Skip to content
OpenAdvisories
Critical USN-4769-1 8 CVEs

salt vulnerabilities

Published Mar 15, 2021 · Updated Jun 29, 2026

Ecosystem: Ubuntu

Summary

It was discovered that Salt allowed remote attackers to write to
arbitrary files via a special crafted file. An attacker could use this
vulnerability to cause a DoS or possibly execute arbitrary code. This
issue only affected Ubuntu 14.04 ESM. (CVE-2014-3563)

Andreas Stieger discovered that Salt exposed git usernames and passwords
in log files. An attacker could use this issue to retrieve sensitive
information. This issue only affected Ubuntu 14.04 ESM. (CVE-2015-6918).

It was discovered that Salt exposed password authentication
credentials in log files. An attacker could use this issue to retrieve
sensitive information. This issue only affected Ubuntu 14.04 ESM.
(CVE-2015-6941)

It was discovered that Salt allowed remote attackers to write to
arbitrary files via a special crafted file. An attacker could use this
issue to cause a DoS or possibly execute arbitrary code. (CVE-2017-12791,
CVE-2017-14695, CVE-2017-14696)

It was discovered that Salt allowed remote attackers to determine which
files exist on the server. An attacker could use this issue to extract
sensitive information. This issue only affected Ubuntu 16.04 ESM.
(CVE-2018-15750)

It was discovered that Salt allowed users to bypass authentication. An
attacker could use this issue to extract sensitive information, execute
arbitrary code or crash the server. This issue only affected Ubuntu 16.04
ESM. (CVE-2018-15751)

Fixed packages 2

ReleasePackageFixed in
Ubuntu · Pro 14.04 LTS Pro:14.04:LTS salt 0.17.5+ds-1ubuntu0.1~esm1
Ubuntu · Pro 16.04 LTS Pro:16.04:LTS salt 2015.8.8+ds-1ubuntu0.1+esm1

Vulnerabilities 8

  • Critical 9.8
    CVE-2015-6941

    salt password information leaked in debug logs

    win_useradd, salt-cloud and the Linode driver in salt 2015.5.x before 2015.5.6, and 2015.8.x before 2015.8.1 leak password information in debug logs.

    salt salt Ubuntu PyPI
  • Critical 9.8
    CVE-2017-12791

    SaltStack Salt Directory traversal vulnerability in minion id validation

    Directory traversal vulnerability in minion id validation in SaltStack Salt before 2016.11.7 and 2017.7.x before 2017.7.1 allows remote minions with incorrect credentials to authenticate to a master via a crafted minion ID.

    salt salt Ubuntu PyPI
  • Critical 9.8
    CVE-2017-14695

    SaltStack Salt Directory traversal vulnerability in minion id validation

    Directory traversal vulnerability in minion id validation in SaltStack Salt before 2016.3.8, 2016.11.x before 2016.11.8, and 2017.7.x before 2017.7.2 allows remote minions with incorrect credentials to authenticate to a master via a crafted minion ID. NOTE: t…

    salt salt Ubuntu PyPI
  • Critical 9.8
    CVE-2018-15751

    SaltStack Salt Remote command execution and incorrect access control when using salt-api

    SaltStack Salt before 2017.7.8 and 2018.3.x before 2018.3.3 allow remote attackers to bypass authentication and execute arbitrary commands via salt-api(netapi).

    salt salt salt Ubuntu Alpine PyPI
  • High 7.5
    CVE-2017-14696

    SaltStack Salt Denial of Service via a crafted authentication request

    SaltStack Salt before 2016.3.8, 2016.11.x before 2016.11.8, and 2017.7.x before 2017.7.2 allows remote attackers to cause a denial of service via a crafted authentication request.

    salt salt Ubuntu PyPI
  • Medium 6.3
    CVE-2015-6918

    salt leaks git usernames and passwords to the log

    salt before 2015.5.5 leaks git usernames and passwords to the log.

    salt salt Ubuntu PyPI
  • Medium 5.3
    CVE-2018-15750

    SaltStack Salt Directory Traversal vulnerability in salt-api

    Directory Traversal vulnerability in salt-api in SaltStack Salt before 2017.7.8 and 2018.3.x before 2018.3.3 allows remote attackers to determine which files exist on the server.

    salt salt salt Ubuntu Alpine PyPI
  • High —
    CVE-2014-3563

    SaltStack Salt Insecure Temporary File Creation

    Multiple unspecified vulnerabilities in Salt (aka SaltStack) before 2014.1.10 allow local users to have an unspecified impact via vectors related to temporary file creation in (1) seed.py, (2) salt-ssh, or (3) salt-cloud.

    salt salt Ubuntu PyPI

References

  • report
    https://ubuntu.com/security/CVE-2014-3563
  • report
    https://ubuntu.com/security/CVE-2015-6918
  • report
    https://ubuntu.com/security/CVE-2015-6941
  • report
    https://ubuntu.com/security/CVE-2017-12791
  • report
    https://ubuntu.com/security/CVE-2017-14695
  • report
    https://ubuntu.com/security/CVE-2017-14696
  • report
    https://ubuntu.com/security/CVE-2018-15750
  • report
    https://ubuntu.com/security/CVE-2018-15751