2 matches found
CVE-2021-33226: Buffer Copy without Checking Size of Input
Buffer Overflow vulnerability in Saltstack v.3003 and before allows attacker to execute arbitrary code via the func variable in salt/salt/modules/status.py file. NOTE: this is disputed by third parties because an attacker cannot influence the eval input...
9.8CVSS6.5AI score0.01642EPSS
SaveExploits1References3
PT-2023-12201
Name of the Vulnerable Software and Affected Versions Saltstack versions 3003 and before Description The issue allows an attacker to execute arbitrary code via the func variable in the salt/salt/modules/status.py file. This is a Buffer Overflow vulnerability. Note that there is a dispute regardin...
9.8CVSS0.01642EPSS
SaveExploits1References64
20