CVE catalog
CVE-2021-31607
Security update for SUSE Manager Client Tools
- Severity
- High · CVSS 7
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H - Published
- Updated
- Source
- [NVD] · [CVE record]
- EPSS
- 5.92% · Oct 25, 2026
In SaltStack Salt 2016.9 through 3002.6, a command injection vulnerability exists in the snapper module that allows for local privilege escalation on a minion. The attack requires that a file is created with a pathname that is backed up by snapper, and that the master calls the snapper.diff function (which executes popen unsafely).
Vulnerable and fixed packages
Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.
| Distribution | Package | Release | Version | Status |
|---|---|---|---|---|
| Ubuntu | salt | pro | 2016.11.5+ds-1 | vulnerable |
| Ubuntu | salt | pro | 2016.11.8+dfsg1-1 | vulnerable |
| Ubuntu | salt | pro | 2017.7.2+dfsg1-2ubuntu1 | vulnerable |
| Ubuntu | salt | pro | 2017.7.3+dfsg1-1 | vulnerable |
| Ubuntu | salt | pro | 2017.7.4+dfsg1-1 | vulnerable |
| Ubuntu | salt | pro | 2017.7.4+dfsg1-1ubuntu18.04.1 | vulnerable |
| Ubuntu | salt | pro | 2017.7.4+dfsg1-1ubuntu18.04.2 | vulnerable |
| Ubuntu | salt | pro | 2017.7.4+dfsg1-1ubuntu18.04.2+esm1 | vulnerable |
| Opensuse | salt | leap 15.3 | 3002.2-8.41.8.1 | fixed |
| Suse | salt | manager client tools 12 | 3000-46.142.2 | fixed |
| Suse | salt | linux enterprise module for advanced systems management 12 | 3000-46.142.2 | fixed |
| Suse | salt | linux enterprise high performance computing 15-espos | 3002.2-8.41.8.1 | fixed |
| Suse | salt | linux enterprise high performance computing 15-ltss | 3002.2-8.41.8.1 | fixed |
| Suse | salt | linux enterprise server 15-ltss | 3002.2-8.41.8.1 | fixed |
| Suse | salt | linux enterprise server for sap applications 15 | 3002.2-8.41.8.1 | fixed |
| Suse | salt | linux enterprise module for basesystem 15 sp3 | 3002.2-8.41.8.1 | fixed |
| Suse | salt | linux enterprise module for server applications 15 sp3 | 3002.2-8.41.8.1 | fixed |
| Suse | salt | linux enterprise module for transactional server 15 sp3 | 3002.2-8.41.8.1 | fixed |
| Suse | golang-github-wrouesnel-postgres_exporter | linux enterprise server 11 sp3-client-tools | 0.4.7-5.12.1 | fixed |
| Suse | mgr-cfg | linux enterprise server 11 sp3-client-tools | 4.2.2-5.15.2 | fixed |
| Suse | mgr-custom-info | linux enterprise server 11 sp3-client-tools | 4.2.1-5.9.2 | fixed |
| Suse | mgr-daemon | linux enterprise server 11 sp3-client-tools | 4.2.7-5.26.1 | fixed |
| Suse | mgr-osad | linux enterprise server 11 sp3-client-tools | 4.2.5-5.27.2 | fixed |
| Suse | mgr-push | linux enterprise server 11 sp3-client-tools | 4.2.2-5.9.2 | fixed |
| Suse | mgr-virtualization | linux enterprise server 11 sp3-client-tools | 4.2.1-5.17.3 | fixed |
| Suse | rhnlib | linux enterprise server 11 sp3-client-tools | 4.2.3-12.31.1 | fixed |
| Suse | salt | linux enterprise server 11 sp3-client-tools | 2016.11.10-43.75.1 | fixed |
| Suse | spacecmd | linux enterprise server 11 sp3-client-tools | 4.2.8-18.84.1 | fixed |
| Suse | spacewalk-client-tools | linux enterprise server 11 sp3-client-tools | 4.2.10-27.50.1 | fixed |
| Suse | spacewalk-koan | linux enterprise server 11 sp3-client-tools | 4.2.3-9.21.1 | fixed |
| Suse | spacewalk-oscap | linux enterprise server 11 sp3-client-tools | 4.2.1-6.15.3 | fixed |
| Suse | spacewalk-remote-utils | linux enterprise server 11 sp3-client-tools | 4.2.1-6.18.2 | fixed |
| Suse | supportutils-plugin-susemanager-client | linux enterprise server 11 sp3-client-tools | 4.2.2-9.21.1 | fixed |
| Suse | suseRegisterInfo | linux enterprise server 11 sp3-client-tools | 4.2.3-6.15.1 | fixed |
| Suse | uyuni-common-libs | linux enterprise server 11 sp3-client-tools | 4.2.3-5.12.1 | fixed |
| Suse | golang-github-wrouesnel-postgres_exporter | linux enterprise server 11 sp4-client-tools | 0.4.7-5.12.1 | fixed |
| Suse | mgr-cfg | linux enterprise server 11 sp4-client-tools | 4.2.2-5.15.2 | fixed |
| Suse | mgr-custom-info | linux enterprise server 11 sp4-client-tools | 4.2.1-5.9.2 | fixed |
| Suse | mgr-daemon | linux enterprise server 11 sp4-client-tools | 4.2.7-5.26.1 | fixed |
| Suse | mgr-osad | linux enterprise server 11 sp4-client-tools | 4.2.5-5.27.2 | fixed |
| Suse | mgr-push | linux enterprise server 11 sp4-client-tools | 4.2.2-5.9.2 | fixed |
| Suse | mgr-virtualization | linux enterprise server 11 sp4-client-tools | 4.2.1-5.17.3 | fixed |
| Suse | rhnlib | linux enterprise server 11 sp4-client-tools | 4.2.3-12.31.1 | fixed |
| Suse | salt | linux enterprise server 11 sp4-client-tools | 2016.11.10-43.75.1 | fixed |
| Suse | spacecmd | linux enterprise server 11 sp4-client-tools | 4.2.8-18.84.1 | fixed |
| Suse | spacewalk-client-tools | linux enterprise server 11 sp4-client-tools | 4.2.10-27.50.1 | fixed |
| Suse | spacewalk-koan | linux enterprise server 11 sp4-client-tools | 4.2.3-9.21.1 | fixed |
| Suse | spacewalk-oscap | linux enterprise server 11 sp4-client-tools | 4.2.1-6.15.3 | fixed |
| Suse | spacewalk-remote-utils | linux enterprise server 11 sp4-client-tools | 4.2.1-6.18.2 | fixed |
| Suse | supportutils-plugin-susemanager-client | linux enterprise server 11 sp4-client-tools | 4.2.2-9.21.1 | fixed |
| Suse | suseRegisterInfo | linux enterprise server 11 sp4-client-tools | 4.2.3-6.15.1 | fixed |
| Suse | uyuni-common-libs | linux enterprise server 11 sp4-client-tools | 4.2.3-5.12.1 | fixed |
Fixed-version evidence
| Distribution | Package | Type | Release | Fixed version | Urgency | Origin | Bugs |
|---|---|---|---|---|---|---|---|
| Opensuse | salt | rpm | leap 15.3 | 3002.2-8.41.8.1 | Not reported | OPENSUSE-SU-2021:1951-1 | Not reported |
| Suse | salt | rpm | manager client tools 12 | 3000-46.142.2 | Not reported | SUSE-SU-2021:2102-1 | Not reported |
| Suse | salt | rpm | linux enterprise module for advanced systems management 12 | 3000-46.142.2 | Not reported | SUSE-SU-2021:2102-1 | Not reported |
| Suse | salt | rpm | linux enterprise high performance computing 15-espos | 3002.2-8.41.8.1 | Not reported | SUSE-SU-2021:2104-1 | Not reported |
| Suse | salt | rpm | linux enterprise high performance computing 15-ltss | 3002.2-8.41.8.1 | Not reported | SUSE-SU-2021:2104-1 | Not reported |
| Suse | salt | rpm | linux enterprise server 15-ltss | 3002.2-8.41.8.1 | Not reported | SUSE-SU-2021:2104-1 | Not reported |
| Suse | salt | rpm | linux enterprise server for sap applications 15 | 3002.2-8.41.8.1 | Not reported | SUSE-SU-2021:2104-1 | Not reported |
| Suse | salt | rpm | linux enterprise module for basesystem 15 sp3 | 3002.2-8.41.8.1 | Not reported | SUSE-SU-2021:1951-1 | Not reported |
| Suse | salt | rpm | linux enterprise module for server applications 15 sp3 | 3002.2-8.41.8.1 | Not reported | SUSE-SU-2021:1951-1 | Not reported |
| Suse | salt | rpm | linux enterprise module for transactional server 15 sp3 | 3002.2-8.41.8.1 | Not reported | SUSE-SU-2021:1951-1 | Not reported |
| Suse | golang-github-wrouesnel-postgres_exporter | rpm | linux enterprise server 11 sp3-client-tools | 0.4.7-5.12.1 | Not reported | SUSE-SU-2021:14753-1 | Not reported |
| Suse | mgr-cfg | rpm | linux enterprise server 11 sp3-client-tools | 4.2.2-5.15.2 | Not reported | SUSE-SU-2021:14753-1 | Not reported |
| Suse | mgr-custom-info | rpm | linux enterprise server 11 sp3-client-tools | 4.2.1-5.9.2 | Not reported | SUSE-SU-2021:14753-1 | Not reported |
| Suse | mgr-daemon | rpm | linux enterprise server 11 sp3-client-tools | 4.2.7-5.26.1 | Not reported | SUSE-SU-2021:14753-1 | Not reported |
| Suse | mgr-osad | rpm | linux enterprise server 11 sp3-client-tools | 4.2.5-5.27.2 | Not reported | SUSE-SU-2021:14753-1 | Not reported |
| Suse | mgr-push | rpm | linux enterprise server 11 sp3-client-tools | 4.2.2-5.9.2 | Not reported | SUSE-SU-2021:14753-1 | Not reported |
| Suse | mgr-virtualization | rpm | linux enterprise server 11 sp3-client-tools | 4.2.1-5.17.3 | Not reported | SUSE-SU-2021:14753-1 | Not reported |
| Suse | rhnlib | rpm | linux enterprise server 11 sp3-client-tools | 4.2.3-12.31.1 | Not reported | SUSE-SU-2021:14753-1 | Not reported |
| Suse | salt | rpm | linux enterprise server 11 sp3-client-tools | 2016.11.10-43.75.1 | Not reported | SUSE-SU-2021:14753-1 | Not reported |
| Suse | spacecmd | rpm | linux enterprise server 11 sp3-client-tools | 4.2.8-18.84.1 | Not reported | SUSE-SU-2021:14753-1 | Not reported |
| Suse | spacewalk-client-tools | rpm | linux enterprise server 11 sp3-client-tools | 4.2.10-27.50.1 | Not reported | SUSE-SU-2021:14753-1 | Not reported |
| Suse | spacewalk-koan | rpm | linux enterprise server 11 sp3-client-tools | 4.2.3-9.21.1 | Not reported | SUSE-SU-2021:14753-1 | Not reported |
| Suse | spacewalk-oscap | rpm | linux enterprise server 11 sp3-client-tools | 4.2.1-6.15.3 | Not reported | SUSE-SU-2021:14753-1 | Not reported |
| Suse | spacewalk-remote-utils | rpm | linux enterprise server 11 sp3-client-tools | 4.2.1-6.18.2 | Not reported | SUSE-SU-2021:14753-1 | Not reported |
| Suse | supportutils-plugin-susemanager-client | rpm | linux enterprise server 11 sp3-client-tools | 4.2.2-9.21.1 | Not reported | SUSE-SU-2021:14753-1 | Not reported |
| Suse | suseRegisterInfo | rpm | linux enterprise server 11 sp3-client-tools | 4.2.3-6.15.1 | Not reported | SUSE-SU-2021:14753-1 | Not reported |
| Suse | uyuni-common-libs | rpm | linux enterprise server 11 sp3-client-tools | 4.2.3-5.12.1 | Not reported | SUSE-SU-2021:14753-1 | Not reported |
| Suse | golang-github-wrouesnel-postgres_exporter | rpm | linux enterprise server 11 sp4-client-tools | 0.4.7-5.12.1 | Not reported | SUSE-SU-2021:14753-1 | Not reported |
| Suse | mgr-cfg | rpm | linux enterprise server 11 sp4-client-tools | 4.2.2-5.15.2 | Not reported | SUSE-SU-2021:14753-1 | Not reported |
| Suse | mgr-custom-info | rpm | linux enterprise server 11 sp4-client-tools | 4.2.1-5.9.2 | Not reported | SUSE-SU-2021:14753-1 | Not reported |
| Suse | mgr-daemon | rpm | linux enterprise server 11 sp4-client-tools | 4.2.7-5.26.1 | Not reported | SUSE-SU-2021:14753-1 | Not reported |
| Suse | mgr-osad | rpm | linux enterprise server 11 sp4-client-tools | 4.2.5-5.27.2 | Not reported | SUSE-SU-2021:14753-1 | Not reported |
| Suse | mgr-push | rpm | linux enterprise server 11 sp4-client-tools | 4.2.2-5.9.2 | Not reported | SUSE-SU-2021:14753-1 | Not reported |
| Suse | mgr-virtualization | rpm | linux enterprise server 11 sp4-client-tools | 4.2.1-5.17.3 | Not reported | SUSE-SU-2021:14753-1 | Not reported |
| Suse | rhnlib | rpm | linux enterprise server 11 sp4-client-tools | 4.2.3-12.31.1 | Not reported | SUSE-SU-2021:14753-1 | Not reported |
| Suse | salt | rpm | linux enterprise server 11 sp4-client-tools | 2016.11.10-43.75.1 | Not reported | SUSE-SU-2021:14753-1 | Not reported |
| Suse | spacecmd | rpm | linux enterprise server 11 sp4-client-tools | 4.2.8-18.84.1 | Not reported | SUSE-SU-2021:14753-1 | Not reported |
| Suse | spacewalk-client-tools | rpm | linux enterprise server 11 sp4-client-tools | 4.2.10-27.50.1 | Not reported | SUSE-SU-2021:14753-1 | Not reported |
| Suse | spacewalk-koan | rpm | linux enterprise server 11 sp4-client-tools | 4.2.3-9.21.1 | Not reported | SUSE-SU-2021:14753-1 | Not reported |
| Suse | spacewalk-oscap | rpm | linux enterprise server 11 sp4-client-tools | 4.2.1-6.15.3 | Not reported | SUSE-SU-2021:14753-1 | Not reported |
| Suse | spacewalk-remote-utils | rpm | linux enterprise server 11 sp4-client-tools | 4.2.1-6.18.2 | Not reported | SUSE-SU-2021:14753-1 | Not reported |
| Suse | supportutils-plugin-susemanager-client | rpm | linux enterprise server 11 sp4-client-tools | 4.2.2-9.21.1 | Not reported | SUSE-SU-2021:14753-1 | Not reported |
| Suse | suseRegisterInfo | rpm | linux enterprise server 11 sp4-client-tools | 4.2.3-6.15.1 | Not reported | SUSE-SU-2021:14753-1 | Not reported |
| Suse | uyuni-common-libs | rpm | linux enterprise server 11 sp4-client-tools | 4.2.3-5.12.1 | Not reported | SUSE-SU-2021:14753-1 | Not reported |
OpenFactory catalog packages
No matching packages in this catalog.
Observed:
References
- [https://ftp.suse.com/pub/projects/security/csaf/suse-su-2021_14753-1.json]
- [https://osv.dev/vulnerability/SUSE-SU-2021:14753-1]
- [https://osv.dev/vulnerability/SUSE-SU-2021:1951-1]
- [https://osv.dev/vulnerability/SUSE-SU-2021:2102-1]
- [https://osv.dev/vulnerability/SUSE-SU-2021:2104-1]
- [https://osv.dev/vulnerability/UBUNTU-CVE-2021-31607]
- [https://osv.dev/vulnerability/openSUSE-SU-2021:1951-1]
[FIRST EPSS] · [OSV Package Vulnerability Database] · [SUSE security advisories and VEX]