salt vulnerabilities (openSUSE)
53 vulnerabilities.
-
saltopenSUSE Tornado has a DoS due to too many multipart parts 8.7 High -
saltopenSUSE Tornado is Vulnerable to Quadratic DoS via Crafted Multipart Parameters 7.5 High -
saltopenSUSE Tornado is Vulnerable to Quadratic DoS via Repeated Header Coalescing 7.5 High -
saltopenSUSE Tornado vulnerable to Header Injection and XSS via reason argument 5.4 Medium -
saltopenSUSE Excessive read buffering DoS in http.client 6.3 Medium -
saltopenSUSE Salt Master authentication protocol downgrade may enable minion impersonation 7.5 High -
saltopenSUSE Salt junos module uses an unsafe YAML loader which may allow unintended code execution 7.3 High -
saltopenSUSE CVE-2024-38824 salt advisory 9.6 Critical -
saltopenSUSE CVE-2025-22242 salt advisory 5.6 Medium -
saltopenSUSE CVE-2025-22241 salt advisory 5.6 Medium -
saltopenSUSE CVE-2025-22240 salt advisory 6.3 Medium -
saltopenSUSE CVE-2025-22239 salt advisory 8.1 High -
saltopenSUSE CVE-2025-22238 salt advisory 4.2 Medium -
saltopenSUSE CVE-2025-22237 salt advisory 6.7 Medium -
saltopenSUSE CVE-2025-22236 salt advisory 8.1 High -
saltopenSUSE CVE-2024-38825 Salt Advisory 6.4 Medium -
saltopenSUSE CVE-2024-38823 Salt Advisory 2.7 Low -
saltopenSUSE CVE-2024-38822 Salt Advisory 2.7 Low -
saltopenSUSE Tornado vulnerable to excessive logging caused by malformed multipart form data 7.5 High -
saltopenSUSE Specially crafted url can be created which leads to a directory traversal in the salt file server 7.7 High -
saltopenSUSE Syndic cache directory creation is vulnerable to a directory traversal attack 5.0 Medium -
saltopenSUSE Salt security advisory release - 2023-OCT-27 6.7 Medium -
saltopenSUSE Salt can cause Git Providers to get wrong data 4.2 Medium -
saltopenSUSE Salt vulnerable to denial of service 5.3 Medium -
saltopenSUSE Security update for Salt No score -
saltopenSUSE Open redirect in Tornado 6.1 Medium -
saltopenSUSE Salt's PAM auth fails to reject locked accounts 8.8 High -
saltopenSUSE SaltStack Salt Permissions Bypass 8.8 High -
saltopenSUSE SaltStack Salt Authentication Bypass by Capture-replay 8.8 High -
saltopenSUSE SaltStack Salt Improper Authentication via Man in the Middle Attack 3.7 Low -
saltopenSUSE SaltStack Improper Verification of Cryptographic Signature 8.8 High -
saltopenSUSE Exposure of Resource to Wrong Sphere in salt 7.5 High -
saltopenSUSE Command Injection in SaltStack Salt 7.8 High -
saltopenSUSE salt-api unauthenticated remote code execution 9.8 Critical -
saltopenSUSE SaltStack Salt is vulnerable to shell injection via ProxyCommand argument 9.8 Critical -
saltopenSUSE SaltStack Salt command injection in the Salt-API when using the Salt-SSH client 9.8 Critical -
saltopenSUSE SaltStack Salt eauth tokens can be used once after expiration 9.1 Critical -
saltopenSUSE SaltStack Salt Cleartext Storage of Sensitive Information via cmdmod 4.4 Medium -
saltopenSUSE SaltStack Salt Server Side Template Injection 9.8 Critical -
saltopenSUSE SaltStack Salt Directory Traversal vulnerability 9.1 Critical -
saltopenSUSE SaltStack Salt Improper Authentication vulnerability 9.8 Critical -
saltopenSUSE SaltStack Salt Improper SSL Certificate Validation 7.4 High -
saltopenSUSE SaltStack Salt Improper Certificate Validation 5.9 Medium -
saltopenSUSE SaltStack Salt command injection via a crafted process name 7.8 High -
saltopenSUSE SaltStack Salt Improper Validation of eauth credentials and tokens in salt-netapi 9.8 Critical -
saltopenSUSE SaltStack Salt Allows creating certificates with weak file permissions 5.5 Medium -
saltopenSUSE SaltStack Salt Command Injection in netapi ssh client 9.8 Critical -
saltopenSUSE SaltStack Salt is vulnerable Arbitrary Directory Access 6.5 Medium -
saltopenSUSE SaltStack Salt Unauthenticated Remote Code Execution 9.8 Critical -
saltopenSUSE Local privilege escalation from user salt to root 8.4 High - Show olderLoading…