CVE-2021-33226: Buffer Overflow
DISPUTED Buffer Overflow vulnerability in Saltstack v.3003 and before allows attacker to execute arbitrary code via the func variable in salt/salt/modules/status.py file. NOTE: this is disputed by third parties because an attacker cannot influence the eval input
Affected Software
Event History
Frequently Asked Questions
What is CVE-2021-33226?
CVE-2021-33226 is a Buffer Overflow vulnerability in Saltstack v.3003 and before that allows an attacker to execute arbitrary code.
How can an attacker exploit CVE-2021-33226?
An attacker can exploit CVE-2021-33226 by exploiting the buffer overflow vulnerability in the 'func' variable in the salt/salt/modules/status.py file.
What is the severity of CVE-2021-33226?
CVE-2021-33226 has a severity rating of 9.8 (critical).
Is CVE-2021-33226 being disputed by third parties?
Yes, CVE-2021-33226 is disputed by third parties because an attacker cannot influence the eval input.
Are there any references for CVE-2021-33226?
Yes, you can find references for CVE-2021-33226 at the following links: - [Bugzilla](https://bugzilla.suse.com/show_bug.cgi?id=1208473) - [GitHub](https://github.com/saltstack/salt/blob/master/salt/modules/status.py)