En bref
- CVE-2023-20897 est une vulnérabilité MOYENNE (CVSS 5.3) touchant salt, salt (saltstack).
- Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 1.2%, plus élevée que 69.3% des vulnérabilités.
- Correctif : mettre à jour vers 3006.2, 3005.2 ou plus récent.
| Package | Affected versions | Patched versions |
|---|
| salt PyPI | ≥ 3006.0, < 3006.2≥ 3006.0rc1, < 3006.2< 3005.2
| 3006.23005.2
|
| salt | ≥ 3006.0, < 3006.2< 3005.2
| 3006.23005.2
|
Description
Salt masters prior to 3005.2 or 3006.2 contain a DOS in minion return. After receiving several bad packets on the request server equal to the number of worker threads, the master will become unresponsive to return requests until restarted.
NVD description
Salt masters prior to 3005.2 or 3006.2 contain a DOS in minion return. After receiving several bad packets on the request server equal to the number of worker threads, the master will become unresponsive to return requests until restarted.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free