Known vulnerabilities in salt (Debian package) 2016.11.2+ds-1+deb9u2

Vendor: Debian
Version: 2016.11.2+ds-1+deb9u2
Software CPE: cpe:2.3:o:debian:salt_debian_package:*:*:*:*:*:debian_linux:*:*
Total vulnerabilities: 3
Public exploits: 2
Known exploited (KEV): 2

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting salt (Debian package) version 2016.11.2+ds-1+deb9u2 salt (Debian package) 2016.11.2+ds-1+deb9u2 is affected by 3 vulnerabilities: 1 critical, 1 high, 1 medium Critical High Medium Low

Vulnerabilities (3)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU27599 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2019-17361
CWE-78 High
No
No
2016.11.2+ds-1+deb9u3, 2018.3.4+dfsg1-6+deb10u1 07.05.2020 SB2020011714
SB2020050705
SB2020020730
and 2 more
#VU27495 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2020-11652
CWE-22 Medium
Public exploit available
Exploited
2016.11.2+ds-1+deb9u3, 2018.3.4+dfsg1-6+deb10u1 04.05.2020 SB2020050410
SB2020050417
SB2020050506
and 10 more
#VU27494 - Improper Authentication
CVE-2020-11651
CWE-287 Critical
Public exploit available
Exploited
2016.11.2+ds-1+deb9u3, 2018.3.4+dfsg1-6+deb10u1 04.05.2020 SB2020050410
SB2020050417
SB2020050506
and 10 more