CVE catalog
CVE-2021-21996
Security update for SUSE Manager Server 4.1
- Severity
- Medium · CVSS 4.2
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L - Published
- Updated
- Source
- [NVD] · [CVE record]
- EPSS
- 3.51% · Oct 25, 2026
An issue was discovered in SaltStack Salt before 3003.3. A user who has control of the source, and source_hash URLs can gain full file system access as root on a salt minion.
Vulnerable and fixed packages
Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.
| Distribution | Package | Release | Version | Status |
|---|---|---|---|---|
| Ubuntu | salt | pro | 2016.11.5+ds-1 | vulnerable |
| Ubuntu | salt | pro | 2016.11.8+dfsg1-1 | vulnerable |
| Ubuntu | salt | pro | 2017.7.2+dfsg1-2ubuntu1 | vulnerable |
| Ubuntu | salt | pro | 2017.7.3+dfsg1-1 | vulnerable |
| Ubuntu | salt | pro | 2017.7.4+dfsg1-1 | vulnerable |
| Ubuntu | salt | pro | 2017.7.4+dfsg1-1ubuntu18.04.1 | vulnerable |
| Ubuntu | salt | pro | 2017.7.4+dfsg1-1ubuntu18.04.2 | vulnerable |
| Ubuntu | salt | pro | 2017.7.4+dfsg1-1ubuntu18.04.2+esm1 | vulnerable |
| Debian | salt | 10 | 2018.3.4+dfsg1-6 | vulnerable |
| Debian | salt | 10 | 2018.3.4+dfsg1-6+deb10u1 | vulnerable |
| Debian | salt | 10 | 2018.3.4+dfsg1-6+deb10u2 | vulnerable |
| Debian | salt | 10 | 2018.3.4+dfsg1-6+deb10u3 | fixed |
| Debian | salt | 11 | 3002.6+dfsg1-4 | vulnerable |
| Debian | salt | 11 | 3002.6+dfsg1-4+deb11u1 | fixed |
| Debian | salt | 9 | 2016.11.2+ds-1 | vulnerable |
| Debian | salt | 9 | 2016.11.2+ds-1+deb9u1 | vulnerable |
| Debian | salt | 9 | 2016.11.2+ds-1+deb9u2 | vulnerable |
| Debian | salt | 9 | 2016.11.2+ds-1+deb9u3 | vulnerable |
| Debian | salt | 9 | 2016.11.2+ds-1+deb9u4 | vulnerable |
| Debian | salt | 9 | 2016.11.2+ds-1+deb9u5 | vulnerable |
| Debian | salt | 9 | 2016.11.2+ds-1+deb9u6 | vulnerable |
| Debian | salt | 9 | 2016.11.2+ds-1+deb9u7 | vulnerable |
| Debian | salt | 9 | 2016.11.2+ds-1+deb9u8 | fixed |
| Suse | salt | linux enterprise module for basesystem 15 sp3 | 3002.2-50.1.15.1 | fixed |
| Suse | salt | linux enterprise module for server applications 15 sp3 | 3002.2-50.1.15.1 | fixed |
| Suse | salt | linux enterprise module for transactional server 15 sp3 | 3002.2-50.1.15.1 | fixed |
| Suse | salt | linux enterprise micro 5.1 | 3002.2-50.1.15.1 | fixed |
| Suse | salt | linux enterprise high performance computing 15-espos | 3002.2-8.41.17.1 | fixed |
| Suse | salt | linux enterprise high performance computing 15-ltss | 3002.2-8.41.17.1 | fixed |
| Suse | salt | linux enterprise server 15-ltss | 3002.2-8.41.17.1 | fixed |
| Suse | salt | linux enterprise server for sap applications 15 | 3002.2-8.41.17.1 | fixed |
| Suse | cobbler | manager server module 4.2 | 3.1.2-5.11.1 | fixed |
| Suse | hub-xmlrpc-api | manager server module 4.2 | 0.7-3.3.3 | fixed |
| Suse | inter-server-sync | manager server module 4.2 | 0.0.5-8.6.3 | fixed |
| Suse | patterns-suse-manager | manager server module 4.2 | 4.2-4.3.1 | fixed |
| Suse | py26-compat-salt | manager server module 4.2 | 2016.11.10-11.28.9.1 | fixed |
| Suse | py26-compat-tornado | manager server module 4.2 | 4.2.1-3.3.1 | fixed |
| Suse | py27-compat-salt | manager server module 4.2 | 3000.3-7.7.11.1 | fixed |
| Suse | spacecmd | manager server module 4.2 | 4.2.13-4.9.1 | fixed |
| Suse | spacewalk-admin | manager server module 4.2 | 4.2.9-3.6.2 | fixed |
| Suse | spacewalk-backend | manager server module 4.2 | 4.2.17-4.9.3 | fixed |
| Suse | spacewalk-certs-tools | manager server module 4.2 | 4.2.13-3.9.2 | fixed |
| Suse | spacewalk-client-tools | manager server module 4.2 | 4.2.14-4.9.3 | fixed |
| Suse | spacewalk-java | manager server module 4.2 | 4.2.30-3.14.4 | fixed |
| Suse | spacewalk-utils | manager server module 4.2 | 4.2.14-3.9.3 | fixed |
| Suse | spacewalk-web | manager server module 4.2 | 4.2.23-3.9.3 | fixed |
| Suse | subscription-matcher | manager server module 4.2 | 0.27-6.3.1 | fixed |
| Suse | supportutils-plugin-susemanager | manager server module 4.2 | 4.2.3-3.3.2 | fixed |
| Suse | susemanager | manager server module 4.2 | 4.2.25-3.13.1 | fixed |
| Suse | susemanager-doc-indexes | manager server module 4.2 | 4.2-12.11.3 | fixed |
| Suse | susemanager-docs_en | manager server module 4.2 | 4.2-12.11.1 | fixed |
| Suse | susemanager-schema | manager server module 4.2 | 4.2.18-3.9.3 | fixed |
| Suse | susemanager-sls | manager server module 4.2 | 4.2.18-3.11.1 | fixed |
| Suse | susemanager-sync-data | manager server module 4.2 | 4.2.9-3.9.1 | fixed |
| Suse | virtualization-formulas | manager server module 4.2 | 0.6.1-8.3.1 | fixed |
| Suse | release-notes-susemanager-proxy | manager proxy 4.2 | 4.2.3-3.15.1 | fixed |
| Suse | release-notes-susemanager-proxy | manager retail branch server 4.2 | 4.2.3-3.15.1 | fixed |
| Suse | release-notes-susemanager | manager server 4.2 | 4.2.3-3.19.1 | fixed |
| Suse | salt | manager client tools 12 | 3000-46.151.2 | fixed |
| Suse | salt | linux enterprise module for advanced systems management 12 | 3000-46.151.2 | fixed |
| Opensuse | salt | leap 15.2 | 3002.2-lp152.3.45.1 | fixed |
| Opensuse | salt | leap 15.3 | 3002.2-50.1.15.1 | fixed |
| Suse | salt | linux enterprise server 11 sp3-client-tools | 2016.11.10-43.84.1 | fixed |
| Suse | spacecmd | linux enterprise server 11 sp3-client-tools | 4.2.13-18.93.1 | fixed |
| Suse | spacewalk-client-tools | linux enterprise server 11 sp3-client-tools | 4.2.14-27.59.1 | fixed |
| Suse | salt | linux enterprise server 11 sp4-client-tools | 2016.11.10-43.84.1 | fixed |
| Suse | spacecmd | linux enterprise server 11 sp4-client-tools | 4.2.13-18.93.1 | fixed |
| Suse | spacewalk-client-tools | linux enterprise server 11 sp4-client-tools | 4.2.14-27.59.1 | fixed |
| Suse | salt | linux enterprise high performance computing 15 sp1-espos | 3002.2-48.4 | fixed |
| Suse | salt | linux enterprise high performance computing 15 sp1-ltss | 3002.2-48.4 | fixed |
| Suse | salt | linux enterprise server 15 sp1-bcl | 3002.2-48.4 | fixed |
| Suse | salt | linux enterprise server 15 sp1-ltss | 3002.2-48.4 | fixed |
| Suse | salt | linux enterprise server for sap applications 15 sp1 | 3002.2-48.4 | fixed |
| Suse | salt | enterprise storage 6 | 3002.2-48.4 | fixed |
| Suse | salt | linux enterprise module for basesystem 15 sp2 | 3002.2-49.2 | fixed |
| Suse | salt | linux enterprise module for server applications 15 sp2 | 3002.2-49.2 | fixed |
| Suse | salt | linux enterprise module for transactional server 15 sp2 | 3002.2-49.2 | fixed |
| Suse | salt | linux enterprise micro 5.0 | 3002.2-49.2 | fixed |
| Suse | grafana-formula | manager server module 4.1 | 0.4.2-3.12.2 | fixed |
| Suse | prometheus-formula | manager server module 4.1 | 0.3.4-3.12.2 | fixed |
| Suse | py26-compat-salt | manager server module 4.1 | 2016.11.10-17.2 | fixed |
| Suse | py26-compat-tornado | manager server module 4.1 | 4.2.1-3.3.2 | fixed |
| Suse | py27-compat-salt | manager server module 4.1 | 3000.3-6.15.2 | fixed |
| Suse | spacecmd | manager server module 4.1 | 4.1.15-4.30.2 | fixed |
| Suse | spacewalk-backend | manager server module 4.1 | 4.1.29-4.44.2 | fixed |
| Suse | spacewalk-certs-tools | manager server module 4.1 | 4.1.19-3.22.2 | fixed |
| Suse | spacewalk-java | manager server module 4.1 | 4.1.41-3.58.2 | fixed |
| Suse | spacewalk-reports | manager server module 4.1 | 4.1.4-3.6.2 | fixed |
| Suse | spacewalk-web | manager server module 4.1 | 4.1.30-3.36.1 | fixed |
| Suse | subscription-matcher | manager server module 4.1 | 0.27-3.12.2 | fixed |
| Suse | susemanager | manager server module 4.1 | 4.1.31-3.39.2 | fixed |
| Suse | susemanager-doc-indexes | manager server module 4.1 | 4.1-11.46.2 | fixed |
| Suse | susemanager-docs_en | manager server module 4.1 | 4.1-11.46.2 | fixed |
| Suse | susemanager-sls | manager server module 4.1 | 4.1.31-3.51.2 | fixed |
Fixed-version evidence
| Distribution | Package | Type | Release | Fixed version | Urgency | Origin | Bugs |
|---|---|---|---|---|---|---|---|
| Debian | salt | deb | 10 | 2018.3.4+dfsg1-6+deb10u3 | Not reported | DSA-5011-1 | Not reported |
| Debian | salt | deb | 11 | 3002.6+dfsg1-4+deb11u1 | Not reported | DSA-5011-1 | Not reported |
| Debian | salt | deb | 9 | 2016.11.2+ds-1+deb9u8 | Not reported | DLA-2823-1 | Not reported |
| Suse | salt | rpm | linux enterprise module for basesystem 15 sp3 | 3002.2-50.1.15.1 | Not reported | SUSE-SU-2021:3557-1 | Not reported |
| Suse | salt | rpm | linux enterprise module for server applications 15 sp3 | 3002.2-50.1.15.1 | Not reported | SUSE-SU-2021:3557-1 | Not reported |
| Suse | salt | rpm | linux enterprise module for transactional server 15 sp3 | 3002.2-50.1.15.1 | Not reported | SUSE-SU-2021:3557-1 | Not reported |
| Suse | salt | rpm | linux enterprise micro 5.1 | 3002.2-50.1.15.1 | Not reported | SUSE-SU-2021:3557-1 | Not reported |
| Suse | salt | rpm | linux enterprise high performance computing 15-espos | 3002.2-8.41.17.1 | Not reported | SUSE-SU-2021:3553-1 | Not reported |
| Suse | salt | rpm | linux enterprise high performance computing 15-ltss | 3002.2-8.41.17.1 | Not reported | SUSE-SU-2021:3553-1 | Not reported |
| Suse | salt | rpm | linux enterprise server 15-ltss | 3002.2-8.41.17.1 | Not reported | SUSE-SU-2021:3553-1 | Not reported |
| Suse | salt | rpm | linux enterprise server for sap applications 15 | 3002.2-8.41.17.1 | Not reported | SUSE-SU-2021:3553-1 | Not reported |
| Suse | cobbler | rpm | manager server module 4.2 | 3.1.2-5.11.1 | Not reported | SUSE-SU-2021:3561-1 | Not reported |
| Suse | hub-xmlrpc-api | rpm | manager server module 4.2 | 0.7-3.3.3 | Not reported | SUSE-SU-2021:3561-1 | Not reported |
| Suse | inter-server-sync | rpm | manager server module 4.2 | 0.0.5-8.6.3 | Not reported | SUSE-SU-2021:3561-1 | Not reported |
| Suse | patterns-suse-manager | rpm | manager server module 4.2 | 4.2-4.3.1 | Not reported | SUSE-SU-2021:3561-1 | Not reported |
| Suse | py26-compat-salt | rpm | manager server module 4.2 | 2016.11.10-11.28.9.1 | Not reported | SUSE-SU-2021:3561-1 | Not reported |
| Suse | py26-compat-tornado | rpm | manager server module 4.2 | 4.2.1-3.3.1 | Not reported | SUSE-SU-2021:3561-1 | Not reported |
| Suse | py27-compat-salt | rpm | manager server module 4.2 | 3000.3-7.7.11.1 | Not reported | SUSE-SU-2021:3561-1 | Not reported |
| Suse | spacecmd | rpm | manager server module 4.2 | 4.2.13-4.9.1 | Not reported | SUSE-SU-2021:3561-1 | Not reported |
| Suse | spacewalk-admin | rpm | manager server module 4.2 | 4.2.9-3.6.2 | Not reported | SUSE-SU-2021:3561-1 | Not reported |
| Suse | spacewalk-backend | rpm | manager server module 4.2 | 4.2.17-4.9.3 | Not reported | SUSE-SU-2021:3561-1 | Not reported |
| Suse | spacewalk-certs-tools | rpm | manager server module 4.2 | 4.2.13-3.9.2 | Not reported | SUSE-SU-2021:3561-1 | Not reported |
| Suse | spacewalk-client-tools | rpm | manager server module 4.2 | 4.2.14-4.9.3 | Not reported | SUSE-SU-2021:3561-1 | Not reported |
| Suse | spacewalk-java | rpm | manager server module 4.2 | 4.2.30-3.14.4 | Not reported | SUSE-SU-2021:3561-1 | Not reported |
| Suse | spacewalk-utils | rpm | manager server module 4.2 | 4.2.14-3.9.3 | Not reported | SUSE-SU-2021:3561-1 | Not reported |
| Suse | spacewalk-web | rpm | manager server module 4.2 | 4.2.23-3.9.3 | Not reported | SUSE-SU-2021:3561-1 | Not reported |
| Suse | subscription-matcher | rpm | manager server module 4.2 | 0.27-6.3.1 | Not reported | SUSE-SU-2021:3561-1 | Not reported |
| Suse | supportutils-plugin-susemanager | rpm | manager server module 4.2 | 4.2.3-3.3.2 | Not reported | SUSE-SU-2021:3561-1 | Not reported |
| Suse | susemanager | rpm | manager server module 4.2 | 4.2.25-3.13.1 | Not reported | SUSE-SU-2021:3561-1 | Not reported |
| Suse | susemanager-doc-indexes | rpm | manager server module 4.2 | 4.2-12.11.3 | Not reported | SUSE-SU-2021:3561-1 | Not reported |
| Suse | susemanager-docs_en | rpm | manager server module 4.2 | 4.2-12.11.1 | Not reported | SUSE-SU-2021:3561-1 | Not reported |
| Suse | susemanager-schema | rpm | manager server module 4.2 | 4.2.18-3.9.3 | Not reported | SUSE-SU-2021:3561-1 | Not reported |
| Suse | susemanager-sls | rpm | manager server module 4.2 | 4.2.18-3.11.1 | Not reported | SUSE-SU-2021:3561-1 | Not reported |
| Suse | susemanager-sync-data | rpm | manager server module 4.2 | 4.2.9-3.9.1 | Not reported | SUSE-SU-2021:3561-1 | Not reported |
| Suse | virtualization-formulas | rpm | manager server module 4.2 | 0.6.1-8.3.1 | Not reported | SUSE-SU-2021:3561-1 | Not reported |
| Suse | release-notes-susemanager-proxy | rpm | manager proxy 4.2 | 4.2.3-3.15.1 | Not reported | SUSE-RU-2021:3551-1 | Not reported |
| Suse | release-notes-susemanager-proxy | rpm | manager retail branch server 4.2 | 4.2.3-3.15.1 | Not reported | SUSE-RU-2021:3551-1 | Not reported |
| Suse | release-notes-susemanager | rpm | manager server 4.2 | 4.2.3-3.19.1 | Not reported | SUSE-RU-2021:3551-1 | Not reported |
| Suse | salt | rpm | manager client tools 12 | 3000-46.151.2 | Not reported | SUSE-SU-2021:3550-1 | Not reported |
| Suse | salt | rpm | linux enterprise module for advanced systems management 12 | 3000-46.151.2 | Not reported | SUSE-SU-2021:3550-1 | Not reported |
| Opensuse | salt | rpm | leap 15.2 | 3002.2-lp152.3.45.1 | Not reported | OPENSUSE-SU-2021:1443-1 | Not reported |
| Opensuse | salt | rpm | leap 15.3 | 3002.2-50.1.15.1 | Not reported | OPENSUSE-SU-2021:3557-1 | Not reported |
| Suse | salt | rpm | linux enterprise server 11 sp3-client-tools | 2016.11.10-43.84.1 | Not reported | SUSE-SU-2021:14833-1 | Not reported |
| Suse | spacecmd | rpm | linux enterprise server 11 sp3-client-tools | 4.2.13-18.93.1 | Not reported | SUSE-SU-2021:14833-1 | Not reported |
| Suse | spacewalk-client-tools | rpm | linux enterprise server 11 sp3-client-tools | 4.2.14-27.59.1 | Not reported | SUSE-SU-2021:14833-1 | Not reported |
| Suse | salt | rpm | linux enterprise server 11 sp4-client-tools | 2016.11.10-43.84.1 | Not reported | SUSE-SU-2021:14833-1 | Not reported |
| Suse | spacecmd | rpm | linux enterprise server 11 sp4-client-tools | 4.2.13-18.93.1 | Not reported | SUSE-SU-2021:14833-1 | Not reported |
| Suse | spacewalk-client-tools | rpm | linux enterprise server 11 sp4-client-tools | 4.2.14-27.59.1 | Not reported | SUSE-SU-2021:14833-1 | Not reported |
| Suse | salt | rpm | linux enterprise high performance computing 15 sp1-espos | 3002.2-48.4 | Not reported | SUSE-SU-2021:3555-1 | Not reported |
| Suse | salt | rpm | linux enterprise high performance computing 15 sp1-ltss | 3002.2-48.4 | Not reported | SUSE-SU-2021:3555-1 | Not reported |
| Suse | salt | rpm | linux enterprise server 15 sp1-bcl | 3002.2-48.4 | Not reported | SUSE-SU-2021:3555-1 | Not reported |
| Suse | salt | rpm | linux enterprise server 15 sp1-ltss | 3002.2-48.4 | Not reported | SUSE-SU-2021:3555-1 | Not reported |
| Suse | salt | rpm | linux enterprise server for sap applications 15 sp1 | 3002.2-48.4 | Not reported | SUSE-SU-2021:3555-1 | Not reported |
| Suse | salt | rpm | enterprise storage 6 | 3002.2-48.4 | Not reported | SUSE-SU-2021:3555-1 | Not reported |
| Suse | salt | rpm | linux enterprise module for basesystem 15 sp2 | 3002.2-49.2 | Not reported | SUSE-SU-2021:3556-1 | Not reported |
| Suse | salt | rpm | linux enterprise module for server applications 15 sp2 | 3002.2-49.2 | Not reported | SUSE-SU-2021:3556-1 | Not reported |
| Suse | salt | rpm | linux enterprise module for transactional server 15 sp2 | 3002.2-49.2 | Not reported | SUSE-SU-2021:3556-1 | Not reported |
| Suse | salt | rpm | linux enterprise micro 5.0 | 3002.2-49.2 | Not reported | SUSE-SU-2021:3556-1 | Not reported |
| Suse | grafana-formula | rpm | manager server module 4.1 | 0.4.2-3.12.2 | Not reported | SUSE-SU-2021:3621-1 | Not reported |
| Suse | prometheus-formula | rpm | manager server module 4.1 | 0.3.4-3.12.2 | Not reported | SUSE-SU-2021:3621-1 | Not reported |
| Suse | py26-compat-salt | rpm | manager server module 4.1 | 2016.11.10-17.2 | Not reported | SUSE-SU-2021:3621-1 | Not reported |
| Suse | py26-compat-tornado | rpm | manager server module 4.1 | 4.2.1-3.3.2 | Not reported | SUSE-SU-2021:3621-1 | Not reported |
| Suse | py27-compat-salt | rpm | manager server module 4.1 | 3000.3-6.15.2 | Not reported | SUSE-SU-2021:3621-1 | Not reported |
| Suse | spacecmd | rpm | manager server module 4.1 | 4.1.15-4.30.2 | Not reported | SUSE-SU-2021:3621-1 | Not reported |
| Suse | spacewalk-backend | rpm | manager server module 4.1 | 4.1.29-4.44.2 | Not reported | SUSE-SU-2021:3621-1 | Not reported |
| Suse | spacewalk-certs-tools | rpm | manager server module 4.1 | 4.1.19-3.22.2 | Not reported | SUSE-SU-2021:3621-1 | Not reported |
| Suse | spacewalk-java | rpm | manager server module 4.1 | 4.1.41-3.58.2 | Not reported | SUSE-SU-2021:3621-1 | Not reported |
| Suse | spacewalk-reports | rpm | manager server module 4.1 | 4.1.4-3.6.2 | Not reported | SUSE-SU-2021:3621-1 | Not reported |
| Suse | spacewalk-web | rpm | manager server module 4.1 | 4.1.30-3.36.1 | Not reported | SUSE-SU-2021:3621-1 | Not reported |
| Suse | subscription-matcher | rpm | manager server module 4.1 | 0.27-3.12.2 | Not reported | SUSE-SU-2021:3621-1 | Not reported |
| Suse | susemanager | rpm | manager server module 4.1 | 4.1.31-3.39.2 | Not reported | SUSE-SU-2021:3621-1 | Not reported |
| Suse | susemanager-doc-indexes | rpm | manager server module 4.1 | 4.1-11.46.2 | Not reported | SUSE-SU-2021:3621-1 | Not reported |
| Suse | susemanager-docs_en | rpm | manager server module 4.1 | 4.1-11.46.2 | Not reported | SUSE-SU-2021:3621-1 | Not reported |
| Suse | susemanager-sls | rpm | manager server module 4.1 | 4.1.31-3.51.2 | Not reported | SUSE-SU-2021:3621-1 | Not reported |
OpenFactory catalog packages
No matching packages in this catalog.
Observed:
References
- [https://ftp.suse.com/pub/projects/security/csaf/suse-ru-2021_3551-1.json]
- [https://osv.dev/vulnerability/DLA-2823-1]
- [https://osv.dev/vulnerability/DSA-5011-1]
- [https://osv.dev/vulnerability/SUSE-RU-2021:3551-1]
- [https://osv.dev/vulnerability/SUSE-SU-2021:14833-1]
- [https://osv.dev/vulnerability/SUSE-SU-2021:3550-1]
- [https://osv.dev/vulnerability/SUSE-SU-2021:3553-1]
- [https://osv.dev/vulnerability/SUSE-SU-2021:3555-1]
- [https://osv.dev/vulnerability/SUSE-SU-2021:3556-1]
- [https://osv.dev/vulnerability/SUSE-SU-2021:3557-1]
- [https://osv.dev/vulnerability/SUSE-SU-2021:3561-1]
- [https://osv.dev/vulnerability/SUSE-SU-2021:3621-1]
- [https://osv.dev/vulnerability/UBUNTU-CVE-2021-21996]
- [https://osv.dev/vulnerability/openSUSE-SU-2021:1443-1]
- [https://osv.dev/vulnerability/openSUSE-SU-2021:3557-1]
[FIRST EPSS] · [OSV Package Vulnerability Database] · [SUSE security advisories and VEX]