VDB
CVE-2023-1894
CVE-2023-1894
PUBLISHED
CVSS 5.3 MEDIUM
Reported by puppet · Published May 4, 2023
A Regular Expression Denial of Service (ReDoS) issue was discovered in Puppet Server 7.9.2 certificate validation. An issue related to specifically crafted certificate names significantly slowed down server operations.
Risk Scores
CVSS 3.1
5.3
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Puppet | Puppet Enterprise | 2021.7.1, 2023.0.0 |
| Puppet | Puppet Server | 7.9.2, 7.9.2 |
| Puppet | Puppet Server | 7.9.2, 7.9.2 |
| Puppet | Puppet Enterprise | 2021.7.1, 2023.0.0 |
Timeline
- May 4, 2023 CVE Published
- May 5, 2023 EPSS Score
- Jun 11, 2023 EPSS Score
- Jul 19, 2023 EPSS Score
- Aug 25, 2023 EPSS Score
- Oct 2, 2023 EPSS Score
- Nov 8, 2023 EPSS Score
- Dec 16, 2023 EPSS Score
- Jan 22, 2024 EPSS Score
- Feb 29, 2024 EPSS Score
- Apr 6, 2024 EPSS Score
- May 13, 2024 EPSS Score