{"api_version":"1","generated_at":"2026-07-23T04:18:06+00:00","cve":"CVE-2016-9686","urls":{"html":"https://cve.report/CVE-2016-9686","api":"https://cve.report/api/cve/CVE-2016-9686.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2016-9686","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2016-9686"},"summary":{"title":"CVE-2016-9686","description":"The Puppet Communications Protocol (PCP) Broker incorrectly validates message header sizes. An attacker could use this to crash the PCP Broker, preventing commands from being sent to agents. This is resolved in Puppet Enterprise 2016.4.3 and 2016.5.2.","state":"PUBLISHED","assigner":"puppet","published_at":"2017-02-08 22:59:00","updated_at":"2025-04-20 01:37:25"},"problem_types":["CWE-20","Denial of Service"],"metrics":[{"version":"3.0","source":"nvd@nist.gov","type":"Primary","score":"5.3","severity":"MEDIUM","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","data":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"LOW"}},{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"5","severity":"","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","data":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"}}],"references":[{"url":"https://puppet.com/security/cve/cve-2016-9686","name":"https://puppet.com/security/cve/cve-2016-9686","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"CVE-2016-9686 - Denial of Service in Puppet Communications Protocol Broker | Puppet","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-9686","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-9686","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"Puppet","product":"Puppet Enterprise","version":"affected 2015.3.x","platforms":[]},{"source":"CNA","vendor":"Puppet","product":"Puppet Enterprise","version":"affected 2016.x prior to 2016.4.3","platforms":[]},{"source":"CNA","vendor":"Puppet","product":"Puppet Enterprise","version":"affected 2016.5.1.","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2016","cve_id":"9686","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"puppet","cpe5":"puppet_enterprise","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2016","cve_id":"9686","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"puppet","cpe5":"puppet_enterprise","cpe6":"2016.5.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-06T02:59:03.352Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"https://puppet.com/security/cve/cve-2016-9686"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"Puppet Enterprise","vendor":"Puppet","versions":[{"status":"affected","version":"2015.3.x"},{"status":"affected","version":"2016.x prior to 2016.4.3"},{"status":"affected","version":"2016.5.1."}]}],"datePublic":"2017-02-07T00:00:00.000Z","descriptions":[{"lang":"en","value":"The Puppet Communications Protocol (PCP) Broker incorrectly validates message header sizes. An attacker could use this to crash the PCP Broker, preventing commands from being sent to agents. This is resolved in Puppet Enterprise 2016.4.3 and 2016.5.2."}],"problemTypes":[{"descriptions":[{"description":"Denial of Service","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2017-02-08T21:57:01.000Z","orgId":"ca2a266c-be2f-4d4b-92d0-47b76b1a9c4e","shortName":"puppet"},"references":[{"tags":["x_refsource_CONFIRM"],"url":"https://puppet.com/security/cve/cve-2016-9686"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"security@puppet.com","ID":"CVE-2016-9686","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"Puppet Enterprise","version":{"version_data":[{"version_value":"2015.3.x"},{"version_value":"2016.x prior to 2016.4.3"},{"version_value":"2016.5.1."}]}}]},"vendor_name":"Puppet"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"The Puppet Communications Protocol (PCP) Broker incorrectly validates message header sizes. An attacker could use this to crash the PCP Broker, preventing commands from being sent to agents. This is resolved in Puppet Enterprise 2016.4.3 and 2016.5.2."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"Denial of Service"}]}]},"references":{"reference_data":[{"name":"https://puppet.com/security/cve/cve-2016-9686","refsource":"CONFIRM","url":"https://puppet.com/security/cve/cve-2016-9686"}]}}}},"cveMetadata":{"assignerOrgId":"ca2a266c-be2f-4d4b-92d0-47b76b1a9c4e","assignerShortName":"puppet","cveId":"CVE-2016-9686","datePublished":"2017-02-08T22:00:00.000Z","dateReserved":"2016-11-30T00:00:00.000Z","dateUpdated":"2024-08-06T02:59:03.352Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2017-02-08 22:59:00","lastModifiedDate":"2025-04-20 01:37:25","problem_types":["CWE-20","Denial of Service"],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"LOW"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:puppet:puppet_enterprise:*:*:*:*:*:*:*:*","versionStartIncluding":"2016.4.0","versionEndExcluding":"2016.4.3","matchCriteriaId":"26593001-EE83-42CF-931C-6D85510921DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:puppet:puppet_enterprise:2016.5.1:*:*:*:*:*:*:*","matchCriteriaId":"299ACFD1-609F-42CA-B0E5-F7B54A1ACBC9"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2016","CveId":"9686","Ordinal":"1","Title":"CVE-2016-9686","CVE":"CVE-2016-9686","Year":"2016"},"notes":[{"CveYear":"2016","CveId":"9686","Ordinal":"1","NoteData":"The Puppet Communications Protocol (PCP) Broker incorrectly validates message header sizes. An attacker could use this to crash the PCP Broker, preventing commands from being sent to agents. This is resolved in Puppet Enterprise 2016.4.3 and 2016.5.2.","Type":"Description","Title":"CVE-2016-9686"},{"CveYear":"2016","CveId":"9686","Ordinal":"2","NoteData":"2017-02-08","Type":"Other","Title":"Published"},{"CveYear":"2016","CveId":"9686","Ordinal":"3","NoteData":"2017-02-08","Type":"Other","Title":"Modified"}]}}}