CVE-2023-20897

Salt masters prior to 3005.2 or 3006.2 contain a DOS in minion return

Medium · published September 5, 2023

CVSS v3.1
5.3
EPSS
1%
Percentile
69.1
In the wild
Unconfirmed
What it is

Salt masters prior to 3005.2 or 3006.2 contain a DOS in minion return. After receiving several bad packets on the request server equal to the number of worker threads, the master will become unresponsive to return requests until restarted.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.01245 · 69.1th percentile
Published
2023-09-05T10:56Z
EPSS history
Timeline
  • 05 SEP 10:56Z
    Salt masters prior to 3005.2 or 3006.2 contain a DOS in minion return
    cvelistv5