Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

altlinux логотип

ALT-PU-2020-4251

Критический

ALT-PU-2020-4251: package salt update to version 3002.2-alt1

Источник
errata.altlinux.org
Дата публикации
20.11.2020
Дата обновления
20.11.2020
Устраненные уязвимости
4
ALT Linux branch p11
ALT Container
ALT Education
ALT Workstation
ALT Workstation K
ALT Server
ALT Virtualization PVE Edition
ALT Linux branch p10
ALT Server
ALT Virtualization Server
ALT Workstation
ALT Workstation K
ALT Education
Simply Linux
Starterkit
ALT Container

Описание

This update upgrades salt to version 3002.2-alt1.

Устраненные уязвимости4

Ссылки3

ALT-PU-2020-4251https://errata.altlinux.org/ALT-PU-2020-4251

GHSA-pmj6-9f8c-8g2m

https://github.com/advisories/GHSA-pmj6-9f8c-8g2m

GHSA-qr38-h96j-2j3w

https://github.com/advisories/GHSA-qr38-h96j-2j3w

Связанные уязвимости

ubuntu логотип

CVE-2021-25315

CVSS3: 7.8
ubuntu
больше 5 лет назад

CWE - CWE-287: Improper Authentication vulnerability in SUSE Linux Enterprise Server 15 SP 3; openSUSE Tumbleweed allows local attackers to execute arbitrary code via salt without the need to specify valid credentials. This issue affects: SUSE Linux Enterprise Server 15 SP 3 salt versions prior to 3002.2-3. openSUSE Tumbleweed salt version 3002.2-2.1 and prior versions. This issue affects: SUSE Linux Enterprise Server 15 SP 3 salt versions prior to 3002.2-3. openSUSE Tumbleweed salt version 3002.2-2.1 and prior versions.

redhat логотип

CVE-2021-25315

CVSS3: 7.8
redhat
больше 5 лет назад

CWE - CWE-287: Improper Authentication vulnerability in SUSE Linux Enterprise Server 15 SP 3; openSUSE Tumbleweed allows local attackers to execute arbitrary code via salt without the need to specify valid credentials. This issue affects: SUSE Linux Enterprise Server 15 SP 3 salt versions prior to 3002.2-3. openSUSE Tumbleweed salt version 3002.2-2.1 and prior versions. This issue affects: SUSE Linux Enterprise Server 15 SP 3 salt versions prior to 3002.2-3. openSUSE Tumbleweed salt version 3002.2-2.1 and prior versions.

nvd логотип

CVE-2021-25315

CVSS3: 7.8
nvd
больше 5 лет назад

CWE - CWE-287: Improper Authentication vulnerability in SUSE Linux Enterprise Server 15 SP 3; openSUSE Tumbleweed allows local attackers to execute arbitrary code via salt without the need to specify valid credentials. This issue affects: SUSE Linux Enterprise Server 15 SP 3 salt versions prior to 3002.2-3. openSUSE Tumbleweed salt version 3002.2-2.1 and prior versions. This issue affects: SUSE Linux Enterprise Server 15 SP 3 salt versions prior to 3002.2-3. openSUSE Tumbleweed salt version 3002.2-2.1 and prior versions.

debian логотип

CVE-2021-25315

CVSS3: 7.8
debian
больше 5 лет назад

CWE - CWE-287: Improper Authentication vulnerability in SUSE Linux Ent ...

ubuntu логотип

CVE-2020-16846

CVSS3: 9.8
ubuntu
около 6 лет назад

An issue was discovered in SaltStack Salt through 3002. Sending crafted web requests to the Salt API, with the SSH client enabled, can result in shell injection.