CVE-2021-27025

Published: Nov 18, 2021Modified: Jun 17, 2026

6.5

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Exploitability: 2.8 / Impact: 3.6

Source: NVD

Description

A flaw was discovered in Puppet Agent where the agent may silently ignore Augeas settings or may be vulnerable to a Denial of Service condition prior to the first 'pluginsync'.

Affected (6)

Products: Puppet: Puppet, Puppet Agent, Puppet Enterprise · Fedoraproject: Fedora

3 products

1 product

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Puppet Puppet	From 2021.0.0 to 2021.4.0
Puppet Puppet Agent	Before 6.25.1
Puppet Puppet Agent	From 5.5.0 to 5.5.22
Puppet Puppet Agent	From 7.0.0 to 7.12.1
Puppet Puppet Enterprise	Before 2019.8.9

Configuration B

1 vulnerable

Vulnerable Software	Affected Versions
Fedoraproject Fedora	Version 35

References (4)

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/62SELE7EKVKZL4GABFMVYMIIUZ7FPEF7/

Source: security@puppet.com

https://puppet.com/security/cve/cve-2021-27025

Source: security@puppet.com

Vendor Advisory

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/62SELE7EKVKZL4GABFMVYMIIUZ7FPEF7/

Source: af854a3a-2127-422b-91ae-364da2661108

https://puppet.com/security/cve/cve-2021-27025

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.