cnvd - cnvd-2017-01327

CNVD-2017-01327

Vulnerability from cnvd - Published: 2017-02-14

Title

Puppet Enterprise拒绝服务漏洞

Description

Puppet是一套基于客户端/服务器架构的配置管理工具，它可用于管理配置文件、用户、cron任务、软件包、系统服务等。Puppet Enterprise是一个企业版。 Puppet Enterprise中的Puppet Communications Protocol (PCP) Broker存在安全漏洞，由于程序未能正确的验证消息头大小。攻击者可利用该漏洞造成PCP Broker崩溃。

Severity

中

Formal description

目前厂商暂未发布修复措施解决此安全问题，建议使用此软件的用户随时关注厂商主页或参考网址以获取解决办法： https://puppet.com/

Reference

https://puppet.com/security/cve/cve-2016-9686

Impacted products

Name
['Puppet Labs Puppet Enterprise 2016.5.1', 'Puppet Labs Puppet Enterprise 2015.3.x', 'Puppet Labs Puppet Enterprise 2016.*，<2016.4.0']

Show details on source website

JSON

To clipboard

{
  "bids": {
    "bid": {
      "bidNumber": "96031"
    }
  },
  "cves": {
    "cve": {
      "cveNumber": "CVE-2016-9686",
      "cveUrl": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5136"
    }
  },
  "description": "Puppet\u662f\u4e00\u5957\u57fa\u4e8e\u5ba2\u6237\u7aef/\u670d\u52a1\u5668\u67b6\u6784\u7684\u914d\u7f6e\u7ba1\u7406\u5de5\u5177\uff0c\u5b83\u53ef\u7528\u4e8e\u7ba1\u7406\u914d\u7f6e\u6587\u4ef6\u3001\u7528\u6237\u3001cron\u4efb\u52a1\u3001\u8f6f\u4ef6\u5305\u3001\u7cfb\u7edf\u670d\u52a1\u7b49\u3002Puppet Enterprise\u662f\u4e00\u4e2a\u4f01\u4e1a\u7248\u3002\r\n\r\nPuppet Enterprise\u4e2d\u7684Puppet Communications Protocol (PCP) Broker\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\uff0c\u7531\u4e8e\u7a0b\u5e8f\u672a\u80fd\u6b63\u786e\u7684\u9a8c\u8bc1\u6d88\u606f\u5934\u5927\u5c0f\u3002\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u9020\u6210PCP Broker\u5d29\u6e83\u3002",
  "discovererName": "NCC Group",
  "formalWay": "\u76ee\u524d\u5382\u5546\u6682\u672a\u53d1\u5e03\u4fee\u590d\u63aa\u65bd\u89e3\u51b3\u6b64\u5b89\u5168\u95ee\u9898\uff0c\u5efa\u8bae\u4f7f\u7528\u6b64\u8f6f\u4ef6\u7684\u7528\u6237\u968f\u65f6\u5173\u6ce8\u5382\u5546\u4e3b\u9875\u6216\u53c2\u8003\u7f51\u5740\u4ee5\u83b7\u53d6\u89e3\u51b3\u529e\u6cd5\uff1a\r\nhttps://puppet.com/",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2017-01327",
  "openTime": "2017-02-14",
  "products": {
    "product": [
      "Puppet Labs Puppet Enterprise 2016.5.1",
      "Puppet Labs Puppet Enterprise  2015.3.x",
      "Puppet Labs Puppet Enterprise  2016.*\uff0c\u003c2016.4.0"
    ]
  },
  "referenceLink": "https://puppet.com/security/cve/cve-2016-9686",
  "serverity": "\u4e2d",
  "submitTime": "2017-02-09",
  "title": "Puppet Enterprise\u62d2\u7edd\u670d\u52a1\u6f0f\u6d1e"
}

CVE-2016-9686 (GCVE-0-2016-9686)

Vulnerability from cvelistv5 – Published: 2017-02-08 22:00 – Updated: 2024-08-06 02:59

Summary

The Puppet Communications Protocol (PCP) Broker incorrectly validates message header sizes. An attacker could use this to crash the PCP Broker, preventing commands from being sent to agents. This is resolved in Puppet Enterprise 2016.4.3 and 2016.5.2.

Severity ?

No CVSS data available.

CWE

Denial of Service

Assigner

puppet

References

URL

Tags

https://puppet.com/security/cve/cve-2016-9686

x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	Puppet	Puppet Enterprise	Affected: 2015.3.x Affected: 2016.x prior to 2016.4.3 Affected: 2016.5.1.

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T02:59:03.352Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://puppet.com/security/cve/cve-2016-9686"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Puppet Enterprise",
          "vendor": "Puppet",
          "versions": [
            {
              "status": "affected",
              "version": "2015.3.x"
            },
            {
              "status": "affected",
              "version": "2016.x prior to 2016.4.3"
            },
            {
              "status": "affected",
              "version": "2016.5.1."
            }
          ]
        }
      ],
      "datePublic": "2017-02-07T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The Puppet Communications Protocol (PCP) Broker incorrectly validates message header sizes. An attacker could use this to crash the PCP Broker, preventing commands from being sent to agents. This is resolved in Puppet Enterprise 2016.4.3 and 2016.5.2."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Denial of Service",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-02-08T21:57:01",
        "orgId": "ca2a266c-be2f-4d4b-92d0-47b76b1a9c4e",
        "shortName": "puppet"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://puppet.com/security/cve/cve-2016-9686"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@puppet.com",
          "ID": "CVE-2016-9686",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Puppet Enterprise",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "2015.3.x"
                          },
                          {
                            "version_value": "2016.x prior to 2016.4.3"
                          },
                          {
                            "version_value": "2016.5.1."
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Puppet"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The Puppet Communications Protocol (PCP) Broker incorrectly validates message header sizes. An attacker could use this to crash the PCP Broker, preventing commands from being sent to agents. This is resolved in Puppet Enterprise 2016.4.3 and 2016.5.2."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Denial of Service"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://puppet.com/security/cve/cve-2016-9686",
              "refsource": "CONFIRM",
              "url": "https://puppet.com/security/cve/cve-2016-9686"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ca2a266c-be2f-4d4b-92d0-47b76b1a9c4e",
    "assignerShortName": "puppet",
    "cveId": "CVE-2016-9686",
    "datePublished": "2017-02-08T22:00:00",
    "dateReserved": "2016-11-30T00:00:00",
    "dateUpdated": "2024-08-06T02:59:03.352Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

CNVD-2017-01327

CVE-2016-9686 (GCVE-0-2016-9686)

Tags

Sightings

Nomenclature