Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2023-1894

A Regular Expression Denial of Service (ReDoS) issue was discovered in Puppet Server 7.9.2 certificate validation. An issue related to specifically crafted certificate names signif

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
puppet

Description

A Regular Expression Denial of Service (ReDoS) issue was discovered in Puppet Server 7.9.2 certificate validation. An issue related to specifically crafted certificate names significantly slowed down server operations.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Puppet Puppet Enterprise

Default version status: unaffected

  • 2021.7.1 to < 2021.7.3affected
  • 2023.0.0 to < 2023.1.0affected

Puppet Puppet Server

Default version status: unaffected

  • 7.9.2 to < 7.11.0affected
  • 7.9.2 to < 8.0.0affected

References