CVE-2013-2228

SaltStack RSA Key Generation allows remote users to decrypt communications

• CWE-307

• http://www.openwall.com/lists/oss-security/2013/07/01/1Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/60868Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1028717Third Party Advisory, VDB Entry
• https://bugs.gentoo.org/show_bug.cgi?id=CVE-2013-2228Third Party Advisory
• https://bugzilla.suse.com/show_bug.cgi?id=CVE-2013-2228Issue Tracking, Third Party Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/85372Third Party Advisory, VDB Entry
• https://security-tracker.debian.org/tracker/CVE-2013-2228Third Party Advisory
• http://www.openwall.com/lists/oss-security/2013/07/01/1Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/60868Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1028717Third Party Advisory, VDB Entry
• https://bugs.gentoo.org/show_bug.cgi?id=CVE-2013-2228Third Party Advisory
• https://bugzilla.suse.com/show_bug.cgi?id=CVE-2013-2228Issue Tracking, Third Party Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/85372Third Party Advisory, VDB Entry
• https://security-tracker.debian.org/tracker/CVE-2013-2228Third Party Advisory

Published

Dec 3, 2019

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2013-2222Multiple stack-based buffer overflows in GNU ZRTPCPP before …
• CVE-2013-2223GNU ZRTPCPP before 3.2.0 allows remote attackers to obtain s…
• CVE-2013-2224A certain Red Hat patch for the Linux kernel 2.6.32 on Red H…
• CVE-2013-2225inc/ticket.class.php in GLPI 0.83.9 and earlier allows remot…
• CVE-2013-2226Multiple SQL injection vulnerabilities in GLPI before 0.83.9…
• CVE-2013-2227GLPI 0.83.7 has Local File Inclusion in common.tabs.php.7.5
• CVE-2013-2229Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2013-2230The qemu driver (qemu/qemu_driver.c) in libvirt before 1.1.1…
• CVE-2013-2231Unquoted Windows search path vulnerability in the QEMU Guest…
• CVE-2013-2232The ip6_sk_dst_check function in net/ipv6/ip6_output.c in th…
• CVE-2013-2233Ansible before 1.2.1 makes it easier for remote attackers to…
• CVE-2013-2234The (1) key_notify_sa_flush and (2) key_notify_policy_flush …