Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×
Ubuntu 14.04 LTS: USN-7181-1 critical: Salt remote code execution
ubuntu
January 6, 2025
Salt could be made to crash or run programs if it received specially crafted network traffic.
Summary
Salt could be made to crash or run programs if it received specially
crafted network traffic.
Software Description:
- salt: Infrastructure management built on a dynamic communication bus
Details:
It was discovered that Salt incorrectly handled web requests when the SSH
client was enabled. An attacker could possibly use this issue to achieve
remote code execution or obtain sensitive information.
Topics Covered
Update Instructions
The problem can be corrected by updating your system to the following package versions: Ubuntu 14.04 LTS salt-common 0.17.5+ds-1ubuntu0.1~esm4 Available with Ubuntu Pro salt-master 0.17.5+ds-1ubuntu0.1~esm4 Available with Ubuntu Pro salt-minion 0.17.5+ds-1ubuntu0.1~esm4 Available with Ubuntu Pro salt-ssh 0.17.5+ds-1ubuntu0.1~esm4 Available with Ubuntu Pro salt-syndic 0.17.5+ds-1ubuntu0.1~esm4 Available with Ubuntu Pro In general, a standard system update will make all the necessary changes.
References
https://ubuntu.com/security/notices/USN-7181-1
CVE-2020-16846
PREVIOUS
NEXT
Severity
critical
Lowest
Low
Medium
High
Critical
Ubuntu Security Notice USN-7181-1
Topics Covered
Package Information
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!