Lucene search

K
debiancveDebian Security Bug TrackerDEBIANCVE:CVE-2017-5200
HistorySep 26, 2017 - 2:29 p.m.

CVE-2017-5200

2017-09-2614:29:00
Debian Security Bug Tracker
security-tracker.debian.org
8

0.002 Low

EPSS

Percentile

61.3%

Salt-api in SaltStack Salt before 2015.8.13, 2016.3.x before 2016.3.5, and 2016.11.x before 2016.11.2 allows arbitrary command execution on a salt-master via Salt’s ssh_client.

OSVersionArchitecturePackageVersionFilename
Debian11allsalt< 2016.11.2+ds-1salt_2016.11.2+ds-1_all.deb
Debian10allsalt< 2016.11.2+ds-1salt_2016.11.2+ds-1_all.deb