Approved changes feed: RSS · Atom

cpe:2.3:a:saltstack:salt:2016.11.5:*:*:*:*:*:*:*

part: a version: 2016.11.5 update: *

VendorSaltstack (505beb5a-4fc5-5540-9632-5d28b16aab0d)
ProductSalt (dd0d2bbf-d65f-5171-9eae-a243e2f3cc18)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/saltstack/salt purl2cpe 2026-06-01 10:16:14.783282
pkg:rpm/fedora/salt purl2cpe 2026-06-01 10:16:14.783283
pkg:rpm/opensuse/salt purl2cpe 2026-06-01 10:16:14.783285

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-14696 vulnerable 2026-06-08 05:08:57.171915 Details available
SaltStack Salt before 2016.3.8, 2016.11.x before 2016.11.8, and 2017.7.x before 2017.7.2 allows remote attackers to cause a denial of service via a crafted authentication request.
Published: 2017-10-24T17:00:00.000Z
Updated: 2024-08-05T19:34:39.957Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-14695 vulnerable 2026-06-08 05:08:57.168275 Details available
Directory traversal vulnerability in minion id validation in SaltStack Salt before 2016.3.8, 2016.11.x before 2016.11.8, and 2017.7.x before 2017.7.2 allows remote minions with incorrect credentials to authenticate to a master via a crafted minion ID. NOTE: this vulnerability exists because of an incomplete fix for CVE-2017-12791.
Published: 2017-10-24T17:00:00.000Z
Updated: 2024-08-05T19:34:39.872Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.