CVE Vulnerabilities

CVE-2021-27025

Published: Nov 18, 2021 | Modified: Nov 07, 2023
CVSS 3.x
6.5
MEDIUM
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS 2.x
4 MEDIUM
AV:N/AC:L/Au:S/C:N/I:N/A:P
RedHat/V2
RedHat/V3
6.3 MODERATE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Ubuntu
MEDIUM

A flaw was discovered in Puppet Agent where the agent may silently ignore Augeas settings or may be vulnerable to a Denial of Service condition prior to the first pluginsync.

Affected Software

Name Vendor Start Version End Version
Puppet Puppet 2021.0.0 (including) 2021.4.0 (excluding)
Puppet_agent Puppet * 6.25.1 (excluding)
Puppet_agent Puppet 5.5.0 (including) 5.5.22 (including)
Puppet_agent Puppet 7.0.0 (including) 7.12.1 (excluding)
Puppet_enterprise Puppet * 2019.8.9 (excluding)
Red Hat OpenStack Platform 16.1 RedHat puppet-0:5.5.10-14.el8ost *
Red Hat OpenStack Platform 16.2 RedHat puppet-0:5.5.10-14.el8ost *
Red Hat Satellite 6.10 for RHEL 7 RedHat puppet-agent-0:6.26.0-1.el7sat *
Red Hat Satellite 6.10 for RHEL 7 RedHat puppetserver-0:6.18.0-1.el7sat *
Red Hat Satellite 6.10 for RHEL 7 RedHat puppet-agent-0:6.26.0-1.el7sat *
Red Hat Satellite 6.10 for RHEL 7 RedHat puppetserver-0:6.18.0-1.el7sat *
Satellite Tools 6.10 for RHEL 6.ELS RedHat puppet-agent-0:6.26.0-1.el6sat *
Satellite Tools 6.10 for RHEL 7 RedHat puppet-agent-0:6.26.0-1.el7sat *
Satellite Tools 6.10 for RHEL 7.2.AUS RedHat puppet-agent-0:6.26.0-1.el7sat *
Satellite Tools 6.10 for RHEL 7.3.AUS RedHat puppet-agent-0:6.26.0-1.el7sat *
Satellite Tools 6.10 for RHEL 7.4.AUS RedHat puppet-agent-0:6.26.0-1.el7sat *
Satellite Tools 6.10 for RHEL 7.4.E4S RedHat puppet-agent-0:6.26.0-1.el7sat *
Satellite Tools 6.10 for RHEL 7.4.TUS RedHat puppet-agent-0:6.26.0-1.el7sat *
Satellite Tools 6.10 for RHEL 7.6.AUS RedHat puppet-agent-0:6.26.0-1.el7sat *
Satellite Tools 6.10 for RHEL 7.6.E4S RedHat puppet-agent-0:6.26.0-1.el7sat *
Satellite Tools 6.10 for RHEL 7.6.TUS RedHat puppet-agent-0:6.26.0-1.el7sat *
Satellite Tools 6.10 for RHEL 7.7.AUS RedHat puppet-agent-0:6.26.0-1.el7sat *
Satellite Tools 6.10 for RHEL 7.7.E4S RedHat puppet-agent-0:6.26.0-1.el7sat *
Satellite Tools 6.10 for RHEL 7.7.TUS RedHat puppet-agent-0:6.26.0-1.el7sat *
Satellite Tools 6.10 for RHEL 8 RedHat puppet-agent-0:6.26.0-1.el8sat *
Satellite Tools 6.10 for RHEL 8.1.E4S RedHat puppet-agent-0:6.26.0-1.el8sat *
Satellite Tools 6.10 for RHEL 8.1.EUS RedHat puppet-agent-0:6.26.0-1.el8sat *
Satellite Tools 6.10 for RHEL 8.2.AUS RedHat puppet-agent-0:6.26.0-1.el8sat *
Satellite Tools 6.10 for RHEL 8.2.E4S RedHat puppet-agent-0:6.26.0-1.el8sat *
Satellite Tools 6.10 for RHEL 8.2.EUS RedHat puppet-agent-0:6.26.0-1.el8sat *
Satellite Tools 6.10 for RHEL 8.2.TUS RedHat puppet-agent-0:6.26.0-1.el8sat *
Satellite Tools 6.10 for RHEL 8.4.AUS RedHat puppet-agent-0:6.26.0-1.el8sat *
Satellite Tools 6.10 for RHEL 8.4.E4S RedHat puppet-agent-0:6.26.0-1.el8sat *
Satellite Tools 6.10 for RHEL 8.4.EUS RedHat puppet-agent-0:6.26.0-1.el8sat *
Satellite Tools 6.10 for RHEL 8.4.TUS RedHat puppet-agent-0:6.26.0-1.el8sat *
Satellite Tools 6.10 for RHEL 8.6.AUS RedHat puppet-agent-0:6.26.0-1.el8sat *
Satellite Tools 6.10 for RHEL 8.6.E4S RedHat puppet-agent-0:6.26.0-1.el8sat *
Satellite Tools 6.10 for RHEL 8.6.EUS RedHat puppet-agent-0:6.26.0-1.el8sat *
Satellite Tools 6.9 for RHEL 6.ELS RedHat puppet-agent-0:6.26.0-1.el6sat *
Satellite Tools 6.9 for RHEL 7 RedHat puppet-agent-0:6.26.0-1.el7sat *
Satellite Tools 6.9 for RHEL 7.2.AUS RedHat puppet-agent-0:6.26.0-1.el7sat *
Satellite Tools 6.9 for RHEL 7.3.AUS RedHat puppet-agent-0:6.26.0-1.el7sat *
Satellite Tools 6.9 for RHEL 7.4.AUS RedHat puppet-agent-0:6.26.0-1.el7sat *
Satellite Tools 6.9 for RHEL 7.4.E4S RedHat puppet-agent-0:6.26.0-1.el7sat *
Satellite Tools 6.9 for RHEL 7.4.TUS RedHat puppet-agent-0:6.26.0-1.el7sat *
Satellite Tools 6.9 for RHEL 7.6.AUS RedHat puppet-agent-0:6.26.0-1.el7sat *
Satellite Tools 6.9 for RHEL 7.6.E4S RedHat puppet-agent-0:6.26.0-1.el7sat *
Satellite Tools 6.9 for RHEL 7.6.EUS RedHat puppet-agent-0:6.26.0-1.el7sat *
Satellite Tools 6.9 for RHEL 7.6.TUS RedHat puppet-agent-0:6.26.0-1.el7sat *
Satellite Tools 6.9 for RHEL 7.7.AUS RedHat puppet-agent-0:6.26.0-1.el7sat *
Satellite Tools 6.9 for RHEL 7.7.E4S RedHat puppet-agent-0:6.26.0-1.el7sat *
Satellite Tools 6.9 for RHEL 7.7.EUS RedHat puppet-agent-0:6.26.0-1.el7sat *
Satellite Tools 6.9 for RHEL 7.7.TUS RedHat puppet-agent-0:6.26.0-1.el7sat *
Satellite Tools 6.9 for RHEL 8 RedHat puppet-agent-0:6.26.0-1.el8sat *
Satellite Tools 6.9 for RHEL 8.1.E4S RedHat puppet-agent-0:6.26.0-1.el8sat *
Satellite Tools 6.9 for RHEL 8.1.EUS RedHat puppet-agent-0:6.26.0-1.el8sat *
Satellite Tools 6.9 for RHEL 8.2.AUS RedHat puppet-agent-0:6.26.0-1.el8sat *
Satellite Tools 6.9 for RHEL 8.2.E4S RedHat puppet-agent-0:6.26.0-1.el8sat *
Satellite Tools 6.9 for RHEL 8.2.EUS RedHat puppet-agent-0:6.26.0-1.el8sat *
Satellite Tools 6.9 for RHEL 8.2.TUS RedHat puppet-agent-0:6.26.0-1.el8sat *
Satellite Tools 6.9 for RHEL 8.4.AUS RedHat puppet-agent-0:6.26.0-1.el8sat *
Satellite Tools 6.9 for RHEL 8.4.E4S RedHat puppet-agent-0:6.26.0-1.el8sat *
Satellite Tools 6.9 for RHEL 8.4.EUS RedHat puppet-agent-0:6.26.0-1.el8sat *
Satellite Tools 6.9 for RHEL 8.6.AUS RedHat puppet-agent-0:6.26.0-1.el8sat *
Satellite Tools 6.9 for RHEL 8.6.E4S RedHat puppet-agent-0:6.26.0-1.el8sat *
Satellite Tools 6.9 for RHEL 8.6.EUS RedHat puppet-agent-0:6.26.0-1.el8sat *
Satellite Tools 6.9 for RHEL 8.6.TUS RedHat puppet-agent-0:6.26.0-1.el8sat *
Puppet Ubuntu bionic *
Puppet Ubuntu hirsute *
Puppet Ubuntu impish *
Puppet Ubuntu kinetic *
Puppet Ubuntu trusty *
Puppet Ubuntu upstream *
Puppet Ubuntu xenial *

References