Salt masters prior to 3005.2 or 3006.2 contain a DOS in minion return.
Priority LOW 33CWE-404Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Denial of service
- Confidentiality · integrity · availability
- None · None · Low
- Fix status
- Fixed
Attack profile from CVSS 3.1 · CNA. Fix status from CNA and GitHub. Impact type from CWE-404.
Summary
Salt masters prior to 3005.2 or 3006.2 contain a DOS in minion return. After receiving several bad packets on the request server equal to the number of worker threads, the master will become unresponsive to return requests until restarted.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.01245 69th percentileScored 2026-11-07
Fix Fixed salt (PyPI): 3005.2, 3006.2
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- Yes
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | Salt | Salt masters prior to 3005.2 or 3006.2 | — | No fix listed | CNA |
| — | salt (PyPI) | before 3005.2 | 3005.2 | Patch available | GHSA-vpjg-wmf8-29h9 |
| — | salt (PyPI) | 3006.0rc1 to before 3006.2 | 3006.2 | Patch available | GHSA-vpjg-wmf8-29h9 |
- Salt Vendor— Affected Salt masters prior to 3005.2 or 3006.2 Fixed in — No fix listed CNA
- salt (PyPI) Vendor— Affected before 3005.2 Fixed in 3005.2 Patch available GHSA-vpjg-wmf8-29h9
- salt (PyPI) Vendor— Affected 3006.0rc1 to before 3006.2 Fixed in 3006.2 Patch available GHSA-vpjg-wmf8-29h9
Remediation
- Fix · GHSA-vpjg-wmf8-29h9 salt (PyPI) Fixed in 3005.2 Advisory →
- Fix · GHSA-vpjg-wmf8-29h9 salt (PyPI) Fixed in 3006.2 Advisory →
Vendor assessments
Timeline
- 2026-10-02 Threatist record created from CVE-2023-20897
- 2026-10-03 Alias added: GHSA-vpjg-wmf8-29h9
References
Advisory 2
Other 5
- https://lists.fedoraproject.org/archives/list/[email protected]/message/OMWJIHQZXHK6FH2E3IWAZCYIRI7FLVOL/
- https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2023-166.yaml
- https://github.com/saltstack/salt
- https://lists.fedoraproject.org/archives/list/[email protected]/message/OMWJIHQZXHK6FH2E3IWAZCYIRI7FLVOL
- https://saltproject.io/security-announcements/2023-08-10-advisory
More SaltStack Salt vulnerabilities
- TI-2020-12851 An issue was discovered in SaltStack Salt through 3002. KEVCVSS 3.1CRITICAL 9.8
- TI-2020-09349 An issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2. KEVCVSS 3.1CRITICAL 9.8
- TI-2021-07530 An issue was discovered in through SaltStack Salt before 3002.5. CVSS 3.1CRITICAL 9.8
- TI-2020-09350 An issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2. KEVCVSS 3.1MEDIUM 6.5
- TI-2021-07531 An issue was discovered in through SaltStack Salt before 3002.5. CVSS 3.1CRITICAL 9.1
- TI-2021-12769 Buffer Overflow vulnerability in Saltstack v.3003 and before allows attacker to execute… CVSS 3.1CRITICAL 9.8
Sources
- CVE-2023-20897 · CVE Program
- CVE-2023-20897 · NVD
- FIRST EPSS
- GHSA-vpjg-wmf8-29h9 · GitHub Advisory Database · CC BY 4.0
- CVE-2023-20897 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences