Detections
Analytics
SUSE SLES15 Security Update : salt (SUSE-SU-2025:02500-1)
high Nessus Plugin ID 242654
Language:
Synopsis
The remote SUSE host is missing one or more security updates.Description
The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:02500-1 advisory.- Security issues fixed:
- CVE-2024-38822: Fixed Minion token validation (bsc#1244561)
- CVE-2024-38823: Fixed server vulnerability to replay attacks when not using a TLS encrypted transport (bsc#1244564)
- CVE-2024-38824: Fixed directory traversal vulnerability in recv_file method (bsc#1244565)
- CVE-2024-38825: Fixed salt.auth.pki module authentication issue (bsc#1244566)
- CVE-2025-22240: Fixed arbitrary directory creation or file deletion with GitFS (bsc#1244567)
- CVE-2025-22236: Fixed Minion event bus authorization bypass (bsc#1244568)
- CVE-2025-22241: Fixed the use of un-validated input in the VirtKey class (bsc#1244570)
- CVE-2025-22237: Fixed exploitation of the 'on demand' pillar functionality (bsc#1244571)
- CVE-2025-22238: Fixed the master's default cache vulnerability to a directory traversal attack (bsc#1244572)
- CVE-2025-22239: Fixed the arbitrary event injection on the Salt Master (bsc#1244574)
- CVE-2025-22242: Fixed a Denial of Service vulnerability through file read operation (bsc#1244575)
- CVE-2025-47287: Fixed a Denial of Service vulnerability in Tornado logging behavior (bsc#1243268)
- Other bugs fixed:
- Added subsystem filter to udev.exportdb (bsc#1236621)
- Fixed Ubuntu 24.04 test failures
- Fixed refresh of osrelease and related grains on Python 3.10+
- Fixed issue requiring proper Python flavor for dependencies
Tenable has extracted the preceding description block directly from the SUSE security advisory.
Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
Solution
Update the affected packages.See Also
https://bugzilla.suse.com/1236621
https://bugzilla.suse.com/1243268
https://bugzilla.suse.com/1244561
https://bugzilla.suse.com/1244564
https://bugzilla.suse.com/1244565
https://bugzilla.suse.com/1244566
https://bugzilla.suse.com/1244567
https://bugzilla.suse.com/1244568
https://bugzilla.suse.com/1244570
https://bugzilla.suse.com/1244571
https://bugzilla.suse.com/1244572
https://bugzilla.suse.com/1244574
https://bugzilla.suse.com/1244575
https://lists.suse.com/pipermail/sle-updates/2025-July/040874.html
https://www.suse.com/security/cve/CVE-2024-38822
https://www.suse.com/security/cve/CVE-2024-38823
https://www.suse.com/security/cve/CVE-2024-38824
https://www.suse.com/security/cve/CVE-2024-38825
https://www.suse.com/security/cve/CVE-2025-22236
https://www.suse.com/security/cve/CVE-2025-22237
https://www.suse.com/security/cve/CVE-2025-22238
https://www.suse.com/security/cve/CVE-2025-22239
https://www.suse.com/security/cve/CVE-2025-22240
https://www.suse.com/security/cve/CVE-2025-22241
Plugin Details
Severity: High
ID: 242654
File Name: suse_SU-2025-02500-1.nasl
Version: 1.1
Type: local
Agent: unix
Family: SuSE Local Security Checks
Published: 7/24/2025
Updated: 7/24/2025
Supported Sensors: Frictionless Assessment AWS, Frictionless Assessment Azure, Frictionless Assessment Agent, Nessus Agent, Agentless Assessment, Continuous Assessment, Nessus
Risk Information
VPR
Risk Factor: High
Score: 7.3
CVSS v2
Risk Factor: High
Base Score: 7.8
Temporal Score: 5.8
Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:C/A:N
CVSS Score Source: CVE-2024-38824
CVSS v3
Risk Factor: High
Base Score: 7.5
Temporal Score: 6.5
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C
Vulnerability Information
CPE: p-cpe:/a:novell:suse_linux:salt-bash-completion, p-cpe:/a:novell:suse_linux:salt, p-cpe:/a:novell:suse_linux:salt-transactional-update, p-cpe:/a:novell:suse_linux:salt-minion, p-cpe:/a:novell:suse_linux:salt-proxy, p-cpe:/a:novell:suse_linux:salt-api, p-cpe:/a:novell:suse_linux:python3-salt, p-cpe:/a:novell:suse_linux:salt-ssh, p-cpe:/a:novell:suse_linux:salt-zsh-completion, p-cpe:/a:novell:suse_linux:salt-master, p-cpe:/a:novell:suse_linux:salt-standalone-formulas-configuration, p-cpe:/a:novell:suse_linux:salt-doc, p-cpe:/a:novell:suse_linux:salt-cloud, p-cpe:/a:novell:suse_linux:salt-syndic, cpe:/o:novell:suse_linux:15, p-cpe:/a:novell:suse_linux:salt-fish-completion
Required KB Items: Host/local_checks_enabled, Host/cpu, Host/SuSE/release, Host/SuSE/rpm-list
Exploit Ease: No known exploits are available
Patch Publication Date: 7/23/2025
Vulnerability Publication Date: 5/15/2025
Reference Information
CVE: CVE-2024-38822, CVE-2024-38823, CVE-2024-38824, CVE-2024-38825, CVE-2025-22236, CVE-2025-22237, CVE-2025-22238, CVE-2025-22239, CVE-2025-22240, CVE-2025-22241, CVE-2025-22242, CVE-2025-47287
IAVA: 2025-A-0434
SuSE: SUSE-SU-2025:02500-1