Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2016-9686

The Puppet Communications Protocol (PCP) Broker incorrectly validates message header sizes. An attacker could use this to crash the PCP Broker, preventing commands from being sent

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
puppet

Description

The Puppet Communications Protocol (PCP) Broker incorrectly validates message header sizes. An attacker could use this to crash the PCP Broker, preventing commands from being sent to agents. This is resolved in Puppet Enterprise 2016.4.3 and 2016.5.2.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Puppet Puppet Enterprise

  • 2015.3.xaffected
  • 2016.x prior to 2016.4.3affected
  • 2016.5.1.affected

References