CVE-2017-2292

Versions of MCollective prior to 2.10.4 deserialized YAML from agents without calling safe_load, allowing the potential for arbitrary code execution on the server. The fix for this is to call YAML.safe_load on input. This has been tested in all Puppet-supplied MCollective plugins, but there is a chance that third-party plugins could rely on this insecure behavior.

References

Affected packages

Git / github.com/puppetlabs/marionette-collective

Affected ranges

Type

GIT

Repo

https://github.com/puppetlabs/marionette-collective

Events

Introduced

Last Affected

04b79916af37fde6f24de6d15ec5863f96020556

Database specific

Show details

{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.10.3"
        }
    ]
}

Affected versions

0.*

0.4.5

0.4.6

0.4.7

0.4.8

0.4.9

1.*

1.0.0

1.1.0

1.1.1

1.1.2

1.1.3

1.1.4

1.2.0

1.3.0

1.3.1

1.3.2

1.3.3

2.*

2.0.0

2.1.0

2.1.1

2.10.1

2.10.2

2.10.3

2.2.0

2.3.0

2.3.1

2.3.2

2.3.3

2.4.0

2.4.0-rc1

2.4.0-rc2

2.4.1

2.5.0

2.5.0-rc1

2.5.1

2.6.0

2.7.0

2.8.3

2.8.4

2.8.5

2.8.6

2.8.7

2.8.8

2.9.1

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-2292.json"