PyPI/salt CVE-2023-20897: medium 5.3, EPSS 1.24%

Salt masters prior to 3005.2 or 3006.2 contain a DOS in minion return. After receiving several bad packets on the request server equal to the number of worker threads, the master will become unrespons

Action: Upgrade salt to 3005.2 or later.

pip install salt==3006.2

pip install salt==3005.2

Affected

Fixed versions

Sources

• osv: PYSEC-2023-166
• https://saltproject.io/security-announcements/2023-08-10-advisory/
• https://github.com/advisories/GHSA-vpjg-wmf8-29h9

CVE-2023-20897 · published 2023-09-05T11:15:00Z · modified 2026-06-10T17:02:40.153819414Z · JSON