Unrated severityNVD Advisory· Published May 4, 2023· Updated Jan 29, 2025

CVE-2023-1894

Description

A Regular Expression Denial of Service (ReDoS) issue was discovered in Puppet Server 7.9.2 certificate validation. An issue related to specifically crafted certificate names significantly slowed down server operations.

Affected products

Puppet (software)/Puppet Serverllm-fuzzy2 versions
= 7.9.2+ 1 more
- (no CPE)range: = 7.9.2
- (no CPE)range: 7.9.2
Puppet (software)/Puppet Enterprisecpe-rescue
Range: 2021.7.1

Patches

Vulnerability mechanics

References

www.puppet.com/security/cve/cve-2023-1894-puppet-server-redosmitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000