Salt vulnerable to denial of service
Salt masters prior to 3005.2 or 3006.2 contain a DOS in minion return. After receiving several bad packets on the request server equal to the number of worker threads, the master will become unresponsive to return requests until restarted.
01
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2023-20897US | medium5.3 | — | ||
Salt masters prior to 3005.2 or 3006.2 contain a DOS in minion return. After receiving several bad packets on the request server equal to the number of worker threads, the master w… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2023-166.yamlWEB
- https://github.com/saltstack/saltPACKAGE
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OMWJIHQZXHK6FH2E3IWAZCYIRI7FLVOLWEB
- https://nvd.nist.gov/vuln/detail/CVE-2023-20897ADVISORY
- https://saltproject.io/security-announcements/2023-08-10-advisoryWEB
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan