Known vulnerabilities in Puppet Agent

Software: Puppet Agent
Software CPE: cpe:2.3:a:puppet_labs:puppet:*:*:*:*:*:*:*:*
Website:
Total vulnerabilities: 35
Public exploits: 0
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Puppet Agent Puppet Agent is affected by 35 known vulnerabilities: 5 high, 15 medium, 15 low Critical High Medium Low

Vulnerabilities (35)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU62794 - Unprotected Transport of Credentials
CVE-2021-27023
CWE-523 Medium
No
No
6.25.1, 7.12.1 04.05.2022 SB2022050414
SB2022050430
SB2022060135
and 5 more
#VU62793 - Resource Management Errors
CVE-2021-27025
CWE-399 Low
No
No
6.25.1, 7.12.1 04.05.2022 SB2022050414
SB2022050430
SB2022060135
and 5 more
#VU54500 - Permissions, Privileges, and Access Controls
CVE-2021-27021
CWE-264 Low
No
No
7.7.0 01.07.2021 SB2021070123
SB2021070125
#VU1975 - Improper input validation
CVE-2016-2181
CWE-20 Medium
No
No
1.7.1 21.12.2016 SB2018021614
SB2016091928
SB2023030219
and 15 more
#VU1974 - Resource Management Errors
CVE-2016-2179
CWE-399 Medium
No
No
1.7.1 21.12.2016 SB2018021614
SB2016091930
SB2023030219
and 15 more
#VU1968 - Out-of-bounds write
CVE-2016-2182
CWE-787 High
No
No
1.7.1 21.12.2016 SB2018021614
SB2016091935
SB2023022033
and 15 more
#VU1589 - Observable discrepancy
CVE-2016-2178
CWE-203 Low
No
No
1.7.1 21.12.2016 SB2018021614
SB2016062205
SB2023022033
and 19 more
#VU818 - Resource exhaustion
CVE-2016-6308
CWE-400 Low
No
No
1.7.1 10.10.2016 SB2016092613
SB2023030219
SB2018110640
and 2 more
#VU817 - Resource exhaustion
CVE-2016-6307
CWE-400 Low
No
No
1.7.1 10.10.2016 SB2016092612
SB2016092236
SB2023030219
and 3 more
#VU816 - Out-of-bounds read
CVE-2016-6306
CWE-125 Low
No
No
1.7.1 10.10.2016 SB2018021614
SB2016092238
SB2023022033
and 18 more
#VU815 - Heap-based Buffer Overflow
CVE-2016-6303
CWE-122 Low
No
No
1.7.1 10.10.2016 SB2018021614
SB2016091929
SB2023030219
and 7 more
#VU814 - Out-of-bounds read
CVE-2016-6302
CWE-125 Medium
No
No
1.7.1 10.10.2016 SB2018021614
SB2016091931
SB2023022033
and 16 more
#VU646 - Resource exhaustion
CVE-2016-6304
CWE-400 Medium
No
No
1.7.1 23.09.2016 SB2017060704
SB2018021614
SB2016092205
and 17 more
#VU645 - State Issues
CVE-2016-6305
CWE-371 Low
No
No
1.7.1 23.09.2016 SB2016092205
SB2023030219
SB2018110640
and 3 more
#VU370 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2016-2183
CWE-327 Low
Available
No
1.7.1 08.09.2016 SB2016082601
SB2017053118
SB2017011701
and 50 more
#VU308 - Out-of-bounds read
CVE-2016-2180
CWE-125 Medium
No
No
1.7.1 13.08.2016 SB2016081301
SB2018021614
SB2016090301
and 15 more
#VU24 - Download of Code Without Integrity Check
CVE-2016-2177
CWE-119 Medium
No
No
1.7.1 24.06.2016 SB2016081301
SB2017013102
SB2018021614
and 20 more
#VU44556 - Improper Link Resolution Before File Access ('Link Following')
CVE-2011-3869
CWE-59 High
No
No
- 27.10.2011 SB2011102703
SB2011103106
SB2011093002
and 2 more
#VU44557 - Improper Link Resolution Before File Access ('Link Following')
CVE-2011-3870
CWE-59 High
No
No
- 27.10.2011 SB2011102703
SB2011103106
SB2011093002
and 2 more
#VU44558 - Permissions, Privileges, and Access Controls
CVE-2011-3871
CWE-264 Medium
No
No
- 27.10.2011 SB2011102703
SB2011103106
SB2011093002
and 2 more


Showing elements 1 - 20 out of 35