022050414
SB2022050430
SB2022060135
and 5 more
#VU62793 - Resource Management Errors
CVE-2021-27025
CWE-399 Low
No
No
6.25.1, 7.12.1 04.05.2022 SB2022050414
SB2022050430
SB2022060135
and 5 more
#VU54500 - Permissions, Privileges, and Access Controls
CVE-2021-27021
CWE-264 Low
No
No
7.7.0 01.07.2021 SB2021070123
SB2021070125
#VU37571 - Improper input validation
CVE-2017-2293
CWE-20 Medium
No
No
- 01.02.2018 SB2017070515
#VU37572 - Improper input validation
CVE-2017-2296
CWE-20 Medium
No
No
- 01.02.2018 SB2018020133
#VU37573 - Improper Authentication
CVE-2017-2297
CWE-287 Medium
No
No
- 01.02.2018 SB2017070515
#VU37740 - Improper Certificate Validation
CVE-2015-4100
CWE-295 Medium
No
No
- 21.12.2017 SB2017122109
#VU38793 - Exposure of sensitive information to an unauthorized actor
CVE-2017-2294
CWE-200 Medium
No
No
- 05.07.2017 SB2017070515
#VU6804 - Deserialization of Untrusted Data
CVE-2017-2295
CWE-502 High
No
No
- 30.05.2017 SB2017053003
SB2017051216
SB2017060612
and 5 more
#VU1975 - Improper input validation
CVE-2016-2181
CWE-20 Medium
No
No
1.7.1 21.12.2016 SB2018021614
SB2016091928
SB2023030219
and 14 more
#VU1974 - Resource Management Errors
CVE-2016-2179
CWE-399 Medium
No
No
1.7.1 21.12.2016 SB2018021614
SB2016091930
SB2023030219
and 14 more
#VU1968 - Out-of-bounds write
CVE-2016-2182
CWE-787 High
No
No
1.7.1 21.12.2016 SB2018021614
SB2016091935
SB2023022033
and 14 more
#VU1589 - Observable discrepancy
CVE-2016-2178
CWE-203 Low
No
No
1.7.1 21.12.2016 SB2018021614
SB2016062205
SB2023022033
and 18 more
#VU815 - Heap-based Buffer Overflow
CVE-2016-6303
CWE-122 Low
No
No
1.7.1 10.10.2016 SB2018021614
SB2016091929
SB2023030219
and 6 more
#VU814 - Out-of-bounds read
CVE-2016-6302
CWE-125 Medium
No
No
1.7.1 10.10.2016 SB2018021614
SB2016091931
SB2023022033
and 15 more
#VU646 - Resource exhaustion
CVE-2016-6304
CWE-400 Medium
No
No
1.7.1 23.09.2016 SB2017060704
SB2018021614
SB2016092205
and 16 more
#VU645 - State Issues
CVE-2016-6305
CWE-371 Low
No
No
1.7.1 23.09.2016 SB2016092205
SB2023030219
SB2018110640
and 3 more
#VU370 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2016-2183
CWE-327 Low
Available
No
1.7.1 08.09.2016 SB2016082601
SB2017053118
SB2017011701
and 49 more
#VU308 - Out-of-bounds read
CVE-2016-2180
CWE-125 Medium
No
No
1.7.1 13.08.2016 SB2016081301
SB2018021614
SB2016090301
and 14 more
#VU24 - Download of Code Without Integrity Check
CVE-2016-2177
CWE-119 Medium
No
No
1.7.1 24.06.2016 SB2016081301
SB2017013102
SB2018021614
and 19 more


Showing elements 1 - 20 out of 35