{"id":"CVE-2014-3248","aliases":["DEBIAN-CVE-2014-3248","EUVD-2017-0196","GHSA-92v7-pq4h-58j5","SUSE-RU-2015:0696-1","UBUNTU-CVE-2014-3248","USN-3308-1","openSUSE-SU-2024:10565-1","openSUSE-SU-2024:10581-1"],"status":"published","title":"facter, hiera, mcollective-client, and puppet affected by untrusted search path vulnerability","description":"Untrusted search path vulnerability in Puppet Enterprise 2.8 before 2.8.7, Puppet before 2.7.26 and 3.x before 3.6.2, Facter 1.6.x and 2.x before 2.0.2, Hiera before 1.3.4, and Mcollective before 2.5.2, when running with Ruby 1.9.1 or earlier, allows local users to gain privileges via a Trojan horse file in the current working directory, as demonstrated using (1) rubygems/defaults/operating_system.rb, (2) Win32API.rb, (3) Win32API.so, (4) safe_yaml.rb, (5) safe_yaml/deep.rb, or (6) safe_yaml/deep.so; or (7) operatingsystem.rb, (8) operatingsystem.so, (9) osfamily.rb, or (10) osfamily.so in puppet/confine.","severity":{"version":"2.0","score":6.2,"vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.00542,"percentile":0.45822,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-17"],"published":"2014-06-30T15:48:55Z","modified":"2026-10-23T15:47:39Z","fixes":[{"ecosystem":"RubyGems","package":"facter","fixed_in":["1.7.6","2.0.2"],"sources":["ghsa","osv"]},{"ecosystem":"RubyGems","package":"hiera","fixed_in":["1.3.4"],"sources":["ghsa","osv"]},{"ecosystem":"RubyGems","package":"puppet","fixed_in":["2.7.26","3.6.2"],"sources":["ghsa","osv"]},{"ecosystem":"RubyGems","package":"mcollective-client","fixed_in":["2.5.2"],"sources":["ghsa","osv"]},{"ecosystem":"Debian:12","package":"facter","fixed_in":["2.0.1-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"facter","fixed_in":["2.0.1-1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"hiera","fixed_in":["1.3.4-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"hiera","fixed_in":["1.3.4-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"hiera","fixed_in":["1.3.4-1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"mcollective","fixed_in":["2.5.2+dfsg-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"puppet","fixed_in":["3.4.3-1ubuntu1.2"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"rubygem-facter","fixed_in":["1.3.4-3.5"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"RubyGems","package":"facter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.6"}]}]},{"source":"ghsa","ecosystem":"RubyGems","package":"facter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.0.0"},{"fixed":"2.0.2"}]}]},{"source":"ghsa","ecosystem":"RubyGems","package":"hiera","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.4"}]}]},{"source":"ghsa","ecosystem":"RubyGems","package":"puppet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.26"}]}]},{"source":"ghsa","ecosystem":"RubyGems","package":"puppet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.0.0"},{"fixed":"3.6.2"}]}]},{"source":"ghsa","ecosystem":"RubyGems","package":"mcollective-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.2"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"facter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.1-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"facter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.1-1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"hiera","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.4-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"hiera","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.4-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"hiera","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.4-1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"mcollective","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.2+dfsg-1"}]}]},{"source":"osv","ecosystem":"RubyGems","package":"facter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.6"}]}],"versions":["1.0.1","1.1.1","1.3.3","1.3.7","1.3.8","1.5","1.5.2","1.5.3","1.5.4","1.5.5","1.5.6","1.5.7","1.5.8","1.5.9","1.6.0","1.6.1","1.6.10","1.6.11","1.6.12","1.6.12.rc1","1.6.12.rc2","1.6.13","1.6.13.rc1","1.6.14","1.6.14.rc1","1.6.15","1.6.15.rc1","1.6.16","1.6.17","1.6.17.rc1","1.6.18","1.6.18.rc1","1.6.2","1.6.3","1.6.4","1.6.5","1.6.6","1.6.7","1.6.8","1.6.9","1.7.0","1.7.0.rc1","1.7.0.rc2","1.7.1","1.7.1.rc1","1.7.2","1.7.2.rc1","1.7.3","1.7.3.rc1","1.7.4","1.7.4.rc1","1.7.5","1.7.5.rc1","1.7.5.rc2"]},{"source":"osv","ecosystem":"RubyGems","package":"facter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.0.0"},{"fixed":"2.0.2"}]}],"versions":["2.0.1","2.0.1.rc1","2.0.1.rc2","2.0.1.rc3","2.0.1.rc4"]},{"source":"osv","ecosystem":"RubyGems","package":"hiera","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.4"}]}],"versions":["0.1.0","0.1.1","0.2.0","0.3.0","1.0.0","1.0.0rc4","1.1.0","1.1.0.rc1","1.1.1","1.1.1.rc1","1.1.2","1.1.2.rc1","1.1.2.rc2","1.2.0","1.2.0.rc1","1.2.0.rc2","1.2.0.rc3","1.2.1","1.2.1.rc1","1.3.0","1.3.0.rc2","1.3.1","1.3.1.rc1","1.3.2","1.3.2.rc1","1.3.2.rc2","1.3.3"]},{"source":"osv","ecosystem":"RubyGems","package":"puppet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.26"}]}],"versions":["0.13.0","0.13.1","0.13.2","0.13.6","0.16.0","0.18.4","0.22.4","0.23.0","0.23.1","0.23.2","0.24.0","0.24.1","0.24.2","0.24.3","0.24.4","0.24.5","0.24.6","0.24.7","0.24.8","0.24.9","0.25.0","0.25.1","0.25.2","0.25.3","0.25.4","0.25.5","0.9.2","2.6.0","2.6.1","2.6.10","2.6.11","2.6.12","2.6.13","2.6.14","2.6.15","2.6.16","2.6.17","2.6.18","2.6.2","2.6.3","2.6.4","2.6.5","2.6.6","2.6.7","2.6.8","2.6.9","2.7.1","2.7.11","2.7.12","2.7.13","2.7.14","2.7.16","2.7.17","2.7.18","2.7.19","2.7.20","2.7.20.rc1","2.7.21","2.7.22","2.7.23","2.7.24","2.7.25","2.7.3","2.7.4","2.7.5","2.7.6","2.7.8","2.7.9"]},{"source":"osv","ecosystem":"RubyGems","package":"puppet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.0.0"},{"fixed":"3.6.2"}]}],"versions":["3.0.0","3.0.1","3.0.1.rc1","3.0.2","3.0.2.rc1","3.0.2.rc2","3.0.2.rc3","3.1.0","3.1.0.rc1","3.1.0.rc2","3.1.1","3.2.0.rc1","3.2.0.rc2","3.2.1","3.2.1.rc1","3.2.2","3.2.3","3.2.3.rc1","3.2.4","3.3.0","3.3.0.rc2","3.3.0.rc3","3.3.1","3.3.1.rc1","3.3.1.rc2","3.3.1.rc3","3.3.2","3.4.0","3.4.0.rc1","3.4.0.rc2","3.4.1","3.4.2","3.4.3","3.5.0.rc1","3.5.0.rc2","3.5.0.rc3","3.5.1","3.5.1.rc1","3.6.0","3.6.0.rc1","3.6.1"]},{"source":"osv","ecosystem":"RubyGems","package":"mcollective-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.2"}]}],"versions":["1.3.3","2.0.0","2.2.0","2.2.1","2.2.2","2.2.3","2.2.4","2.4.0","2.4.1","2.5.0","2.5.0.rc1","2.5.1"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"puppet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.3-1ubuntu1.2"}]}],"versions":["3.2.4-2ubuntu2","3.3.1-1ubuntu1","3.3.1-1ubuntu2","3.3.1-1ubuntu3","3.4.2-1","3.4.3-1","3.4.3-1ubuntu1","3.4.3-1ubuntu1.1"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"facter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.7.0-1ubuntu1","1.7.2-1ubuntu1","1.7.3-1ubuntu1","1.7.5-1ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"facter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.10.0-1build1"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"puppet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.3-1ubuntu1.2"}]}],"versions":["3.2.4-2ubuntu2","3.3.1-1ubuntu1","3.3.1-1ubuntu2","3.3.1-1ubuntu3","3.4.2-1","3.4.3-1","3.4.3-1ubuntu1","3.4.3-1ubuntu1.1"],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"rubygem-facter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.4-3.5"}]}]}],"products":[{"vendor":"puppet","product":"facter"},{"vendor":"puppet","product":"hiera"},{"vendor":"puppet","product":"marionette_collective"},{"vendor":"puppet","product":"puppet"},{"vendor":"puppet","product":"puppet_enterprise"},{"vendor":"puppetlabs","product":"facter"}],"references":[{"url":"http://puppetlabs.com/security/cve/cve-2014-3248","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory","advisory","report"]},{"url":"http://secunia.com/advisories/59197","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Technical Description","article"]},{"url":"http://secunia.com/advisories/59200","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Technical Description","article"]},{"url":"http://rowediness.com/2014/06/13/cve-2014-3248-a-little-problem-with-puppet/","tags":["x_refsource_MISC","x_transferred","Exploit","Technical Description","article","evidence"]},{"url":"http://www.securityfocus.com/bid/68035","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-3248","tags":["advisory"]},{"url":"https://github.com/rubysec/ruby-advisory-db/blob/master/gems/facter/CVE-2014-3248.yml","tags":["web"]},{"url":"https://github.com/rubysec/ruby-advisory-db/blob/master/gems/hiera/CVE-2014-3248.yml","tags":["web"]},{"url":"https://github.com/rubysec/ruby-advisory-db/blob/master/gems/mcollective-client/CVE-2014-3248.yml","tags":["web"]},{"url":"https://github.com/rubysec/ruby-advisory-db/blob/master/gems/puppet/CVE-2014-3248.yml","tags":["web"]},{"url":"https://web.archive.org/web/20141129061319/http://www.securityfocus.com/bid/68035","tags":["web"]},{"url":"https://web.archive.org/web/20150204183209/http://rowediness.com/2014/06/13/cve-2014-3248-a-little-problem-with-puppet/"},{"url":"https://web.archive.org/web/20150907182402/http://puppetlabs.com/security/cve/cve-2014-3248","tags":["web"]},{"url":"https://github.com/advisories/GHSA-92v7-pq4h-58j5"},{"url":"https://security-tracker.debian.org/tracker/CVE-2014-3248","tags":["advisory"]},{"url":"https://web.archive.org/web/20150204183209/http://rowediness.com/2014/06/13/cve-2014-3248-a-little-problem-with-puppet","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement//suse-ru-20150696-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/825878","tags":["report"]},{"url":"https://bugzilla.suse.com/835122","tags":["report"]},{"url":"https://bugzilla.suse.com/835848","tags":["report"]},{"url":"https://bugzilla.suse.com/835891","tags":["report"]},{"url":"https://bugzilla.suse.com/853982","tags":["report"]},{"url":"https://bugzilla.suse.com/856843","tags":["report"]},{"url":"https://bugzilla.suse.com/864082","tags":["report"]},{"url":"https://bugzilla.suse.com/879913","tags":["report"]},{"url":"https://bugzilla.suse.com/913078","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3567","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4761","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4969","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3248","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3250","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2014-3248","tags":["report"]},{"url":"http://www.openwall.com/lists/oss-security/2014/07/08/2","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-3308-1","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-3248","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-2295","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2011-3848","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-3872","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-3864","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-3865","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-3866","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-3867","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4956","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3253","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2014-3248","description":"Untrusted search path vulnerability in Puppet Enterprise 2.8 before 2.8.7, Puppet before 2.7.26 and 3.x before 3.6.2, Facter 1.6.x and 2.x before 2.0.2, Hiera before 1.3.4, and Mcollective before 2.5.2, when running with Ruby 1.9.1 or earlier, allows local users to gain privileges via a Trojan horse file in the current working directory, as demonstrated using (1) rubygems/defaults/operating_system.rb, (2) Win32API.rb, (3) Win32API.so, (4) safe_yaml.rb, (5) safe_yaml/deep.rb, or (6) safe_yaml/deep.so; or (7) operatingsystem.rb, (8) operatingsystem.so, (9) osfamily.rb, or (10) osfamily.so in puppet/confine.","status":"published","published":"2014-11-16T17:00:00Z","modified":"2024-08-06T10:35:57.167Z","updated_at":"2026-11-02T14:33:44.569327Z"}],"euvd":[{"id":"EUVD-2017-0196","description":"Untrusted search path vulnerability in Puppet Enterprise 2.8 before 2.8.7, Puppet before 2.7.26 and 3.x before 3.6.2, Facter 1.6.x and 2.x before 2.0.2, Hiera before 1.3.4, and Mcollective before 2.5.2, when running with Ruby 1.9.1 or earlier, allows local users to gain privileges via a Trojan horse file in the current working directory, as demonstrated using (1) rubygems/defaults/operating_system.rb, (2) Win32API.rb, (3) Win32API.so, (4) safe_yaml.rb, (5) safe_yaml/deep.rb, or (6) safe_yaml/deep.so; or (7) operatingsystem.rb, (8) operatingsystem.so, (9) osfamily.rb, or (10) osfamily.so in puppet/confine.","status":"published","published":"2014-11-16T17:00:00Z","modified":"2024-08-06T10:35:57Z","updated_at":"2026-11-03T01:57:11.29077Z"}],"ghsa":[{"id":"GHSA-92v7-pq4h-58j5","title":"facter, hiera, mcollective-client, and puppet affected by untrusted search path vulnerability","description":"Untrusted search path vulnerability in Puppet Enterprise 2.8 before 2.8.7, Puppet before 2.7.26 and 3.x before 3.6.2, Facter 1.6.x and 2.x before 2.0.2, Hiera before 1.3.4, and Mcollective before 2.5.2, when running with Ruby 1.9.1 or earlier, allows local users to gain privileges via a Trojan horse file in the current working directory, as demonstrated using (1) `rubygems/defaults/operating_system.rb`, (2) `Win32API.rb`, (3) `Win32API.so`, (4) `safe_yaml.rb`, (5) `safe_yaml/deep.rb`, or (6) `safe_yaml/deep.so`; or (7) `operatingsystem.rb`, (8) `operatingsystem.so`, (9) `osfamily.rb`, or (10) `osfamily.so` in `puppet/confine`.","status":"published","published":"2017-10-24T18:33:36Z","modified":"2023-06-07T14:06:11Z","updated_at":"2026-11-02T14:36:53.103029Z"}],"nvd":[{"id":"CVE-2014-3248","description":"Untrusted search path vulnerability in Puppet Enterprise 2.8 before 2.8.7, Puppet before 2.7.26 and 3.x before 3.6.2, Facter 1.6.x and 2.x before 2.0.2, Hiera before 1.3.4, and Mcollective before 2.5.2, when running with Ruby 1.9.1 or earlier, allows local users to gain privileges via a Trojan horse file in the current working directory, as demonstrated using (1) rubygems/defaults/operating_system.rb, (2) Win32API.rb, (3) Win32API.so, (4) safe_yaml.rb, (5) safe_yaml/deep.rb, or (6) safe_yaml/deep.so; or (7) operatingsystem.rb, (8) operatingsystem.so, (9) osfamily.rb, or (10) osfamily.so in puppet/confine.","status":"published","published":"2014-11-16T17:59:03.113Z","modified":"2026-06-17T00:07:50.75Z","cvss":[{"version":"2.0","score":6.2,"vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","level":"medium","assessor":"primary"}],"cwes":["CWE-17"],"updated_at":"2026-11-02T14:02:57.304171Z"}],"osv":[{"id":"CVE-2014-3248","description":"Untrusted search path vulnerability in Puppet Enterprise 2.8 before 2.8.7, Puppet before 2.7.26 and 3.x before 3.6.2, Facter 1.6.x and 2.x before 2.0.2, Hiera before 1.3.4, and Mcollective before 2.5.2, when running with Ruby 1.9.1 or earlier, allows local users to gain privileges via a Trojan horse file in the current working directory, as demonstrated using (1) rubygems/defaults/operating_system.rb, (2) Win32API.rb, (3) Win32API.so, (4) safe_yaml.rb, (5) safe_yaml/deep.rb, or (6) safe_yaml/deep.so; or (7) operatingsystem.rb, (8) operatingsystem.so, (9) osfamily.rb, or (10) osfamily.so in puppet/confine.","status":"published","published":"2014-11-16T17:59:03Z","modified":"2026-04-10T03:43:45.517266Z","updated_at":"2026-11-02T15:43:59.654289Z"},{"id":"DEBIAN-CVE-2014-3248","description":"Untrusted search path vulnerability in Puppet Enterprise 2.8 before 2.8.7, Puppet before 2.7.26 and 3.x before 3.6.2, Facter 1.6.x and 2.x before 2.0.2, Hiera before 1.3.4, and Mcollective before 2.5.2, when running with Ruby 1.9.1 or earlier, allows local users to gain privileges via a Trojan horse file in the current working directory, as demonstrated using (1) rubygems/defaults/operating_system.rb, (2) Win32API.rb, (3) Win32API.so, (4) safe_yaml.rb, (5) safe_yaml/deep.rb, or (6) safe_yaml/deep.so; or (7) operatingsystem.rb, (8) operatingsystem.so, (9) osfamily.rb, or (10) osfamily.so in puppet/confine.","status":"published","published":"2014-11-16T17:59:03.113Z","modified":"2026-10-23T15:47:39.381721236Z","updated_at":"2026-11-02T15:45:26.134753Z"},{"id":"GHSA-92v7-pq4h-58j5","title":"facter, hiera, mcollective-client, and puppet affected by untrusted search path vulnerability","description":"Untrusted search path vulnerability in Puppet Enterprise 2.8 before 2.8.7, Puppet before 2.7.26 and 3.x before 3.6.2, Facter 1.6.x and 2.x before 2.0.2, Hiera before 1.3.4, and Mcollective before 2.5.2, when running with Ruby 1.9.1 or earlier, allows local users to gain privileges via a Trojan horse file in the current working directory, as demonstrated using (1) `rubygems/defaults/operating_system.rb`, (2) `Win32API.rb`, (3) `Win32API.so`, (4) `safe_yaml.rb`, (5) `safe_yaml/deep.rb`, or (6) `safe_yaml/deep.so`; or (7) `operatingsystem.rb`, (8) `operatingsystem.so`, (9) `osfamily.rb`, or (10) `osfamily.so` in `puppet/confine`.","status":"published","published":"2017-10-24T18:33:36Z","modified":"2024-12-02T05:40:00.351658Z","updated_at":"2026-11-02T15:46:43.123867Z"},{"id":"openSUSE-SU-2024:10565-1","title":"ruby2.2-rubygem-facter-2.4.6-2.1 on GA media","description":"These are all security issues fixed in the ruby2.2-rubygem-facter-2.4.6-2.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:24:25.29638Z","updated_at":"2026-11-02T16:58:34.487567Z"},{"id":"openSUSE-SU-2024:10581-1","title":"ruby2.2-rubygem-puppet-3.8.7-2.2 on GA media","description":"These are all security issues fixed in the ruby2.2-rubygem-puppet-3.8.7-2.2 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2025-05-07T18:08:42.396541Z","updated_at":"2026-11-02T16:58:34.487567Z"},{"id":"SUSE-RU-2015:0696-1","title":"Security update for puppet","description":"\nPuppet was updated to fix the following security issues:\n\n    * Unsafe use of temporary files. (CVE-2013-4969)\n    * Arbitrary code execution with required social engineering.\n      (CVE-2014-3248, CVE-2014-3250)\n\nSecurity Issues references:\n\n    * CVE-2014-3248\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3248\u003e\n    * CVE-2013-4969\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4969\u003e\n    * CVE-2014-3250\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3250\u003e\n\n","status":"published","published":"2014-06-30T15:48:55Z","modified":"2026-02-04T02:49:05.925899Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"UBUNTU-CVE-2014-3248","description":"Untrusted search path vulnerability in Puppet Enterprise 2.8 before 2.8.7, Puppet before 2.7.26 and 3.x before 3.6.2, Facter 1.6.x and 2.x before 2.0.2, Hiera before 1.3.4, and Mcollective before 2.5.2, when running with Ruby 1.9.1 or earlier, allows local users to gain privileges via a Trojan horse file in the current working directory, as demonstrated using (1) rubygems/defaults/operating_system.rb, (2) Win32API.rb, (3) Win32API.so, (4) safe_yaml.rb, (5) safe_yaml/deep.rb, or (6) safe_yaml/deep.so; or (7) operatingsystem.rb, (8) operatingsystem.so, (9) osfamily.rb, or (10) osfamily.so in puppet/confine.","status":"published","published":"2014-11-16T00:00:00Z","modified":"2026-10-17T12:52:47.552554332Z","updated_at":"2026-11-02T15:54:09.010095Z"},{"id":"USN-3308-1","title":"puppet vulnerabilities","description":"Dennis Rowe discovered that Puppet incorrectly handled the search path. A\nlocal attacker could use this issue to possibly execute arbitrary code.\n(CVE-2014-3248)\n\nIt was discovered that Puppet incorrectly handled YAML deserialization. A\nremote attacker could possibly use this issue to execute arbitrary code on\nthe master. This update is incompatible with agents older than 3.2.2.\n(CVE-2017-2295)\n","status":"published","published":"2017-06-05T16:28:41Z","modified":"2026-04-27T15:17:28.740803414Z","updated_at":"2026-11-02T16:58:13.496563Z"}]}}