Denial Of Service

2023-09-1106:01:31

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

salt masters

denial of service

bad packets

unresponsiveness

attacker

disruption

normal operation

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

EPSS

0.001

Percentile

31.1%

JSON

Salt masters is vulnerable to Denial Of Service. The vulnerability is due to the master becoming unresponsive to return requests after receiving several bad packets on the request server, equal to the number of worker threads. This allows an attacker to disrupt the Salt master’s normal operation causing denial of service until the master is restarted.