CVE-2016-9686

—

CVSS 3.0

5.3 medium

EPSS

1%p68

Published

Feb 8, 2017 (Feb 8, 2017)

Modified

Jun 17, 2026

Description

The Puppet Communications Protocol (PCP) Broker incorrectly validates message header sizes. An attacker could use this to crash the PCP Broker, preventing commands from being sent to agents. This is resolved in Puppet Enterprise 2016.4.3 and 2016.5.2.

Vendors: puppet
Products: puppet enterprise
Weakness: CWE-20
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

NVD CVE.org GitHub PoCs EPSS (1.3%)

In the news0 stories

No ingested article mentions this CVE yet.