Lucene search
Ubuntu.comUB:CVE-2023-20897HistorySep 05, 2023 - 12:00 a.m.
CVE-2023-20897
2023-09-0500:00:00
ubuntu.com
ubuntu.com
11
cve-2023-20897
denial of service
minion return
worker threads
unresponsive
debian
unix
CVSS3
5.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
EPSS
0.001
Percentile
31.1%
Salt masters prior to 3005.2 or 3006.2 contain a DOS in minion return.
After receiving several bad packets on the request server equal to the
number of worker threads, the master will become unresponsive to return
requests until restarted.
Bugs
Related
cve
cve
CVE-2023-20897
2023-09-05 11:15:32
osv
osv
CVE-2023-20897
2023-09-05 11:15:32
PYSEC-2023-166
2023-09-05 11:15:00
Salt vulnerable to denial of service
2023-09-05 12:30:16
github
github
Salt vulnerable to denial of service
2023-09-05 12:30:16
nvd
nvd
CVE-2023-20897
2023-09-05 11:15:32
alpinelinux
alpinelinux
CVE-2023-20897
2023-09-05 11:15:32
cvelist
cvelist
CVE-2023-20897
2023-09-05 10:56:33
debiancve
debiancve
CVE-2023-20897
2023-09-05 11:15:32
prion
prion
Design/Logic Flaw
2023-09-05 11:15:00
veracode
veracode
Denial Of Service
2023-09-11 06:01:31
openvas
openvas
Fedora: Security Advisory for salt (FEDORA-2023-ac1aa963e4)
2023-09-14 00:00:00
SUSE: Security Advisory (SUSE-SU-2023:3865-1)
2023-09-29 00:00:00
SUSE: Security Advisory (SUSE-SU-2023:3866-1)
2023-09-29 00:00:00
nessus
nessus
Fedora 37 : salt (2023-ac1aa963e4)
2023-09-14 00:00:00
SUSE SLES15 Security Update : salt (SUSE-SU-2023:3865-1)
2023-09-29 00:00:00
fedora
fedora
[SECURITY] Fedora 37 Update: salt-3005.2-1.fc37
2023-09-14 00:44:08
redos
redos
ROS-20240409-06
2024-04-09 00:00:00
CVSS3
5.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
EPSS
0.001
Percentile
31.1%
Related for UB:CVE-2023-20897