Description
Buffer Overflow vulnerability in Saltstack v.3003 and before allows attacker to execute arbitrary code via the func variable in salt/salt/modules/status.py file. NOTE: this is disputed by third parties because an attacker cannot influence the eval input
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | salt | < 3003.1 | 3003.1 | PYSEC-2023-47 |
Advisories 1
- WID-SEC-2023-0421 SaltStack Salt: Schwachstelle ermöglicht Codeausführung BSI CERT-Bund (WID) · Feb 19, 2023