GCVE - cpe:2.3:a:saltstack:salt:0.16.4:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:saltstack:salt:0.16.4:*:*:*:*:*:*:*

part: a version: 0.16.4 update: *

Vendor	Saltstack (`505beb5a-4fc5-5540-9632-5d28b16aab0d`)
Product	Salt (`dd0d2bbf-d65f-5171-9eae-a243e2f3cc18`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:github/saltstack/salt`	purl2cpe	2026-06-01 10:16:14.738787
`pkg:rpm/fedora/salt`	purl2cpe	2026-06-01 10:16:14.738788
`pkg:rpm/opensuse/salt`	purl2cpe	2026-06-01 10:16:14.738790

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2013-6617`	vulnerable	2026-06-08 05:04:57.219703	Details available The salt master in Salt (aka SaltStack) 0.11.0 through 0.17.0 does not properly drop group privileges, which makes it easier for remote attackers to gain privileges. Published: 2013-11-05T18:00:00.000Z Updated: 2024-09-17T02:02:10.512Z Open on db.gcve.eu Reference links http://docs.saltstack.com/topics/releases/0.17.1.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-4439`	vulnerable	2026-06-08 05:04:46.735317	Details available Salt (aka SaltStack) before 0.15.0 through 0.17.0 allows remote authenticated minions to impersonate arbitrary minions via a crafted minion with a valid key. Published: 2013-11-05T18:00:00.000Z Updated: 2024-09-16T16:18:55.492Z Open on db.gcve.eu Reference links http://www.openwall.com/lists/oss-security/2013/10/18/3 https://github.com/saltstack/salt/pull/7356 http://docs.saltstack.com/topics/releases/0.17.1.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-4438`	vulnerable	2026-06-08 05:04:46.734797	Details available Salt (aka SaltStack) before 0.17.1 allows remote attackers to execute arbitrary YAML code via unspecified vectors. NOTE: the vendor states that this might not be a vulnerability because the YAML to be loaded has already been determined to be safe. Published: 2013-11-05T18:00:00.000Z Updated: 2024-09-17T03:54:13.381Z Open on db.gcve.eu Reference links http://www.openwall.com/lists/oss-security/2013/10/18/3 http://docs.saltstack.com/topics/releases/0.17.1.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-4435`	vulnerable	2026-06-08 05:04:46.719837	Details available Salt (aka SaltStack) 0.15.0 through 0.17.0 allows remote authenticated users who are using external authentication or client ACL to execute restricted routines by embedding the routine in another routine. Published: 2013-11-05T18:00:00.000Z Updated: 2024-09-17T01:36:05.715Z Open on db.gcve.eu Reference links http://www.openwall.com/lists/oss-security/2013/10/18/3 http://docs.saltstack.com/topics/releases/0.17.1.html	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.