CVE-2016-9686 — Puppet / Puppet Enterprise

CVE-2016-9686

Puppet / Puppet Enterprise PUBLISHED

Description (CNA)

The Puppet Communications Protocol (PCP) Broker incorrectly validates message header sizes. An attacker could use this to crash the PCP Broker, preventing commands from being sent to agents. This is resolved in Puppet Enterprise 2016.4.3 and 2016.5.2.

Affected (CNA)

Vendor / product	Versions
Puppet / Puppet Enterprise	affected 2015.3.x; affected 2016.x prior to 2016.4.3; affected 2016.5.1.

CWE

No CWE identifiers supplied.

References

https://puppet.com/security/cve/cve-2016-9686

ADP enrichment

CVE

No English description supplied.

https://puppet.com/security/cve/cve-2016-9686