CVE catalog
CVE-2021-27018
UBUNTU-CVE-2021-27018
- Severity
- Unknown
- Published
- Updated
- Source
- [NVD] · [CVE record]
- EPSS
- 0.54% · Oct 25, 2026
The mechanism which performs certificate validation was discovered to have a flaw that resulted in certificates signed by an internal certificate authority to not be properly validated. This issue only affects clients that are configured to utilize Tenable.sc as the vulnerability data source.
Vulnerable and fixed packages
Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.
| Distribution | Package | Release | Version | Status |
|---|---|---|---|---|
| Ubuntu | puppet | 14.04 | 3.2.4-2ubuntu2 | vulnerable |
| Ubuntu | puppet | 14.04 | 3.3.1-1ubuntu1 | vulnerable |
| Ubuntu | puppet | 14.04 | 3.3.1-1ubuntu2 | vulnerable |
| Ubuntu | puppet | 14.04 | 3.3.1-1ubuntu3 | vulnerable |
| Ubuntu | puppet | 14.04 | 3.4.2-1 | vulnerable |
| Ubuntu | puppet | 14.04 | 3.4.3-1 | vulnerable |
| Ubuntu | puppet | 14.04 | 3.4.3-1ubuntu1 | vulnerable |
| Ubuntu | puppet | 14.04 | 3.4.3-1ubuntu1.1 | vulnerable |
| Ubuntu | puppet | 14.04 | 3.4.3-1ubuntu1.2 | vulnerable |
| Ubuntu | puppet | 14.04 | 3.4.3-1ubuntu1.3 | vulnerable |
| Ubuntu | puppet | pro | 3.7.2-5ubuntu2 | vulnerable |
| Ubuntu | puppet | pro | 3.8.4-1ubuntu1 | vulnerable |
| Ubuntu | puppet | pro | 3.8.5-1ubuntu1 | vulnerable |
| Ubuntu | puppet | pro | 3.8.5-2 | vulnerable |
| Ubuntu | puppet | pro | 3.8.5-2ubuntu0.1 | vulnerable |
| Ubuntu | puppet | pro | 3.8.5-2ubuntu0.1+esm1 | vulnerable |
| Ubuntu | puppet | 18.04 | 4.10.4-2ubuntu1 | vulnerable |
| Ubuntu | puppet | 18.04 | 4.10.4-2ubuntu2 | vulnerable |
| Ubuntu | puppet | 18.04 | 4.10.4-2ubuntu3 | vulnerable |
| Ubuntu | puppet | 18.04 | 5.4.0-2ubuntu3 | vulnerable |
| Ubuntu | puppet | 20.04 | 5.4.0-2ubuntu3 | vulnerable |
| Ubuntu | puppet | 20.04 | 5.5.10-4ubuntu3 | vulnerable |
| Ubuntu | puppet | 22.04 | 5.5.22-1ubuntu1 | vulnerable |
| Ubuntu | puppet | 22.04 | 5.5.22-4 | vulnerable |
| Ubuntu | puppet | 22.04 | 5.5.22-4ubuntu0.2 | vulnerable |
Fixed-version evidence
OpenFactory catalog packages
No matching packages in this catalog.
Observed: