PatchTheCVEspacewalk vulnerabilities and fixes
Recent CVEs affecting spacewalk, with upgrade or downgrade steps. 5 tracked.
spacewalk has 5 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2021-11-01. Highest priority: CVE-2021-40348 (score 55/100).
- CVE-2011-3344 MEDIUM 5.4 MITIGATE DOWNGRADE A flaw was found in Spacewalk
- CVE-2011-2927 MEDIUM 5.4 MITIGATE DOWNGRADE A flaw was found in Spacewalk and Red Hat Network Satellite
- CVE-2011-2920 MEDIUM 5.5 MITIGATE DOWNGRADE A flaw was found in Spacewalk and Red Hat Network Satellite
- CVE-2011-1594 MEDIUM 6.5 MITIGATE DOWNGRADE A flaw was found in Spacewalk, as used in Red Hat Network Satellite
- CVE-2021-40348 HIGH 8.8 DOWNGRADE DOWNGRADE Spacewalk 2.10, and derivatives such as Uyuni 2021.08, allows code injection
FAQ
How do I fix spacewalk vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is spacewalk being exploited right now?
None of the tracked spacewalk CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which spacewalk CVE should I patch first?
CVE-2021-40348 currently ranks highest (55/100): Spacewalk 2.10, and derivatives such as Uyuni 2021.08, allows code injection.