CVE-2014-3563: High severity saltstack vulnerability
Published Aug 22, 2014
·Updated
Last updated 24 July 2024
Other sources
Multiple unspecified vulnerabilities in Salt (aka SaltStack) before 2014.1.10 allow local users to have an unspecified impact via vectors related to temporary file creation in (1) seed.py, (2) salt-ssh, or (3) salt-cloud.
Affected Software
3 affected componentsFixes available
debian/salt
pip/salt<2014.1.10
2014.1.10
SaltStack Salt<=2014.1.9
Remediation
Patch Available
Event History
Aug 22, 2014
CVE Published
via MITRE·05:00 PM
Data Sourced
via MITRE·05:00 PM
Description
May 17, 2022
Advisory Published
via GitHub·01:24 AM
Jan 11, 2024
Data Sourced
via Launchpad·10:21 PM
Description
Sep 13, 2024
Data Sourced
via Ubuntu·11:59 PM
RemedyDescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2014-3563?
CVE-2014-3563 is considered to have unspecified severity, as it affects multiple vulnerabilities related to local user permissions and temporary file creation.
2
How do I fix CVE-2014-3563?
To fix CVE-2014-3563, upgrade to Salt version 2014.1.10 or later.
3
Which versions of Salt are affected by CVE-2014-3563?
CVE-2014-3563 affects all SaltStack versions before 2014.1.10.
4
What vulnerabilities does CVE-2014-3563 include?
CVE-2014-3563 includes vulnerabilities related to temporary file creation in seed.py, salt-ssh, and salt-cloud.
5
Who can exploit CVE-2014-3563?
Local users may exploit CVE-2014-3563 to achieve unspecified impacts on the system.