Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2023-20897HistorySep 05, 2023 - 11:15 a.m.
CVE-2023-20897
2023-09-0511:15:32
Debian Security Bug Tracker
security-tracker.debian.org
13
cve-2023-20897
salt masters
denial of service
minion return
worker threads
unix
CVSS3
5.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
AI Score
5.3
Confidence
High
EPSS
0.001
Percentile
31.1%
Salt masters prior to 3005.2 or 3006.2 contain a DOS in minion return. After receiving several bad packets on the request server equal to the number of worker threads, the master will become unresponsive to return requests until restarted.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 11 | all | salt | <= 3002.6+dfsg1-4+deb11u1 | salt_3002.6+dfsg1-4+deb11u1_all.deb |
Related
cve
cve
CVE-2023-20897
2023-09-05 11:15:32
ubuntucve
ubuntucve
CVE-2023-20897
2023-09-05 00:00:00
github
github
Salt vulnerable to denial of service
2023-09-05 12:30:16
osv
osv
CVE-2023-20897
2023-09-05 11:15:32
PYSEC-2023-166
2023-09-05 11:15:00
Salt vulnerable to denial of service
2023-09-05 12:30:16
nvd
nvd
CVE-2023-20897
2023-09-05 11:15:32
alpinelinux
alpinelinux
CVE-2023-20897
2023-09-05 11:15:32
cvelist
cvelist
CVE-2023-20897
2023-09-05 10:56:33
prion
prion
Design/Logic Flaw
2023-09-05 11:15:00
veracode
veracode
Denial Of Service
2023-09-11 06:01:31
openvas
openvas
Fedora: Security Advisory for salt (FEDORA-2023-ac1aa963e4)
2023-09-14 00:00:00
SUSE: Security Advisory (SUSE-SU-2023:3865-1)
2023-09-29 00:00:00
SUSE: Security Advisory (SUSE-SU-2023:3866-1)
2023-09-29 00:00:00
nessus
nessus
Fedora 37 : salt (2023-ac1aa963e4)
2023-09-14 00:00:00
SUSE SLES15 Security Update : salt (SUSE-SU-2023:3865-1)
2023-09-29 00:00:00
fedora
fedora
[SECURITY] Fedora 37 Update: salt-3005.2-1.fc37
2023-09-14 00:44:08
redos
redos
ROS-20240409-06
2024-04-09 00:00:00
CVSS3
5.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
AI Score
5.3
Confidence
High
EPSS
0.001
Percentile
31.1%
Related for DEBIANCVE:CVE-2023-20897