Skip to content
OpenAdvisories
Critical DLA-2294-1 2 CVEs

salt - security update

Published Jul 28, 2020 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 9 salt 2016.11.2+ds-1+deb9u5

Vulnerabilities 2

  • Critical 9.8
    CVE-2018-15751

    SaltStack Salt Remote command execution and incorrect access control when using salt-api

    SaltStack Salt before 2017.7.8 and 2018.3.x before 2018.3.3 allow remote attackers to bypass authentication and execute arbitrary commands via salt-api(netapi).

    salt salt salt Ubuntu Alpine PyPI
  • Medium 5.3
    CVE-2018-15750

    SaltStack Salt Directory Traversal vulnerability in salt-api

    Directory Traversal vulnerability in salt-api in SaltStack Salt before 2017.7.8 and 2018.3.x before 2018.3.3 allows remote attackers to determine which files exist on the server.

    salt salt salt Ubuntu Alpine PyPI