CVE-2016-9686

The Puppet Communications Protocol (PCP) Broker incorrectly validates message header sizes

published February 8, 2017

CVSS
—
EPSS
1%
Percentile
69.5
In the wild
Unconfirmed
What it is

The Puppet Communications Protocol (PCP) Broker incorrectly validates message header sizes. An attacker could use this to crash the PCP Broker, preventing commands from being sent to agents. This is resolved in Puppet Enterprise 2016.4.3 and 2016.5.2.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01275 · 69.5th percentile
Published
2017-02-08T22:00Z
EPSS history
Timeline
  • 08 FEB 22:00Z
    The Puppet Communications Protocol (PCP) Broker incorrectly validates message header sizes
    cvelistv5