CVE-2021-40323
Fixed in a distro release EPSS 87%
Cobbler before 3.3.0 allows log poisoning, and resultant Remote Code Execution, via an XMLRPC method that logs to the logfile for template injection.
Products: cobbler_project cobbler
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| PyPI | cobbler | 3.3.0 |
| PyPI | cobbler | d8f60bbf14a838c8c8a1dba98086b223e35fe70a |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| SUSE Manager Proxy 4.2 | release-notes-susemanager-proxy | 4.2.2-3.12.1 |
| SUSE Manager Retail Branch Server 4.2 | release-notes-susemanager-proxy | 4.2.2-3.12.1 |
| SUSE Manager Server 4.2 | release-notes-susemanager | 4.2.2-3.12.1 |
| SUSE Manager Server Module 4.1 | cobbler | 3.0.0+git20190806.32c4bae0-8.22.6.1 |
| SUSE Manager Server Module 4.2 | branch-network-formula | 0.1.1628156312.dbd0dec-3.3.1 |
| SUSE Manager Server Module 4.2 | cobbler | 3.1.2-5.8.1 |
| SUSE Manager Server Module 4.2 | cpu-mitigations-formula | 0.4.0-3.3.1 |
| SUSE Manager Server Module 4.2 | inter-server-sync | 0.0.5-8.3.2 |
| SUSE Manager Server Module 4.2 | openvpn-formula | 0.1.2-3.3.1 |
| SUSE Manager Server Module 4.2 | prometheus-exporters-formula | 1.0.3-3.6.1 |
| SUSE Manager Server Module 4.2 | py26-compat-salt | 2016.11.10-11.28.6.1 |
| SUSE Manager Server Module 4.2 | py27-compat-salt | 3000.3-7.7.8.1 |
| SUSE Manager Server Module 4.2 | saltboot-formula | 0.1.1628156312.dbd0dec-3.3.1 |
| SUSE Manager Server Module 4.2 | spacecmd | 4.2.12-4.6.2 |
| SUSE Manager Server Module 4.2 | spacewalk-backend | 4.2.16-4.6.3 |
| SUSE Manager Server Module 4.2 | spacewalk-certs-tools | 4.2.12-3.6.2 |
| SUSE Manager Server Module 4.2 | spacewalk-client-tools | 4.2.13-4.6.3 |
| SUSE Manager Server Module 4.2 | spacewalk-java | 4.2.28-3.11.5 |
| SUSE Manager Server Module 4.2 | spacewalk-setup | 4.2.8-3.6.1 |
| SUSE Manager Server Module 4.2 | spacewalk-utils | 4.2.13-3.6.1 |
| SUSE Manager Server Module 4.2 | spacewalk-web | 4.2.21-3.6.3 |
| SUSE Manager Server Module 4.2 | susemanager | 4.2.22-3.6.1 |
| SUSE Manager Server Module 4.2 | susemanager-build-keys | 15.3.5-3.3.1 |
| SUSE Manager Server Module 4.2 | susemanager-doc-indexes | 4.2-12.8.1 |
| SUSE Manager Server Module 4.2 | susemanager-docs_en | 4.2-12.8.1 |
| SUSE Manager Server Module 4.2 | susemanager-schema | 4.2.17-3.6.2 |
| SUSE Manager Server Module 4.2 | susemanager-sls | 4.2.16-3.6.1 |
| SUSE Manager Server Module 4.2 | susemanager-sync-data | 4.2.8-3.6.1 |
| Ubuntu Pro 16.04 LTS | cobbler | 2.4.1-0ubuntu2+esm1 |