Vulnerability Name:

CVE-2017-5200 (CCN-132725)

Assigned:2017-09-01
Published:2017-09-01
Updated:2019-10-03
Summary:Salt-api in SaltStack Salt before 2015.8.13, 2016.3.x before 2016.3.5, and 2016.11.x before 2016.11.2 allows arbitrary command execution on a salt-master via Salt's ssh_client.
CVSS v3 Severity:8.8 High (CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
7.7 High (Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C)
Exploitability Metrics:Attack Vector (AV): Network
Attack Complexity (AC): Low
Privileges Required (PR): Low
User Interaction (UI): None
Scope:Scope (S): Unchanged
Impact Metrics:Confidentiality (C): High
Integrity (I): High
Availibility (A): High
9.8 Critical (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
8.5 High (CCN Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C)
Exploitability Metrics:Attack Vector (AV): Network
Attack Complexity (AC): Low
Privileges Required (PR): None
User Interaction (UI): None
Scope:Scope (S): Unchanged
Impact Metrics:Confidentiality (C): High
Integrity (I): High
Availibility (A): High
CVSS v2 Severity:9.0 High (CVSS v2 Vector: AV:N/AC:L/Au:S/C:C/I:C/A:C)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Low
Authentication (Au): Single_Instance
Impact Metrics:Confidentiality (C): Complete
Integrity (I): Complete
Availibility (A): Complete
10.0 High (CCN CVSS v2 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Low
Athentication (Au): None
Impact Metrics:Confidentiality (C): Complete
Integrity (I): Complete
Availibility (A): Complete
Vulnerability Type:CWE-noinfo
Vulnerability Consequences:Gain Access
References:Source: MITRE
Type: CNA
CVE-2017-5200

Source: CCN
Type: SALTSTACK Web site
Salt 2015.8.13 Release Notes

Source: CONFIRM
Type: Release Notes, Vendor Advisory
https://docs.saltstack.com/en/2016.3/topics/releases/2015.8.13.html

Source: CONFIRM
Type: Release Notes, Vendor Advisory
https://docs.saltstack.com/en/2016.3/topics/releases/2016.3.5.html

Source: CONFIRM
Type: Release Notes, Vendor Advisory
https://docs.saltstack.com/en/latest/topics/releases/2016.11.2.html

Source: XF
Type: UNKNOWN
saltstack-cve20175200-cmd-exec(132725)

Source: CCN
Type: WhiteSource Vulnerability Database
CVE-2017-5200

Vulnerable Configuration:Configuration 1:
  • cpe:/a:saltstack:salt:*:*:*:*:*:*:*:* (Version <= 2015.8.12)
  • OR cpe:/a:saltstack:salt:2016.3.0:*:*:*:*:*:*:*
  • OR cpe:/a:saltstack:salt:2016.3.1:*:*:*:*:*:*:*
  • OR cpe:/a:saltstack:salt:2016.3.2:*:*:*:*:*:*:*
  • OR cpe:/a:saltstack:salt:2016.3.3:*:*:*:*:*:*:*
  • OR cpe:/a:saltstack:salt:2016.3.4:*:*:*:*:*:*:*
  • OR cpe:/a:saltstack:salt:2016.11.0:*:*:*:*:*:*:*
  • OR cpe:/a:saltstack:salt:2016.11.1:*:*:*:*:*:*:*
  • OR cpe:/a:saltstack:salt:2016.11.2:*:*:*:*:*:*:*

    • Configuration CCN 1:
  • cpe:/a:saltstack:salt:2015.8.8:*:*:*:*:*:*:*
  • OR cpe:/a:saltstack:salt:2016.11.0:*:*:*:*:*:*:*
  • OR cpe:/a:saltstack:salt:2016.3.4:*:*:*:*:*:*:*

    • * Denotes that component is vulnerable
    Oval Definitions
    Definition IDClassTitleLast Modified
    oval:org.opensuse.security:def:20175200
    V
    		CVE-2017-5200
    2023-04-22
    oval:org.opensuse.security:def:32227
    P
    		Security update for java-1_8_0-openjdk (Important)
    2021-11-23
    oval:org.opensuse.security:def:32216
    P
    		Security update for MozillaFirefox (Important)
    2021-11-17
    oval:org.opensuse.security:def:14190
    P
    		libX11-6-1.6.2-11.1 on GA media (Moderate)
    2021-08-16
    oval:org.opensuse.security:def:14037
    P
    		strongswan-5.1.3-22.1 on GA media (Moderate)
    2021-08-16
    oval:org.opensuse.security:def:14172
    P
    		jakarta-commons-fileupload-1.1.1-120.113 on GA media (Moderate)
    2021-08-16
    oval:org.opensuse.security:def:14123
    P
    		dovecot22-2.2.30.2-14.2 on GA media (Moderate)
    2021-08-16
    oval:org.opensuse.security:def:14055
    P
    		w3m-0.5.3-157.1 on GA media (Moderate)
    2021-08-16
    oval:org.opensuse.security:def:14033
    P
    		socat-1.7.2.4-3.1 on GA media (Moderate)
    2021-08-16
    oval:org.opensuse.security:def:15056
    P
    		libpoppler-glib8-0.43.0-16.15.1 on GA media (Moderate)
    2021-08-16
    oval:org.opensuse.security:def:15034
    P
    		libncurses5-32bit-5.9-64.1 on GA media (Moderate)
    2021-08-16
    oval:org.opensuse.security:def:14396
    P
    		tomcat-8.0.43-23.1 on GA media (Moderate)
    2021-08-16
    oval:org.opensuse.security:def:14382
    P
    		squashfs-4.3-6.2 on GA media (Moderate)
    2021-08-16
    oval:org.opensuse.security:def:14371
    P
    		rpcbind-0.2.3-23.1 on GA media (Moderate)
    2021-08-16
    oval:org.opensuse.security:def:13993
    P
    		openvswitch-2.5.1-24.15 on GA media (Moderate)
    2021-08-16
    oval:org.opensuse.security:def:13968
    P
    		libudisks2-0-2.1.3-1.13 on GA media (Moderate)
    2021-08-16
    oval:org.opensuse.security:def:13875
    P
    		libXinerama1-1.1.3-3.54 on GA media (Moderate)
    2021-08-16
    oval:org.opensuse.security:def:13856
    P
    		java-1_8_0-openjdk-1.8.0.101-14.3 on GA media (Moderate)
    2021-08-16
    oval:org.opensuse.security:def:14025
    P
    		rpcbind-0.2.3-21.4 on GA media (Moderate)
    2021-08-16
    oval:org.opensuse.security:def:13839
    P
    		groff-1.22.2-5.287 on GA media (Moderate)
    2021-08-16
    oval:org.opensuse.security:def:13792
    P
    		cracklib-2.9.0-7.1 on GA media (Moderate)
    2021-08-16
    oval:org.opensuse.security:def:14721
    P
    		pam-modules-12.1-23.12 on GA media (Moderate)
    2021-08-16
    oval:org.opensuse.security:def:14327
    P
    		mozilla-nspr-32bit-4.13.1-18.1 on GA media (Moderate)
    2021-08-16
    oval:org.opensuse.security:def:14699
    P
    		libz1-1.2.11-1.27 on GA media (Moderate)
    2021-08-16
    oval:org.opensuse.security:def:14302
    P
    		libudisks2-0-2.1.3-1.13 on GA media (Moderate)
    2021-08-16
    oval:org.opensuse.security:def:14061
    P
    		xen-4.7.0_12-23.4 on GA media (Moderate)
    2021-08-16
    oval:org.opensuse.security:def:14209
    P
    		libapr-util1-1.5.3-1.46 on GA media (Moderate)
    2021-08-16
    oval:org.opensuse.security:def:14048
    P
    		tomcat-8.0.36-11.4 on GA media (Moderate)
    2021-08-16
    oval:org.opensuse.security:def:32134
    P
    		Security update for openexr (Important)
    2021-06-24
    oval:org.opensuse.security:def:32123
    P
    		Security update for xterm (Important)
    2021-06-18
    oval:org.opensuse.security:def:13695
    P
    		perl-HTML-Parser-3.71-1.178 on GA media (Moderate)
    2021-06-08
    oval:org.opensuse.security:def:13725
    P
    		squashfs-4.3-1.15 on GA media (Moderate)
    2021-06-08
    oval:org.opensuse.security:def:13703
    P
    		ppp-2.4.7-1.7 on GA media (Moderate)
    2021-06-08
    oval:org.opensuse.security:def:29359
    P
    		Security update for bind (Important)
    2021-05-04
    oval:org.opensuse.security:def:29348
    P
    		Security update for sudo (Important)
    2021-04-20
    oval:org.opensuse.security:def:32284
    P
    		Security update for openssl (Moderate)
    2021-03-24
    oval:org.opensuse.security:def:32273
    P
    		Security update for MozillaFirefox (Important)
    2021-01-12
    oval:org.opensuse.security:def:29312
    P
    		Security update for cyrus-sasl (Important)
    2020-12-28
    oval:org.opensuse.security:def:32000
    P
    		Security update for python-setuptools (Important)
    2020-12-02
    oval:org.opensuse.security:def:37703
    P
    		wpa_supplicant on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:39241
    P
    		Security update for Salt (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:31904
    P
    		Security update for foomatic-filters (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:28575
    P
    		Security update for OpenSSL
    2020-12-01
    oval:org.opensuse.security:def:39199
    P
    		libofx on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:28526
    P
    		Security update for wget (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:38561
    P
    		colord-gtk-lang on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:28473
    P
    		Security update for xorg-x11-server (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:38517
    P
    		xdg-utils on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:28321
    P
    		Security update for pam (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:38489
    P
    		stunnel on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:27902
    P
    		Security update for Xen
    2020-12-01
    oval:org.opensuse.security:def:28237
    P
    		Security update for LibVNCServer (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:38450
    P
    		powerpc-utils on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:27901
    P
    		Security update for xalan-j2
    2020-12-01
    oval:org.opensuse.security:def:28180
    P
    		Security update for the Linux Kernel (Important)
    2020-12-01
    oval:org.opensuse.security:def:32572
    P
    		libvorbis on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:28096
    P
    		Security update for giflib (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:32516
    P
    		fvwm2 on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:27967
    P
    		Security update for ImageMagick (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:32360
    P
    		Security update for strongswan (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:27903
    P
    		Security update for Xen
    2020-12-01
    oval:org.opensuse.security:def:31914
    P
    		Security update for gd (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:28586
    P
    		Security update for libxml2
    2020-12-01
    oval:org.opensuse.security:def:28537
    P
    		Security update for compat-openssl097g
    2020-12-01
    oval:org.opensuse.security:def:31990
    P
    		Security update for java-1_7_1-ibm (Important)
    2020-12-01
    oval:org.opensuse.security:def:28484
    P
    		Security update for curl (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:28674
    P
    		Security update for MozillaFirefox (Important)
    2020-12-01
    oval:org.opensuse.security:def:31916
    P
    		Security update for gd (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:28332
    P
    		Security update for php53 (Important)
    2020-12-01
    oval:org.opensuse.security:def:28630
    P
    		Security update for Mozilla Firefox
    2020-12-01
    oval:org.opensuse.security:def:31905
    P
    		Security update for freeradius-server (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:28248
    P
    		Security update for libxml2 (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:28614
    P
    		Security update for xorg-x11
    2020-12-01
    oval:org.opensuse.security:def:33403
    P
    		Security update for Salt (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:28191
    P
    		Security update for libapr1 (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:32583
    P
    		nagios-plugins on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:33364
    P
    		Security update for openvpn-openssl1 (Important)
    2020-12-01
    oval:org.opensuse.security:def:28107
    P
    		Security update for glibc (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:32527
    P
    		gtk2 on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:32726
    P
    		libpulse-browse0 on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:27977
    P
    		Security update for LibVNCServer (Critical)
    2020-12-01
    oval:org.opensuse.security:def:32371
    P
    		Security update for tcpdump (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:32682
    P
    		gzip on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:27913
    P
    		Security update for xen (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:32660
    P
    		fetchmail on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:37702
    P
    		wget on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:32621
    P
    		zoo on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:29323
    P
    		Security update for compat-openssl097g (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:28685
    P
    		Security update for flash-player (Important)
    2020-12-01
    oval:org.opensuse.security:def:31926
    P
    		Recommended update for ghostscript-library (Important)
    2020-12-01
    oval:org.opensuse.security:def:28641
    P
    		Security update for bind (Important)
    2020-12-01
    oval:org.opensuse.security:def:31915
    P
    		Security update for gd (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:28625
    P
    		Security update for Image Magick
    2020-12-01
    oval:org.opensuse.security:def:33414
    P
    		Security update for Salt (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:38401
    P
    		libxcb-dri2-0 on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:33375
    P
    		Security update for IBM Java 1.4.2
    2020-12-01
    oval:org.opensuse.security:def:38342
    P
    		libotr5 on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:32737
    P
    		libvorbis on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:38182
    P
    		file on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:32693
    P
    		kernel-default on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:38092
    P
    		w3m on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:32671
    P
    		ghostscript-fonts-other on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:27892
    P
    		Security update for samba (Important)
    2020-12-01
    oval:org.opensuse.security:def:38035
    P
    		ppc64-diag on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:32632
    P
    		apache2 on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:27891
    P
    		Security update for Samba
    2020-12-01
    oval:org.opensuse.security:def:37934
    P
    		libospf0 on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:37798
    P
    		glibc on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:37714
    P
    		xscreensaver on GA media (Moderate)
    2020-12-01
    oval:com.ubuntu.bionic:def:201752000000000
    V
    		CVE-2017-5200 on Ubuntu 18.04 LTS (bionic) - medium.
    2017-09-26
    oval:com.ubuntu.artful:def:20175200000
    V
    		CVE-2017-5200 on Ubuntu 17.10 (artful) - medium.
    2017-09-26
    oval:com.ubuntu.xenial:def:20175200000
    V
    		CVE-2017-5200 on Ubuntu 16.04 LTS (xenial) - medium.
    2017-09-26
    oval:com.ubuntu.xenial:def:201752000000000
    V
    		CVE-2017-5200 on Ubuntu 16.04 LTS (xenial) - medium.
    2017-09-26
    oval:com.ubuntu.bionic:def:20175200000
    V
    		CVE-2017-5200 on Ubuntu 18.04 LTS (bionic) - medium.
    2017-09-26
    oval:com.ubuntu.disco:def:201752000000000
    V
    		CVE-2017-5200 on Ubuntu 19.04 (disco) - medium.
    2017-09-26
    oval:com.ubuntu.cosmic:def:20175200000
    V
    		CVE-2017-5200 on Ubuntu 18.10 (cosmic) - medium.
    2017-09-26
    oval:com.ubuntu.cosmic:def:201752000000000
    V
    		CVE-2017-5200 on Ubuntu 18.10 (cosmic) - medium.
    2017-09-26
    oval:com.ubuntu.trusty:def:20175200000
    V
    		CVE-2017-5200 on Ubuntu 14.04 LTS (trusty) - medium.
    2017-09-26
    BACK
    saltstack salt *
    saltstack salt 2016.3.0
    saltstack salt 2016.3.1
    saltstack salt 2016.3.2
    saltstack salt 2016.3.3
    saltstack salt 2016.3.4
    saltstack salt 2016.11.0
    saltstack salt 2016.11.1
    saltstack salt 2016.11.2
    saltstack salt 2015.8.8
    saltstack salt 2016.11.0
    saltstack salt 2016.3.4