VDB

GCVE-VVD-MAGEIA-2018-199

GCVE-VVD-MAGEIA-2018-199
Advisory Published
Vulnetix · Advisory published April 13, 2018
It was discovered that Puppet incorrectly handled permissions when unpacking certain tarballs. A local user could possibly use this issue to execute arbitrary code (CVE-2017-10689).
Download JSON Open in Console

Affected Products

VendorProductVersionsPlatforms
Mageiapuppet0 (affected), 4.2.1-4.4.mga6 (unaffected)—
Mageiapuppet0 (affected), 3.6.2-3.3.mga5 (unaffected)—

Aliases

CVE-2017-10689

Transitive aliases

GHSA-vw22-465p-8j5wVVD-GENTOO-2018-647820EUVD-2022-5438CVE-2017-10690EUVD-2017-2336GHSA-v5m5-pcq8-cjj7

References

Updated puppet packages fix security vulnerability
advisory
Updated puppet packages fix security vulnerability
advisory
Updated puppet packages fix security vulnerability
issue

Browse GCVE Records

72,409 records in the GCVE database · Updated July 14, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON
$ Console Community · 100/wk Open console ›