CVE-2017-2296

State: Published
Severity: Not scored
Published: Feb 1, 2018
Updated: Sep 17, 2024
Reserved: Dec 1, 2016

Description

In Puppet Enterprise 2017.1.x and 2017.2.1, using specially formatted strings with certain formatting characters as Classifier node group names or RBAC role display names causes errors, effectively causing a DOS to the service. This was resolved in Puppet Enterprise 2017.2.2.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
Puppet EnterprisePuppet	2017.1.x, 2017.2.1. Fixed in 2017.2.2Affected

References

https://puppet.com/security/cve/cve-2017-2296

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.