NVD

Id
43842  
Name
CVE-2012-1987  
Description
Unspecified vulnerability in Puppet 2.6.x before 2.6.15 and 2.7.x before 2.7.13, and Puppet Enterprise (PE) Users 1.0, 1.1, 1.2.x, 2.0.x, and 2.5.x before 2.5.1 allows remote authenticated users with agent SSL keys to (1) cause a denial of service (memory consumption) via a REST request to a stream that triggers a thread block, as demonstrated using CVE-2012-1986 and /dev/random; or (2) cause a denial of service (filesystem consumption) via crafted REST requests that use "a marshaled form of a Puppet::FileBucket::File object" to write to arbitrary file locations.  
Reject
 
CVSS Version
2  
CVSS Score
3.5  
Severity
Low  
CVSS Base Score
3.5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
6.8  
CVSS Vector
(AV:N/AC:M/Au:S/C:N/I:N/A:P)  
Pub Date
2017-01-19  
Published
2012-05-29  
Modified Date
2012-07-21  
Seq
2012-1987  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
220378 43842 CVE-2012-1987 FEDORA-2012-5999  View
220379 43842 CVE-2012-1987 FEDORA-2012-6055  View
220380 43842 CVE-2012-1987 FEDORA-2012-6674  View
220381 43842 CVE-2012-1987 http://projects.puppetlabs.com/issues/13552  View
220382 43842 CVE-2012-1987 http://projects.puppetlabs.com/issues/13553  View
220383 43842 CVE-2012-1987 http://projects.puppetlabs.com/projects/1/wiki/Release_Notes#2.6.15  View
220384 43842 CVE-2012-1987 http://puppetlabs.com/security/cve/cve-2012-1987/  View
220385 43842 CVE-2012-1987 http://puppetlabs.com/security/cve/cve-2012-1987/hotfixes/  View
220386 43842 CVE-2012-1987 USN-1419-1  View
220387 43842 CVE-2012-1987 DSA-2451  View
220388 43842 CVE-2012-1987 52975  View
220389 43842 CVE-2012-1987 puppet-rest-dos(74795)  View
220390 43842 CVE-2012-1987 openSUSE-SU-2012:0608  View
220391 43842 CVE-2012-1987 openSUSE-SU-2012:0835  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
26873 JVNDB-2012-002580 Puppet および Puppet Enterprise におけるサービス運用妨害 (DoS) の脆弱性 Puppet および Puppet Enterprise には、サービス運用妨害 (メモリ破損またはファイルシステム破損) 状態となる脆弱性が存在します。 CVE-2012-1987 55225 CVE-2012-1987 43842 3.5 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-002580.html 2012-05-29 2012-07-26 View