CVE-2013-3567

Puppet 2.7.x < 2.7.22 and 3.2.x < 3.2.2 - Remote Code Execution via YAML Deserialization

Title source: llm
STIX 2.1

Description

Puppet 2.7.x before 2.7.22 and 3.2.x before 3.2.2, and Puppet Enterprise before 2.8.2, deserializes untrusted YAML, which allows remote attackers to instantiate arbitrary Ruby classes and execute arbitrary code via a crafted REST API call.

References (8)

Core 8
Core References
Vendor Advisory vendor-advisory x_refsource_redhat
http://rhn.redhat.com/errata/RHSA-2013-1284.html
Vendor Advisory vendor-advisory x_refsource_redhat
http://rhn.redhat.com/errata/RHSA-2013-1283.html
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/54429
Vendor Advisory vendor-advisory x_refsource_ubuntu
http://www.ubuntu.com/usn/USN-1886-1
Vendor Advisory x_refsource_confirm
https://puppetlabs.com/security/cve/cve-2013-3567/
Third Party Advisory vendor-advisory x_refsource_debian
http://www.debian.org/security/2013/dsa-2715

Scores

EPSS 0.0577
EPSS Percentile 90.6%

Details

CWE
CWE-20
Status published
Products (37)
canonical/ubuntu_linux 12.04
canonical/ubuntu_linux 12.10
canonical/ubuntu_linux 13.04
novell/suse_linux_enterprise_desktop 11 sp3
novell/suse_linux_enterprise_desktop 11.0 sp2
novell/suse_linux_enterprise_server 11.0 sp2 (3 CPE variants)
puppet/puppet 2.7.2
puppet/puppet 2.7.10
puppet/puppet 2.7.11
puppet/puppet 2.7.12
... and 27 more
Published Aug 19, 2013
Tracked Since Feb 18, 2026