CVE-2014-3563 SaltStack Salt Insecure Temporary File Creation
HighCVSS 7.2
EPSS 0.41%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple unspecified vulnerabilities in Salt (aka SaltStack) before 2014.1.10 allow local users to have an unspecified impact via vectors related to temporary file creation in (1) seed.py, (2) salt-ssh, or (3) salt-cloud.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| pypi salt(PyPI) | < 2014.1.10 | 2014.1.10 |
| pypi salt(PyPI) | = 0.10.0 | No fix listed |
| pypi salt(PyPI) | = 0.10.1 | No fix listed |
| pypi salt(PyPI) | = 0.10.2 | No fix listed |
| pypi salt(PyPI) | = 0.10.3 | No fix listed |
| pypi salt(PyPI) | = 0.10.4 | No fix listed |
| pypi salt(PyPI) | = 0.10.5 | No fix listed |
| pypi salt(PyPI) | = 0.11.0 | No fix listed |
| pypi salt(PyPI) | = 0.11.1 | No fix listed |
| pypi salt(PyPI) | = 0.12.0 | No fix listed |
| pypi salt(PyPI) | = 0.12.1 | No fix listed |
| pypi salt(PyPI) | = 0.13.0 | No fix listed |
| pypi salt(PyPI) | = 0.13.1 | No fix listed |
| pypi salt(PyPI) | = 0.13.2 | No fix listed |
| pypi salt(PyPI) | = 0.13.3 | No fix listed |
| pypi salt(PyPI) | = 0.14.0 | No fix listed |
| pypi salt(PyPI) | = 0.14.1 | No fix listed |
| pypi salt(PyPI) | = 0.15.0 | No fix listed |
| pypi salt(PyPI) | = 0.15.1 | No fix listed |
| pypi salt(PyPI) | = 0.15.2 | No fix listed |
| pypi salt(PyPI) | = 0.15.3 | No fix listed |
| pypi salt(PyPI) | = 0.15.90 | No fix listed |
| pypi salt(PyPI) | = 0.16.0 | No fix listed |
| pypi salt(PyPI) | = 0.16.1 | No fix listed |
| pypi salt(PyPI) | = 0.16.2 | No fix listed |
Show 36 more
| Product | Affected versions | Fixed in |
|---|---|---|
| pypi salt(PyPI) | = 0.16.3 | No fix listed |
| pypi salt(PyPI) | = 0.16.4 | No fix listed |
| pypi salt(PyPI) | = 0.17.0 | No fix listed |
| pypi salt(PyPI) | = 0.17.0rc1 | No fix listed |
| pypi salt(PyPI) | = 0.17.1 | No fix listed |
| pypi salt(PyPI) | = 0.17.2 | No fix listed |
| pypi salt(PyPI) | = 0.17.3 | No fix listed |
| pypi salt(PyPI) | = 0.17.4 | No fix listed |
| pypi salt(PyPI) | = 0.17.5 | No fix listed |
| pypi salt(PyPI) | = 0.8.7 | No fix listed |
| pypi salt(PyPI) | = 0.8.9 | No fix listed |
| pypi salt(PyPI) | = 0.9.0 | No fix listed |
| pypi salt(PyPI) | = 0.9.1 | No fix listed |
| pypi salt(PyPI) | = 0.9.2 | No fix listed |
| pypi salt(PyPI) | = 0.9.3 | No fix listed |
| pypi salt(PyPI) | = 0.9.4 | No fix listed |
| pypi salt(PyPI) | = 0.9.5 | No fix listed |
| pypi salt(PyPI) | = 0.9.6 | No fix listed |
| pypi salt(PyPI) | = 0.9.7 | No fix listed |
| pypi salt(PyPI) | = 0.9.8 | No fix listed |
| pypi salt(PyPI) | = 0.9.9 | No fix listed |
| pypi salt(PyPI) | = 0.9.9.1 | No fix listed |
| pypi salt(PyPI) | = 2014.1.0 | No fix listed |
| pypi salt(PyPI) | = 2014.1.0rc1 | No fix listed |
| pypi salt(PyPI) | = 2014.1.0rc2 | No fix listed |
| pypi salt(PyPI) | = 2014.1.0rc3 | No fix listed |
| pypi salt(PyPI) | = 2014.1.1 | No fix listed |
| pypi salt(PyPI) | = 2014.1.2 | No fix listed |
| pypi salt(PyPI) | = 2014.1.3 | No fix listed |
| pypi salt(PyPI) | = 2014.1.4 | No fix listed |
| pypi salt(PyPI) | = 2014.1.5 | No fix listed |
| pypi salt(PyPI) | = 2014.1.6 | No fix listed |
| pypi salt(PyPI) | = 2014.1.7 | No fix listed |
| pypi salt(PyPI) | = 2014.1.8 | No fix listed |
| pypi salt(PyPI) | = 2014.1.9 | No fix listed |
| saltstack salt | <= 2014.1.9 | No fix listed |
References
- nvd.nist.gov third-party-advisory vendor-advisory
- salt-cve20143563-symlink(95392) vdb-entry
- github.com
- github.com product
- docs.saltstack.com patch vendor-advisory
- [oss-security] 20140821 Revised: Salt 2014.1.10 released mailing-list patch
- 69319 vdb-entry
- github.com vendor-advisory