Поиск уязвимостей
Количество 19
Количество 19
ALT-PU-2021-2076
ALT-PU-2021-2076: package `salt` update to version 3003.1-alt1
CVE-2021-33226
Buffer Overflow vulnerability in Saltstack v.3003 and before allows attacker to execute arbitrary code via the func variable in salt/salt/modules/status.py file. NOTE: this is disputed by third parties because an attacker cannot influence the eval input
CVE-2021-31607
In SaltStack Salt 2016.9 through 3002.6, a command injection vulnerability exists in the snapper module that allows for local privilege escalation on a minion. The attack requires that a file is created with a pathname that is backed up by snapper, and that the master calls the snapper.diff function (which executes popen unsafely).
CVE-2021-31607
In SaltStack Salt 2016.9 through 3002.6, a command injection vulnerability exists in the snapper module that allows for local privilege escalation on a minion. The attack requires that a file is created with a pathname that is backed up by snapper, and that the master calls the snapper.diff function (which executes popen unsafely).
CVE-2021-31607
In SaltStack Salt 2016.9 through 3002.6, a command injection vulnerability exists in the snapper module that allows for local privilege escalation on a minion. The attack requires that a file is created with a pathname that is backed up by snapper, and that the master calls the snapper.diff function (which executes popen unsafely).
CVE-2021-31607
In SaltStack Salt 2016.9 through 3002.6, a command injection vulnerabi ...
GHSA-3cjm-9wq5-p7gj
Buffer Overflow vulnerability in Saltstack v.3003 and before allows attacker to execute arbitrary code via the func variable in salt/salt/modules/status.py file.
openSUSE-SU-2021:1951-1
Security update for salt
SUSE-SU-2021:2102-1
Security update for Salt
SUSE-SU-2021:1951-1
Security update for salt
SUSE-SU-2021:14753-1
Security update for SUSE Manager Client Tools
GHSA-hcjf-rp5h-g5h3
Command Injection in SaltStack Salt
BDU:2022-00655
Уязвимость модуля snapper системы управления конфигурациями и удалённого выполнения операций SaltStack Salt, позволяющая нарушителю повысить свои привилегии
SUSE-SU-2021:2104-1
Security update for Salt
openSUSE-SU-2021:2106-1
Security update for salt
openSUSE-SU-2021:0899-1
Security update for salt
SUSE-SU-2021:2106-1
Security update for salt
SUSE-SU-2021:2105-1
Security update for salt
ALT-PU-2021-1590
ALT-PU-2021-1590: package `salt` update to version 3003-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| ALT-PU-2021-2076 ALT-PU-2021-2076: package `salt` update to version 3003.1-alt1 | CVSS3: 9.8 | больше 5 лет назад | |
 | CVE-2021-33226 Buffer Overflow vulnerability in Saltstack v.3003 and before allows attacker to execute arbitrary code via the func variable in salt/salt/modules/status.py file. NOTE: this is disputed by third parties because an attacker cannot influence the eval input | CVSS3: 9.8 | 2% Низкий | больше 3 лет назад |
 | CVE-2021-31607 In SaltStack Salt 2016.9 through 3002.6, a command injection vulnerability exists in the snapper module that allows for local privilege escalation on a minion. The attack requires that a file is created with a pathname that is backed up by snapper, and that the master calls the snapper.diff function (which executes popen unsafely). | CVSS3: 7.8 | 6% Низкий | больше 5 лет назад |
 | CVE-2021-31607 In SaltStack Salt 2016.9 through 3002.6, a command injection vulnerability exists in the snapper module that allows for local privilege escalation on a minion. The attack requires that a file is created with a pathname that is backed up by snapper, and that the master calls the snapper.diff function (which executes popen unsafely). | CVSS3: 7.8 | 6% Низкий | больше 5 лет назад |
| CVE-2021-31607 In SaltStack Salt 2016.9 through 3002.6, a command injection vulnerability exists in the snapper module that allows for local privilege escalation on a minion. The attack requires that a file is created with a pathname that is backed up by snapper, and that the master calls the snapper.diff function (which executes popen unsafely). | CVSS3: 7.8 | 6% Низкий | больше 5 лет назад |
| CVE-2021-31607 In SaltStack Salt 2016.9 through 3002.6, a command injection vulnerabi ... | CVSS3: 7.8 | 6% Низкий | больше 5 лет назад |
| GHSA-3cjm-9wq5-p7gj Buffer Overflow vulnerability in Saltstack v.3003 and before allows attacker to execute arbitrary code via the func variable in salt/salt/modules/status.py file. | CVSS3: 9.8 | 2% Низкий | больше 3 лет назад |
 | openSUSE-SU-2021:1951-1 Security update for salt | 6% Низкий | больше 5 лет назад | |
| SUSE-SU-2021:2102-1 Security update for Salt | 6% Низкий | больше 5 лет назад | |
| SUSE-SU-2021:1951-1 Security update for salt | 6% Низкий | больше 5 лет назад | |
| SUSE-SU-2021:14753-1 Security update for SUSE Manager Client Tools | 6% Низкий | больше 5 лет назад | |
| GHSA-hcjf-rp5h-g5h3 Command Injection in SaltStack Salt | CVSS3: 7.8 | 6% Низкий | больше 4 лет назад |
 | BDU:2022-00655 Уязвимость модуля snapper системы управления конфигурациями и удалённого выполнения операций SaltStack Salt, позволяющая нарушителю повысить свои привилегии | CVSS3: 7.8 | 6% Низкий | больше 5 лет назад |
| SUSE-SU-2021:2104-1 Security update for Salt | больше 5 лет назад | ||
| openSUSE-SU-2021:2106-1 Security update for salt | больше 5 лет назад | ||
| openSUSE-SU-2021:0899-1 Security update for salt | больше 5 лет назад | ||
| SUSE-SU-2021:2106-1 Security update for salt | больше 5 лет назад | ||
| SUSE-SU-2021:2105-1 Security update for salt | больше 5 лет назад | ||
| ALT-PU-2021-1590 ALT-PU-2021-1590: package `salt` update to version 3003-alt1 | CVSS3: 9.8 | больше 5 лет назад |
Уязвимостей на страницу