Known vulnerabilities in puppet-agent (Red Hat package)

Vendor: Red Hat Inc.

Software: puppet-agent (Red Hat package)

Software CPE: cpe:2.3:o:red_hat:puppet-agent_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*

Website: https://www.redhat.com/en

Total vulnerabilities: 64

Public exploits: 5

Known exploited (KEV): 2

Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Vulnerabilities (64)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU116922 - Inefficient Regular Expression Complexity CVE-2025-10990	CWE-1333	Medium	No	No	7.34.0-4.el9sat, 7.34.0-4.el8sat, 8.8.1-3.el8sat, 8.8.1-3.el9sat	13.10.2025	SB2025102868 SB2025102869 SB2025102870
#VU115011 - Out-of-bounds read CVE-2025-57052	CWE-125	Medium	No	No	7.34.0-4.el8sat, 8.8.1-3.el8sat, 8.8.1-3.el9sat	09.09.2025	SB2025090958 SB2025091516 SB2025101028 and 10 more
#VU114764 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') CVE-2025-57833	CWE-89	High	Available	No	7.34.0-4.el8sat, 8.8.1-3.el8sat, 8.8.1-3.el9sat	03.09.2025	SB2025090342 SB2025090433 SB2025090469 and 19 more
#VU105796 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2025-27610	CWE-22	Medium	No	No	8.8.1-1.el9sat	17.03.2025	SB2025031756 SB20250317118 SB20250317119 and 15 more
#VU105689 - Improper Control of Generation of Code ('Code Injection') CVE-2025-27407	CWE-94	High	No	No	8.8.1-1.el9sat	13.03.2025	SB2025031315 SB2025031316 SB2025040330 and 3 more
#VU103000 - Improper input validation CVE-2024-56374	CWE-20	Medium	No	No	8.8.1-1.el9sat	20.01.2025	SB2025012005 SB2025012029 SB2025012030 and 11 more
#VU101972 - Security Features CVE-2024-56326	CWE-254	Low	No	No	8.8.1-1.el9sat	27.12.2024	SB2024122789 SB2024122790 SB2024122791 and 78 more
#VU99570 - Exposure of sensitive information to an unauthorized actor CVE-2024-8553	CWE-200	Low	No	No	8.8.1-1.el8sat, 8.8.1-1.el9sat	31.10.2024	SB20241031110 SB2024110111 SB2024110112 and 2 more
#VU99568 - Missing release of memory after effective lifetime CVE-2024-8376	CWE-401	Medium	No	No	8.8.1-1.el8sat, 8.8.1-1.el9sat	31.10.2024	SB20241031109 SB2024110111 SB2024110112 and 7 more
#VU97593 - Improper Authentication CVE-2024-7012	CWE-287	High	No	No	8.8.1-1.el8sat, 8.8.1-1.el9sat	19.09.2024	SB2024092064 SB2024092065 SB2024092066 and 1 more
#VU96644 - Improper input validation CVE-2024-7246	CWE-20	Medium	No	No	8.8.1-1.el8sat, 8.8.1-1.el9sat	30.08.2024	SB2024083031 SB2024083036 SB2024090612 and 11 more
#VU95445 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') CVE-2024-42005	CWE-89	High	No	No	8.8.1-1.el8sat, 8.8.1-1.el9sat	07.08.2024	SB2024080728 SB2024080771 SB2024080772 and 12 more
#VU94792 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2024-5569	CWE-835	Medium	No	No	8.8.1-1.el8sat, 8.8.1-1.el9sat	26.07.2024	SB2024072688 SB2024072690 SB2024072692 and 59 more
#VU94188 - Improper input validation CVE-2024-39614	CWE-20	Medium	Available	No	8.8.1-1.el8sat, 8.8.1-1.el9sat	12.07.2024	SB2024071225 SB2024071228 SB2024071229 and 15 more
#VU94184 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2024-39330	CWE-22	Medium	No	No	8.8.1-1.el8sat, 8.8.1-1.el9sat	12.07.2024	SB2024071225 SB2024071228 SB2024071229 and 13 more
#VU94183 - Exposure of sensitive information to an unauthorized actor CVE-2024-39329	CWE-200	Medium	No	No	8.8.1-1.el8sat, 8.8.1-1.el9sat	12.07.2024	SB2024071225 SB2024071228 SB2024071229 and 14 more
#VU94182 - Improper input validation CVE-2024-38875	CWE-20	Medium	No	No	8.8.1-1.el8sat, 8.8.1-1.el9sat	12.07.2024	SB2024071225 SB2024071228 SB2024071229 and 13 more
#VU92406 - Incorrect Regular Expression CVE-2024-4067	CWE-185	Medium	No	No	8.8.1-1.el8sat, 8.8.1-1.el9sat	20.06.2024	SB20240620121 SB2024062832 SB2024070501 and 41 more
#VU92262 - Exposure of sensitive information to an unauthorized actor CVE-2024-37891	CWE-200	Low	No	No	8.8.1-1.el8sat, 8.8.1-1.el9sat	19.06.2024	SB2024061955 SB20240625146 SB2024062605 and 194 more
#VU87734 - Resource exhaustion CVE-2024-28863	CWE-400	Medium	No	No	8.8.1-1.el8sat, 8.8.1-1.el9sat	22.03.2024	SB2024032234 SB2024052306 SB2024061114 and 30 more

Showing elements 1 - 20 out of 64

Known vulnerabilities in puppet-agent (Red Hat package)

Breakdown by Severity Chart

Vulnerabilities (64)

Please verify you're human