Gabriele Sonnu

**Name of the Vulnerable Software and Affected Versions** Saltstack versions 3003 and before **Description** The issue allows an attacker to execute arbitrary code via the `func` variable in the salt/salt/modules/status.py file. This is a Buffer Overflow vulnerability. Note that there is a dispute regarding the vulnerability, as some parties claim an attacker cannot influence the eval input. **Recommendations** For Saltstack versions 3003 and before, consider disabling the `func` variable in the salt/salt/modules/status.py file as a temporary workaround until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.