Gentoo Linux: CVE-2023-34049: Salt: Multiple Vulnerabilities

Gentoo Linux: CVE-2023-34049: Salt: Multiple Vulnerabilities

Severity

4

CVSS

(AV:L/AC:M/Au:N/C:P/I:P/A:P)

Published

11/14/2024

Created

12/10/2024

Added

12/09/2024

Modified

12/09/2024

Description

The Salt-SSH pre-flight option copies the script to the target at a predictable path, which allows an attacker to force Salt-SSH to run their script. If an attacker has access to the target VM and knows the path to the pre-flight script before it runs they can ensure Salt-SSH runs their script with the privileges of the user running Salt-SSH. Do not make the copy path on the target predictable and ensure we check return codes of the scp command if the copy fails.

Solution(s)

• gentoo-linux-upgrade-app-admin-salt

References

• https://attackerkb.com/topics/cve-2023-34049
• CVE - 2023-34049
• 202412-09