Salt 2015.8.x before 2015.8.4 does not properly handle clear messages on the minion, which allows man-in-the-middle attackers to execute arbitrary code by inserting packets into the minion-master data stream.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Salt 2015.8.x before 2015.8.4 does not properly handle clear messages on the minion, which allows man-in-     the-middle attackers to execute arbitrary code by inserting packets into the minion-master data stream.
    (CVE-2016-1866)

Note that Nessus relies on the presence of the package as reported by the vendor.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Salt 2015.8.x before 2015.8.4 does not properly handle clear messages on the minion, which allows man-in-
    the-middle attackers to execute arbitrary code by inserting packets into the minion-master data stream.
    (CVE-2016-1866)

This update for salt fixes the following issues :

  - CVE-2016-1866: Improper handling of clear messages on     the minion remote code execution (boo#965403)

The following bugs were fixed :

  - boo#958350: Salt crashes on invalid UTF-8 in package     data

  - boo#959572: 'salt '*' pkg.info_installed' causes     exception on sles12sp1 client

  - boo#963322: salt-api cannot be stopped correctly

SaltStack reports :

Improper handling of clear messages on the minion, which could result in executing commands not sent by the master.

ID	Name	Product	Family	Severity
260815	Linux Distros Unpatched Vulnerability : CVE-2016-1866	Nessus	Misc.	high
432448	SCA: security update for salt (GHSA-vqh4-crjf-jjxx)	Tenable Cloud Security	SCA Checks	high
432448	SCA: security update for salt (GHSA-vqh4-crjf-jjxx)	Tenable Self-Hosted Container Security	SCA Checks	high
89814	openSUSE Security Update : salt (openSUSE-2016-318)	Nessus	SuSE Local Security Checks	high
88570	FreeBSD : salt -- code execution (0652005e-ca96-11e5-96d6-14dae9d210b8)	Nessus	FreeBSD Local Security Checks	high

Detections

Analytics

CVE-2016-1866

high

Tenable Plugins

high

high

high

high

high