Lucene search
K

6 matches found

Veracode
Veracode
added 2023/02/24 7:54 a.m.15 views

Arbitrary Code Execution

salt is vulnerable to Arbitrary Code Execution. The vulnerability is due to a a buffer overflow in salt/salt/modules/status.py which allows an attacker to upload and execute malicious code...

9.8CVSS9.5AI score0.04007EPSS
Exploits1References3Affected Software1
SUSE CVE
SUSE CVE
added 2023/02/21 2:1 a.m.1 views

SUSE CVE-2021-33226

Buffer Overflow vulnerability in Saltstack v.3003 and before allows attacker to execute arbitrary code via the func variable in salt/salt/modules/status.py file. NOTE: this is disputed by third parties because an attacker cannot influence the eval input...

9.8CVSS9.8AI score0.04007EPSS
Exploits1References3
NVD
NVD
added 2023/02/17 6:15 p.m.9 views

CVE-2021-33226

Buffer Overflow vulnerability in Saltstack v.3003 and before allows attacker to execute arbitrary code via the func variable in salt/salt/modules/status.py file. NOTE: this is disputed by third parties because an attacker cannot influence the eval input...

9.8CVSS9.7AI score0.04007EPSS
Exploits1References2
PyPA
PyPA
added 2023/02/17 6:15 p.m.5 views

PYSEC-2023-47

Buffer Overflow vulnerability in Saltstack v.3003 and before allows attacker to execute arbitrary code via the func variable in salt/salt/modules/status.py file...

9.8CVSS8AI score0.04007EPSS
Exploits1References2Affected Software1
Prion
Prion
added 2023/02/17 6:15 p.m.12 views

Buffer overflow

DISPUTED Buffer Overflow vulnerability in Saltstack v.3003 and before allows attacker to execute arbitrary code via the func variable in salt/salt/modules/status.py file. NOTE: this is disputed by third parties because an attacker cannot influence the eval input...

7.5CVSS9.6AI score0.04007EPSS
Exploits1References2Affected Software1
Cvelist
Cvelist
added 2023/02/17 12:0 a.m.14 views

CVE-2021-33226

Buffer Overflow vulnerability in Saltstack v.3003 and before allows attacker to execute arbitrary code via the func variable in salt/salt/modules/status.py file. NOTE: this is disputed by third parties because an attacker cannot influence the eval input...

9.9AI score0.04007EPSS
Exploits1References2
Rows per page
Query Builder