← CVE Intelligence

CVE-2023-1894

Puppet / Puppet Enterprise PUBLISHED

Description (CNA)

A Regular Expression Denial of Service (ReDoS) issue was discovered in Puppet Server 7.9.2 certificate validation. An issue related to specifically crafted certificate names significantly slowed down server operations.

Affected (CNA)

Vendor / productVersions
Puppet / Puppet Enterpriseaffected 2021.7.1 before 2021.7.3; affected 2023.0.0 before 2023.1.0
Puppet / Puppet Serveraffected 7.9.2 before 7.11.0; affected 7.9.2 before 8.0.0

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.