cve.bz

CVE-2023-20897

5.3 mediumEPSS 1.2%

Medium (5.3) in saltstack salt. EPSS 1.2% chance of exploitation in the next 30 days. Fixed in salt 3005.2, 3006.2.

Salt masters prior to 3005.2 or 3006.2 contain a DOS in minion return. After receiving several bad packets on the request server equal to the number of worker threads, the master will become unresponsive to return requests until restarted.

Severity

CVSS 3.1

5.3 medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
EPSS
1.2% chance of exploitation in the next 30 days; higher than 69% of CVEs (scores of 2026-10-31)
CWE
CWE-404
Published
Modified
Record from
the NVD, synced

Affected

Packages (OSV)

AdvisoryEcosystemPackageAffectedFixed in
GHSA-vpjg-wmf8-29h9PyPIsalt<3005.23005.2
GHSA-vpjg-wmf8-29h9PyPIsalt>=3006.0rc1 <3006.23006.2
PYSEC-2023-166PyPIsalt>=3006.0 <3006.2
<3005.2		3006.2, 3005.2

References

Check your stackJSON