Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2012-1987 Details

Description

Unspecified vulnerability in Puppet 2.6.x before 2.6.15 and 2.7.x before 2.7.13, and Puppet Enterprise (PE) Users 1.0, 1.1, 1.2.x, 2.0.x, and 2.5.x before 2.5.1 allows remote authenticated users with agent SSL keys to (1) cause a denial of service (memory consumption) via a REST request to a stream that triggers a thread block, as demonstrated using CVE-2012-1986 and /dev/random; or (2) cause a denial of service (filesystem consumption) via crafted REST requests that use "a marshaled form of a Puppet::FileBucket::File object" to write to arbitrary file locations.

Metrics

CVSS 3.x Severity and Vector Strings:

No CVSS 3.x data is available for this CVE.

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
http://lists.fedoraproject.org/pipermail/package-announce/2012-April/079227.html	CVE	Broken Link
http://lists.fedoraproject.org/pipermail/package-announce/2012-April/079289.html	CVE	Broken Link
http://lists.fedoraproject.org/pipermail/package-announce/2012-May/080003.html	CVE	Broken Link
http://projects.puppetlabs.com/issues/13552	CVE	Broken LinkVendor Advisory
http://projects.puppetlabs.com/issues/13553	CVE	Broken LinkVendor Advisory
http://projects.puppetlabs.com/projects/1/wiki/Release_Notes#2.6.15	CVE	Broken Link
http://puppetlabs.com/security/cve/cve-2012-1987/	CVE	Broken LinkVendor Advisory
http://puppetlabs.com/security/cve/cve-2012-1987/hotfixes/	CVE	Broken LinkVendor Advisory
http://secunia.com/advisories/48743	CVE	Broken LinkVendor Advisory
http://secunia.com/advisories/48748	CVE	Broken LinkVendor Advisory
http://secunia.com/advisories/48789	CVE	Broken LinkVendor Advisory
http://secunia.com/advisories/49136	CVE	Broken LinkVendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/74794	CVE	Third Party Advisory
https://hermes.opensuse.org/messages/14523305	CVE	Broken Link
https://hermes.opensuse.org/messages/15087408	CVE	Broken Link
http://ubuntu.com/usn/usn-1419-1	CVE	Third Party Advisory
http://www.debian.org/security/2012/dsa-2451	CVE	Mailing ListThird Party Advisory
http://www.osvdb.org/81308	CVE	Broken Link
http://www.securityfocus.com/bid/52975	CVE	Broken Link
http://lists.fedoraproject.org/pipermail/package-announce/2012-April/079227.html	[email protected]	Broken Link
http://lists.fedoraproject.org/pipermail/package-announce/2012-April/079289.html	[email protected]	Broken Link
http://lists.fedoraproject.org/pipermail/package-announce/2012-May/080003.html	[email protected]	Broken Link
http://projects.puppetlabs.com/issues/13552	[email protected]	Broken LinkVendor Advisory
http://projects.puppetlabs.com/issues/13553	[email protected]	Broken LinkVendor Advisory
http://projects.puppetlabs.com/projects/1/wiki/Release_Notes#2.6.15	[email protected]	Broken Link
http://puppetlabs.com/security/cve/cve-2012-1987/	[email protected]	Broken LinkVendor Advisory
http://puppetlabs.com/security/cve/cve-2012-1987/hotfixes/	[email protected]	Broken LinkVendor Advisory
http://secunia.com/advisories/48743	[email protected]	Broken LinkVendor Advisory
http://secunia.com/advisories/48748	[email protected]	Broken LinkVendor Advisory
http://secunia.com/advisories/48789	[email protected]	Broken LinkVendor Advisory
http://secunia.com/advisories/49136	[email protected]	Broken LinkVendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/74794	[email protected]	Third Party Advisory
https://hermes.opensuse.org/messages/14523305	[email protected]	Broken Link
https://hermes.opensuse.org/messages/15087408	[email protected]	Broken Link
http://ubuntu.com/usn/usn-1419-1	[email protected]	Third Party Advisory
http://www.debian.org/security/2012/dsa-2451	[email protected]	Mailing ListThird Party Advisory
http://www.osvdb.org/81308	[email protected]	Broken Link
http://www.securityfocus.com/bid/52975	[email protected]	Broken Link

see all 38 references

Weakness Enumeration

CWE-ID	CWE Name	Source
NVD-CWE-noinfo	Insufficient Information to Classify Weakness	[email protected]

Affected Products

Product	Versions
puppet puppet	>= 2.6.0, < 2.6.15 >= 2.7.0, < 2.7.13
CPE cpe:2.3:a:puppet:puppet:::::::: Remediation No remediation found in references.
puppet puppet enterprise	>= 1.0, < 2.5.1
CPE cpe:2.3:a:puppet:puppet_enterprise:::::::: Remediation No remediation found in references.

Change History

41 change records found show changes

Date	Action	Recorded By
Jun 16, 2026	CVE Modified	[email protected]
Nov 20, 2025	Modified Analysis	[email protected]
Nov 21, 2024	CVE Modified	CVE
May 14, 2024	CVE Modified	[email protected]
Jul 11, 2019	CPE Deprecation Remap	[email protected]
Jul 11, 2019	CPE Deprecation Remap	[email protected]
Jul 11, 2019	CPE Deprecation Remap	[email protected]
Jul 11, 2019	CPE Deprecation Remap	[email protected]
Jul 11, 2019	CPE Deprecation Remap	[email protected]
Jul 11, 2019	CPE Deprecation Remap	[email protected]
Jul 11, 2019	CPE Deprecation Remap	[email protected]
Jul 11, 2019	CPE Deprecation Remap	[email protected]
Jul 11, 2019	CPE Deprecation Remap	[email protected]
Jul 11, 2019	CPE Deprecation Remap	[email protected]
Jul 10, 2019	CPE Deprecation Remap	[email protected]
Jul 10, 2019	CPE Deprecation Remap	[email protected]
Jul 10, 2019	CPE Deprecation Remap	[email protected]
Jul 10, 2019	CPE Deprecation Remap	[email protected]
Jul 10, 2019	CPE Deprecation Remap	[email protected]
Jul 10, 2019	CPE Deprecation Remap	[email protected]
Jul 10, 2019	CPE Deprecation Remap	[email protected]
Jul 10, 2019	CPE Deprecation Remap	[email protected]
Jul 10, 2019	CPE Deprecation Remap	[email protected]
Jul 10, 2019	CPE Deprecation Remap	[email protected]
Jul 10, 2019	CPE Deprecation Remap	[email protected]
Jul 10, 2019	CPE Deprecation Remap	[email protected]
Jul 10, 2019	CPE Deprecation Remap	[email protected]
Jul 10, 2019	CPE Deprecation Remap	[email protected]
Jul 10, 2019	CPE Deprecation Remap	[email protected]
Jul 10, 2019	CPE Deprecation Remap	[email protected]
Jul 10, 2019	CPE Deprecation Remap	[email protected]
Jul 10, 2019	CPE Deprecation Remap	[email protected]
Jul 10, 2019	CPE Deprecation Remap	[email protected]
Jul 10, 2019	CPE Deprecation Remap	[email protected]
Jul 10, 2019	CPE Deprecation Remap	[email protected]
Jul 10, 2019	CPE Deprecation Remap	[email protected]
Jul 10, 2019	CPE Deprecation Remap	[email protected]
Jul 10, 2019	CPE Deprecation Remap	[email protected]
Jul 10, 2019	CPE Deprecation Remap	[email protected]
Aug 29, 2017	CVE Modified	[email protected]
May 30, 2012	Initial Analysis	[email protected]