GitHub Advisoryadvisory · PyPI

GHSA-657p-cj5r-mjrh SaltStack Salt Denial of Service via a crafted authentication request

HIGH Published 2022-05-17 Modified 2024-10-22 Official page ↗
Aliases
CVE-2017-14696
Ecosystem
PyPI
Packages
salt
Severity
High
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weaknesses
CWE-20, CWE-400
Reviewed
2024-04-22

Affected packages

• PyPI salt: < 2016.3.8 → fixed in 2016.3.8 • PyPI salt: >= 2016.11.0, < 2016.11.8 → fixed in 2016.11.8 • PyPI salt: >= 2017.7.0, < 2017.7.2 → fixed in 2017.7.2

Description

SaltStack Salt before 2016.3.8, 2016.11.x before 2016.11.8, and 2017.7.x before 2017.7.2 allows remote attackers to cause a denial of service via a crafted authentication request.

Related

Alias · CVE (1)

  • CVE-2017-14696 SaltStack Salt before 2016.3.8, 2016.11.x before 2016.11.8, and 2017.7.x before 2017.7.2 allows remote attackers to cause a denial of… vulnerability

Weakness · CWE (2)

  • CWE-20 Improper Input Validation weakness
  • CWE-400 Uncontrolled Resource Consumption weakness

References