Vulnerability Database
289,689
Total vulnerabilities in the database
CVE-2023-20897
Salt masters prior to 3005.2 or 3006.2 contain a DOS in minion return. After receiving several bad packets on the request server equal to the number of worker threads, the master will become unresponsive to return requests until restarted.
| Software | From | Fixed in |
|---|---|---|
salt
|
- | 3005.2 |
|
salt
|
3006.0rc1 | 3006.2 |
| saltstack / salt | 3006.0 | 3006.2 |
| saltstack / salt | - | 3005.2 |
- https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2023-166.yaml
- https://lists.fedoraproject.org/archives/list/[email protected]/message/OMWJIHQZXHK6FH2E3IWAZCYIRI7FLVOL
- https://lists.fedoraproject.org/archives/list/[email protected]/message/OMWJIHQZXHK6FH2E3IWAZCYIRI7FLVOL/
- https://saltproject.io/security-announcements/2023-08-10-advisory
- https://saltproject.io/security-announcements/2023-08-10-advisory/