VYPR
← All advisories
High severity7.8NVD Advisory· Published Jun 11, 2018· Updated Jun 17, 2026

CVE-2018-6514

CVE-2018-6514

Description

In Puppet Agent 1.10.x prior to 1.10.13, Puppet Agent 5.3.x prior to 5.3.7, Puppet Agent 5.5.x prior to 5.5.2, Facter on Windows is vulnerable to a DLL preloading attack, which could lead to a privilege escalation.

Affected products

2
  • Puppet (software)/Puppet Agentllm-fuzzy2 versions
    >=1.10.0, <=1.10.12 || >=5.3.0, <=5.3.6 || >=5.5.0, <=5.5.1+ 1 more
    • (no CPE)range: >=1.10.0, <=1.10.12 || >=5.3.0, <=5.3.6 || >=5.5.0, <=5.5.1
    • (no CPE)range: Puppet Agent 1.10.x prior to 1.10.13, Puppet Agent 5.3.x prior to 5.3.7, Puppet Agent 5.5.x prior to 5.5.2

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.