CVE-2017-2296
In Puppet Enterprise 2017.1.x and 2017.2.1, using specially formatted strings with certain formatting characters as Classifier node group names or RBAC role display names causes errors, effectively causing a DOS to the service. This was resolved in Puppet Enterprise 2017.2.2.
| Software | From | Fixed in |
|---|---|---|
| puppet / puppet_enterprise | 2017.1.1 | 2017.1.1.x |
| puppet / puppet_enterprise | 2017.1.0 | 2017.1.0.x |
| puppet / puppet_enterprise | 2017.2.1 | 2017.2.1.x |
Deep Security Visibility Without the Complexity
SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.
- No setup fees
- 5-min deployment
- Cancel anytime