Insufficient verification of data authenticity in Salt - CVE-2022-22935

Vulnerability identifier: #VU82801

CSH Severity: Medium

CVSS v4: 7.1 [CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2022-22935

CWE-ID: CWE-345

Exploitation vector: Adjecent network

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to improper verification of data authenticity. A remote attacker with ability to perform MitM attack can impersonate a master and force a minion process to stop.

Salt
Gentoo Linux
SUSE CaaS Platform
SUSE Manager Server
SUSE Manager Proxy
SUSE Manager Retail Branch Server
SUSE Linux Enterprise Micro
SUSE Enterprise Storage
SUSE Manager Debian
SUSE Manager Tools
SUSE Linux Enterprise Module for Advanced Systems Management
SUSE Linux Enterprise High Performance Computing
SUSE Linux Enterprise Server
SUSE Linux Enterprise Server for SAP Applications
SUSE Linux Enterprise Server for SAP
SUSE Linux Enterprise Realtime Extension
SUSE Linux Enterprise Module for Server Applications
SUSE Linux Enterprise Module for Transactional Server
SUSE Linux Enterprise Module for Basesystem
SUSE Linux Enterprise Desktop
SUSE Manager Ubuntu
firewalld-prometheus-config
golang-github-prometheus-alertmanager
golang-github-prometheus-prometheus
release-notes-susemanager
uyuni-proxy-systemd-services
suseRegisterInfo
python3-suseRegisterInfo
python3-uyuni-common-libs
python3-mgr-push
mgr-push
python3-rhnlib
mgr-virtualization-host
python3-mgr-virtualization-common
python3-mgr-virtualization-host
python3-spacewalk-koan
spacewalk-koan
python3-spacewalk-oscap
spacewalk-oscap
mgr-cfg-client
mgr-cfg-management
mgr-cfg-actions
python3-mgr-cfg
python3-mgr-cfg-actions
python3-mgr-cfg-client
python3-mgr-cfg-management
mgr-cfg
python3-mgr-osa-common
python3-mgr-osad
mgr-osad
spacewalk-client-tools
spacewalk-client-setup
spacewalk-check
python3-spacewalk-check
python3-spacewalk-client-setup
python3-spacewalk-client-tools
spacecmd
salt-minion
salt-common
salt
salt-bash-completion
salt-syndic
salt-standalone-formulas-configuration
salt-ssh
salt-proxy
salt-master
salt-cloud
salt-api
salt-doc
python3-salt
python2-salt
salt-zsh-completion
salt-fish-completion
salt-transactional-update
app-admin/salt
venv-salt-minion

Install updates from vendor's website.

Salt - addressed in versions 3002.8, 3003.4, 3004.1
firewalld-prometheus-config - update to 0.1-159000.6.30.4
golang-github-prometheus-alertmanager - update to 0.23.0-159000.6.9.3
golang-github-prometheus-prometheus - update to 2.32.1-159000.6.30.4
release-notes-susemanager - addressed in versions 4.1.14.1-150200.3.77.1, 4.2.5.1-150300.3.34.1
uyuni-proxy-systemd-services - update to 4.3.2-159000.3.6.1
suseRegisterInfo - update to 4.3.3-159000.6.21.2
python3-suseRegisterInfo - update to 4.3.3-159000.6.21.2
python3-uyuni-common-libs - update to 4.3.4-159000.3.30.2
python3-mgr-push - update to 4.3.4-159000.4.18.2
mgr-push - update to 4.3.4-159000.4.18.2
python3-rhnlib - update to 4.3.4-159000.6.27.2
mgr-virtualization-host - update to 4.3.5-159000.4.18.2
python3-mgr-virtualization-common - update to 4.3.5-159000.4.18.2
python3-mgr-virtualization-host - update to 4.3.5-159000.4.18.2
python3-spacewalk-koan - update to 4.3.5-159000.6.18.1
spacewalk-koan - update to 4.3.5-159000.6.18.1
python3-spacewalk-oscap - update to 4.3.5-159000.6.18.2
spacewalk-oscap - update to 4.3.5-159000.6.18.2
mgr-cfg-client - update to 4.3.6-159000.4.26.1
mgr-cfg-management - update to 4.3.6-159000.4.26.1
mgr-cfg-actions - update to 4.3.6-159000.4.26.1
python3-mgr-cfg - update to 4.3.6-159000.4.26.1
python3-mgr-cfg-actions - update to 4.3.6-159000.4.26.1
python3-mgr-cfg-client - update to 4.3.6-159000.4.26.1
python3-mgr-cfg-management - update to 4.3.6-159000.4.26.1
mgr-cfg - update to 4.3.6-159000.4.26.1
python3-mgr-osa-common - update to 4.3.6-159000.4.27.2
python3-mgr-osad - update to 4.3.6-159000.4.27.2
mgr-osad - update to 4.3.6-159000.4.27.2
spacewalk-client-tools - update to 4.3.9-159000.6.45.2
spacewalk-client-setup - update to 4.3.9-159000.6.45.2
spacewalk-check - update to 4.3.9-159000.6.45.2
python3-spacewalk-check - update to 4.3.9-159000.6.45.2
python3-spacewalk-client-setup - update to 4.3.9-159000.6.45.2
python3-spacewalk-client-tools - update to 4.3.9-159000.6.45.2
spacecmd - addressed in versions 4.3.10-2.32.1, 4.3.10-2.33.1, 4.3.10-2.39.1, 4.3.10-159000.6.39.2
salt-minion - addressed in versions 3000+ds-1+2.45.1, 3000-58.1, 3002.2+ds-1+2.45.1, 3002.2+ds-1+2.66.1, 3002.2+ds-1+107.1, 3002.2-150000.8.41.26.1, 3002.2-150100.57.1, 3002.2-150200.58.1, 3002.2-150300.53.10.1, 3004+ds-1+2.39.1, 3004+ds-1+2.42.1, 3004+ds-1+27.57.1, 3004-159000.8.56.1
salt-common - addressed in versions 3000+ds-1+2.45.1, 3002.2+ds-1+2.45.1, 3002.2+ds-1+2.66.1, 3002.2+ds-1+107.1, 3004+ds-1+2.39.1, 3004+ds-1+2.42.1, 3004+ds-1+27.57.1
salt - addressed in versions 3000-58.1, 3002.2-150000.8.41.26.1, 3002.2-150100.57.1, 3002.2-150200.58.1, 3002.2-150300.53.10.1, 3004-159000.8.56.1
salt-bash-completion - addressed in versions 3000-58.1, 3002.2-150000.8.41.26.1, 3002.2-150100.57.1, 3002.2-150200.58.1, 3002.2-150300.53.10.1, 3004-159000.8.56.1
salt-syndic - addressed in versions 3000-58.1, 3002.2-150000.8.41.26.1, 3002.2-150100.57.1, 3002.2-150200.58.1, 3002.2-150300.53.10.1, 3004-159000.8.56.1
salt-standalone-formulas-configuration - addressed in versions 3000-58.1, 3002.2-150000.8.41.26.1, 3002.2-150100.57.1, 3002.2-150200.58.1, 3002.2-150300.53.10.1, 3004-159000.8.56.1
salt-ssh - addressed in versions 3000-58.1, 3002.2-150000.8.41.26.1, 3002.2-150100.57.1, 3002.2-150200.58.1, 3002.2-150300.53.10.1, 3004-159000.8.56.1
salt-proxy - addressed in versions 3000-58.1, 3002.2-150000.8.41.26.1, 3002.2-150100.57.1, 3002.2-150200.58.1, 3002.2-150300.53.10.1, 3004-159000.8.56.1
salt-master - addressed in versions 3000-58.1, 3002.2-150000.8.41.26.1, 3002.2-150100.57.1, 3002.2-150200.58.1, 3002.2-150300.53.10.1, 3004-159000.8.56.1
salt-cloud - addressed in versions 3000-58.1, 3002.2-150000.8.41.26.1, 3002.2-150100.57.1, 3002.2-150200.58.1, 3002.2-150300.53.10.1, 3004-159000.8.56.1
salt-api - addressed in versions 3000-58.1, 3002.2-150000.8.41.26.1, 3002.2-150100.57.1, 3002.2-150200.58.1, 3002.2-150300.53.10.1, 3004-159000.8.56.1
salt-doc - addressed in versions 3000-58.1, 3002.2-150000.8.41.26.1, 3002.2-150100.57.1, 3002.2-150200.58.1, 3002.2-150300.53.10.1, 3004-159000.8.56.1
python3-salt - addressed in versions 3000-58.1, 3002.2-150000.8.41.26.1, 3002.2-150100.57.1, 3002.2-150200.58.1, 3002.2-150300.53.10.1, 3004-159000.8.56.1
python2-salt - update to 3000-58.1
salt-zsh-completion - addressed in versions 3000-58.1, 3002.2-150000.8.41.26.1, 3002.2-150100.57.1, 3002.2-150200.58.1, 3002.2-150300.53.10.1, 3004-159000.8.56.1
salt-fish-completion - addressed in versions 3002.2-150000.8.41.26.1, 3002.2-150100.57.1, 3002.2-150200.58.1, 3002.2-150300.53.10.1, 3004-159000.8.56.1
salt-transactional-update - addressed in versions 3002.2-150000.8.41.26.1, 3002.2-150100.57.1, 3002.2-150200.58.1, 3002.2-150300.53.10.1, 3004-159000.8.56.1
app-admin/salt - update to 3004.2
venv-salt-minion - addressed in versions 3004-2.9.1, 3004-2.9.2, 3004-2.11.2, 3004-3.9.1, 3004-159000.3.9.1

• https://saltproject.io/security_announcements/salt-security-advisory-release/
• https://security.gentoo.org/glsa/202310-22

• Multiple vulnerabilities in SaltStack Salt
• Gentoo update for Salt
• SUSE update for SUSE Manager 4.1.14.1 Release Notes
• SUSE update for SUSE Manager 4.2.5.1 Release Notes
• SUSE update for salt
• SUSE update for salt
• SUSE update for salt
• SUSE update for salt
• SUSE update for salt
• SUSE update for salt
• SUSE update for salt
• SUSE update for salt
• SUSE update for salt
• SUSE update for Security Beta update for SUSE Manager Salt Bundle
• SUSE update for Security Beta update for SUSE Manager Client Tools
• SUSE update for Security Beta update for SUSE Manager Client Tools
• SUSE update for Security Beta update for SUSE Manager Client Tools
• SUSE update for Security Beta update for SUSE Manager Salt Bundle
• SUSE update for Security Beta update for SUSE Manager Salt Bundle
• SUSE update for Security Beta update for SUSE Manager Salt Bundle
• SUSE update for Security Beta update for SUSE Manager Salt Bundle
• SUSE update for Security Beta update for SUSE Manager Salt Bundle
• SUSE update for Security Beta update for SUSE Manager Client Tools