CVE-2021-21996

An issue was discovered in SaltStack Salt before 3003.3. A user who has control of the source, and source_hash URLs can gain full file system access as root on a salt minion.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.5 HIGH
NETWORK
HIGH
LOW
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 84%
Affected Products (NVD)
VendorProductVersion
saltstacksalt
𝑥
< 3000.3
debiandebian_linux
9.0
debiandebian_linux
10.0
debiandebian_linux
11.0
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
salt
bionic
needs-triage
focal
dne
hirsute
ignored
impish
ignored
jammy
needs-triage
kinetic
ignored
lunar
dne
mantic
dne
noble
dne
trusty
needs-triage
xenial
needs-triage
openSUSE logo
openSUSE / SLES Releases
openSUSE Product
Release
python3-salt
suse enterprise desktop 15 SP2
3002.2-49.2
fixed
suse enterprise desktop 15 SP3
3002.2-50.1.15.1
fixed
suse enterprise desktop 15 SP5
3005.1-150500.2.13
fixed
suse enterprise desktop 15 SP6
3006.0-150500.4.29.1
fixed
suse enterprise sap 15 SP2
3002.2-49.2
fixed
suse enterprise sap 15 SP3
3002.2-50.1.15.1
fixed
suse enterprise sap 15 SP5
3005.1-150500.2.13
fixed
suse enterprise sap 15 SP6
3006.0-150500.4.29.1
fixed
suse enterprise server 15
3002.2-8.41.17.1
fixed
suse enterprise server 15 SP1
3002.2-48.4
fixed
suse enterprise server 15 SP2
3002.2-49.2
fixed
suse enterprise server 15 SP3
3002.2-50.1.15.1
fixed
suse enterprise server 15 SP5
3005.1-150500.2.13
fixed
suse enterprise server 15 SP6
3006.0-150500.4.29.1
fixed
python3-salt-3004
suse enterprise desktop 15 SP4
150400.6.16
fixed
suse enterprise sap 15 SP4
150400.6.16
fixed
suse enterprise server 15 SP4
150400.6.16
fixed
salt
suse enterprise desktop 15 SP2
3002.2-49.2
fixed
suse enterprise desktop 15 SP3
3002.2-50.1.15.1
fixed
suse enterprise desktop 15 SP5
3005.1-150500.2.13
fixed
suse enterprise desktop 15 SP6
3006.0-150500.4.29.1
fixed
suse enterprise sap 15 SP2
3002.2-49.2
fixed
suse enterprise sap 15 SP3
3002.2-50.1.15.1
fixed
suse enterprise sap 15 SP5
3005.1-150500.2.13
fixed
suse enterprise sap 15 SP6
3006.0-150500.4.29.1
fixed
suse enterprise server 15
3002.2-8.41.17.1
fixed
suse enterprise server 15 SP1
3002.2-48.4
fixed
suse enterprise server 15 SP2
3002.2-49.2
fixed
suse enterprise server 15 SP3
3002.2-50.1.15.1
fixed
suse enterprise server 15 SP5
3005.1-150500.2.13
fixed
suse enterprise server 15 SP6
3006.0-150500.4.29.1
fixed
salt-3004
suse enterprise desktop 15 SP4
150400.6.16
fixed
suse enterprise sap 15 SP4
150400.6.16
fixed
suse enterprise server 15 SP4
150400.6.16
fixed
salt-api
suse enterprise sap 15 SP2
3002.2-49.2
fixed
suse enterprise sap 15 SP3
3002.2-50.1.15.1
fixed
suse enterprise server 15
3002.2-8.41.17.1
fixed
suse enterprise server 15 SP1
3002.2-48.4
fixed
suse enterprise server 15 SP2
3002.2-49.2
fixed
suse enterprise server 15 SP3
3002.2-50.1.15.1
fixed
salt-api-3004
suse enterprise sap 15 SP4
150400.6.16
fixed
suse enterprise server 15 SP4
150400.6.16
fixed
salt-bash-completion
suse enterprise desktop 15 SP2
3002.2-49.2
fixed
suse enterprise desktop 15 SP3
3002.2-50.1.15.1
fixed
suse enterprise desktop 15 SP5
3005.1-150500.2.13
fixed
suse enterprise desktop 15 SP6
3006.0-150500.4.29.1
fixed
suse enterprise sap 15 SP2
3002.2-49.2
fixed
suse enterprise sap 15 SP3
3002.2-50.1.15.1
fixed
suse enterprise sap 15 SP5
3005.1-150500.2.13
fixed
suse enterprise sap 15 SP6
3006.0-150500.4.29.1
fixed
suse enterprise server 15
3002.2-8.41.17.1
fixed
suse enterprise server 15 SP1
3002.2-48.4
fixed
suse enterprise server 15 SP2
3002.2-49.2
fixed
suse enterprise server 15 SP3
3002.2-50.1.15.1
fixed
suse enterprise server 15 SP5
3005.1-150500.2.13
fixed
suse enterprise server 15 SP6
3006.0-150500.4.29.1
fixed
salt-bash-completion-3004
suse enterprise desktop 15 SP4
150400.6.16
fixed
suse enterprise sap 15 SP4
150400.6.16
fixed
suse enterprise server 15 SP4
150400.6.16
fixed
salt-cloud
suse enterprise sap 15 SP2
3002.2-49.2
fixed
suse enterprise sap 15 SP3
3002.2-50.1.15.1
fixed
suse enterprise server 15
3002.2-8.41.17.1
fixed
suse enterprise server 15 SP1
3002.2-48.4
fixed
suse enterprise server 15 SP2
3002.2-49.2
fixed
suse enterprise server 15 SP3
3002.2-50.1.15.1
fixed
salt-cloud-3004
suse enterprise sap 15 SP4
150400.6.16
fixed
suse enterprise server 15 SP4
150400.6.16
fixed
salt-doc
suse enterprise desktop 15 SP2
3002.2-49.2
fixed
suse enterprise desktop 15 SP3
3002.2-50.1.15.1
fixed
suse enterprise desktop 15 SP5
3005.1-150500.2.13
fixed
suse enterprise desktop 15 SP6
3006.0-150500.4.29.1
fixed
suse enterprise sap 15 SP2
3002.2-49.2
fixed
suse enterprise sap 15 SP3
3002.2-50.1.15.1
fixed
suse enterprise sap 15 SP5
3005.1-150500.2.13
fixed
suse enterprise sap 15 SP6
3006.0-150500.4.29.1
fixed
suse enterprise server 15
3002.2-8.41.17.1
fixed
suse enterprise server 15 SP1
3002.2-48.4
fixed
suse enterprise server 15 SP2
3002.2-49.2
fixed
suse enterprise server 15 SP3
3002.2-50.1.15.1
fixed
suse enterprise server 15 SP5
3005.1-150500.2.13
fixed
suse enterprise server 15 SP6
3006.0-150500.4.29.1
fixed
salt-doc-3004
suse enterprise desktop 15 SP4
150400.6.16
fixed
suse enterprise sap 15 SP4
150400.6.16
fixed
suse enterprise server 15 SP4
150400.6.16
fixed
salt-fish-completion
suse enterprise sap 15 SP2
3002.2-49.2
fixed
suse enterprise sap 15 SP3
3002.2-50.1.15.1
fixed
suse enterprise server 15
3002.2-8.41.17.1
fixed
suse enterprise server 15 SP1
3002.2-48.4
fixed
suse enterprise server 15 SP2
3002.2-49.2
fixed
suse enterprise server 15 SP3
3002.2-50.1.15.1
fixed
salt-fish-completion-3004
suse enterprise sap 15 SP4
150400.6.16
fixed
suse enterprise server 15 SP4
150400.6.16
fixed
salt-master
suse enterprise sap 15 SP2
3002.2-49.2
fixed
suse enterprise sap 15 SP3
3002.2-50.1.15.1
fixed
suse enterprise server 15
3002.2-8.41.17.1
fixed
suse enterprise server 15 SP1
3002.2-48.4
fixed
suse enterprise server 15 SP2
3002.2-49.2
fixed
suse enterprise server 15 SP3
3002.2-50.1.15.1
fixed
salt-master-3004
suse enterprise sap 15 SP4
150400.6.16
fixed
suse enterprise server 15 SP4
150400.6.16
fixed
salt-minion
suse enterprise desktop 15 SP2
3002.2-49.2
fixed
suse enterprise desktop 15 SP3
3002.2-50.1.15.1
fixed
suse enterprise desktop 15 SP5
3005.1-150500.2.13
fixed
suse enterprise desktop 15 SP6
3006.0-150500.4.29.1
fixed
suse enterprise sap 15 SP2
3002.2-49.2
fixed
suse enterprise sap 15 SP3
3002.2-50.1.15.1
fixed
suse enterprise sap 15 SP5
3005.1-150500.2.13
fixed
suse enterprise sap 15 SP6
3006.0-150500.4.29.1
fixed
suse enterprise server 15
3002.2-8.41.17.1
fixed
suse enterprise server 15 SP1
3002.2-48.4
fixed
suse enterprise server 15 SP2
3002.2-49.2
fixed
suse enterprise server 15 SP3
3002.2-50.1.15.1
fixed
suse enterprise server 15 SP5
3005.1-150500.2.13
fixed
suse enterprise server 15 SP6
3006.0-150500.4.29.1
fixed
salt-minion-3004
suse enterprise desktop 15 SP4
150400.6.16
fixed
suse enterprise sap 15 SP4
150400.6.16
fixed
suse enterprise server 15 SP4
150400.6.16
fixed
salt-proxy
suse enterprise sap 15 SP2
3002.2-49.2
fixed
suse enterprise sap 15 SP3
3002.2-50.1.15.1
fixed
suse enterprise server 15
3002.2-8.41.17.1
fixed
suse enterprise server 15 SP1
3002.2-48.4
fixed
suse enterprise server 15 SP2
3002.2-49.2
fixed
suse enterprise server 15 SP3
3002.2-50.1.15.1
fixed
salt-proxy-3004
suse enterprise sap 15 SP4
150400.6.16
fixed
suse enterprise server 15 SP4
150400.6.16
fixed
salt-ssh
suse enterprise sap 15 SP2
3002.2-49.2
fixed
suse enterprise sap 15 SP3
3002.2-50.1.15.1
fixed
suse enterprise server 15
3002.2-8.41.17.1
fixed
suse enterprise server 15 SP1
3002.2-48.4
fixed
suse enterprise server 15 SP2
3002.2-49.2
fixed
suse enterprise server 15 SP3
3002.2-50.1.15.1
fixed
salt-ssh-3004
suse enterprise sap 15 SP4
150400.6.16
fixed
suse enterprise server 15 SP4
150400.6.16
fixed
salt-standalone-formulas-configuration
suse enterprise sap 15 SP2
3002.2-49.2
fixed
suse enterprise sap 15 SP3
3002.2-50.1.15.1
fixed
suse enterprise server 15
3002.2-8.41.17.1
fixed
suse enterprise server 15 SP1
3002.2-48.4
fixed
suse enterprise server 15 SP2
3002.2-49.2
fixed
suse enterprise server 15 SP3
3002.2-50.1.15.1
fixed
salt-standalone-formulas-configuration-3004
suse enterprise sap 15 SP4
150400.6.16
fixed
suse enterprise server 15 SP4
150400.6.16
fixed
salt-syndic
suse enterprise sap 15 SP2
3002.2-49.2
fixed
suse enterprise sap 15 SP3
3002.2-50.1.15.1
fixed
suse enterprise server 15
3002.2-8.41.17.1
fixed
suse enterprise server 15 SP1
3002.2-48.4
fixed
suse enterprise server 15 SP2
3002.2-49.2
fixed
suse enterprise server 15 SP3
3002.2-50.1.15.1
fixed
salt-syndic-3004
suse enterprise sap 15 SP4
150400.6.16
fixed
suse enterprise server 15 SP4
150400.6.16
fixed
salt-transactional-update
suse enterprise server 15
3002.2-8.41.17.1
fixed
suse enterprise server 15 SP1
3002.2-48.4
fixed
salt-zsh-completion
suse enterprise desktop 15 SP2
3002.2-49.2
fixed
suse enterprise desktop 15 SP3
3002.2-50.1.15.1
fixed
suse enterprise desktop 15 SP5
3005.1-150500.2.13
fixed
suse enterprise desktop 15 SP6
3006.0-150500.4.29.1
fixed
suse enterprise sap 15 SP2
3002.2-49.2
fixed
suse enterprise sap 15 SP3
3002.2-50.1.15.1
fixed
suse enterprise sap 15 SP5
3005.1-150500.2.13
fixed
suse enterprise sap 15 SP6
3006.0-150500.4.29.1
fixed
suse enterprise server 15
3002.2-8.41.17.1
fixed
suse enterprise server 15 SP1
3002.2-48.4
fixed
suse enterprise server 15 SP2
3002.2-49.2
fixed
suse enterprise server 15 SP3
3002.2-50.1.15.1
fixed
suse enterprise server 15 SP5
3005.1-150500.2.13
fixed
suse enterprise server 15 SP6
3006.0-150500.4.29.1
fixed
salt-zsh-completion-3004
suse enterprise desktop 15 SP4
150400.6.16
fixed
suse enterprise sap 15 SP4
150400.6.16
fixed
suse enterprise server 15 SP4
150400.6.16
fixed
References
https://lists.debian.org/debian-lts-announce/2021/11/msg00017.html
https://lists.debian.org/debian-lts-announce/2021/11/msg00019.html
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6BUWUF5VTENNP2ZYZBVFKPSUHLKLUBD5/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ACVT7M4YLZRLWWQ6SGRK3C6TOF4FXOXT/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MBAHHSGZLEJRCG4DX6J4RBWJAAWH55RQ/
https://saltproject.io/security_announcements/salt-security-advisory-2021-sep-02/
https://security.gentoo.org/glsa/202310-22
https://www.debian.org/security/2021/dsa-5011
https://lists.debian.org/debian-lts-announce/2021/11/msg00017.html
https://lists.debian.org/debian-lts-announce/2021/11/msg00019.html
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6BUWUF5VTENNP2ZYZBVFKPSUHLKLUBD5/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ACVT7M4YLZRLWWQ6SGRK3C6TOF4FXOXT/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MBAHHSGZLEJRCG4DX6J4RBWJAAWH55RQ/
https://saltproject.io/security_announcements/salt-security-advisory-2021-sep-02/
https://security.gentoo.org/glsa/202310-22
https://www.debian.org/security/2021/dsa-5011