GHSA-vpjg-wmf8-29h9MediumCVSS 5.3
Salt vulnerable to denial of service
🔗 CVE IDs covered (1)
📋 Description
Salt masters prior to 3005.2 or 3006.2 contain a DOS in minion return. After receiving several bad packets on the request server equal to the number of worker threads, the master will become unresponsive to return requests until restarted.
🎯 Affected products2
- pip/salt:< 3005.2
- pip/salt:>= 3006.0rc1, < 3006.2
🔗 References (5)
- https://nvd.nist.gov/vuln/detail/CVE-2023-20897
- https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2023-166.yaml
- https://lists.fedoraproject.org/archives/list/[email protected]/message/OMWJIHQZXHK6FH2E3IWAZCYIRI7FLVOL
- https://saltproject.io/security-announcements/2023-08-10-advisory
- https://github.com/advisories/GHSA-vpjg-wmf8-29h9