CVE-2018-6514: High severity Puppet Puppet vulnerability
Published Jun 11, 2018
·Updated
In Puppet Agent 1.10.x prior to 1.10.13, Puppet Agent 5.3.x prior to 5.3.7, Puppet Agent 5.5.x prior to 5.5.2, Facter on Windows is vulnerable to a DLL preloading attack, which could lead to a privilege escalation.
Affected Software
8 affected components
Puppet Puppet>=1.10.0<1.10.13
Puppet Puppet>=5.3.0<5.3.7
Puppet Puppet>=5.5.0<5.5.2
Microsoft Windows
All of the following
Any of the following
Puppet Puppet>=1.10.0<1.10.13
Puppet Puppet>=5.3.0<5.3.7
Puppet Puppet>=5.5.0<5.5.2
Microsoft Windows
Event History
Jun 11, 2018
CVE Published
via MITRE·08:00 PM
Data Sourced
via MITRE·08:00 PM
DescriptionWeakness
Data Sourced
via NVD·08:29 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the vulnerability ID for the DLL preloading attack in Puppet Agent?
The vulnerability ID for the DLL preloading attack in Puppet Agent is CVE-2018-6514.
2
What is the severity of CVE-2018-6514?
The severity of CVE-2018-6514 is high with a severity value of 7.8.
3
Which versions of Puppet Agent are affected by CVE-2018-6514?
Puppet Agent 1.10.x prior to 1.10.13, Puppet Agent 5.3.x prior to 5.3.7, and Puppet Agent 5.5.x prior to 5.5.2 are affected by CVE-2018-6514.
4
What is the impact of the DLL preloading attack vulnerability in Puppet Agent?
The DLL preloading attack vulnerability in Puppet Agent could lead to a privilege escalation.
5
Is Microsoft Windows vulnerable to CVE-2018-6514?
No, Microsoft Windows is not vulnerable to CVE-2018-6514.