CVE-2017-14696

Опубликовано: 24 окт. 2017

Источник: nvd

CVSS3: 7.5

CVSS2: 5

EPSS Низкий

Описание

SaltStack Salt before 2016.3.8, 2016.11.x before 2016.11.8, and 2017.7.x before 2017.7.2 allows remote attackers to cause a denial of service via a crafted authentication request.

Ссылки

http://lists.opensuse.org/opensuse-updates/2017-10/msg00073.html
Issue Tracking
Release Notes
Third Party Advisory
http://lists.opensuse.org/opensuse-updates/2017-10/msg00075.html
Issue Tracking
Release Notes
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1500742
Issue Tracking
Release Notes
Third Party Advisory
https://docs.saltstack.com/en/latest/topics/releases/2016.11.8.html
Issue Tracking
Release Notes
Vendor Advisory
https://docs.saltstack.com/en/latest/topics/releases/2016.3.8.html
Issue Tracking
Release Notes
Vendor Advisory
https://docs.saltstack.com/en/latest/topics/releases/2017.7.2.html
Issue Tracking
Release Notes
Vendor Advisory
https://github.com/saltstack/salt/commit/5f8b5e1a0f23fe0f2be5b3c3e04199b57a53db5b
Issue Tracking
Patch
Third Party Advisory
http://lists.opensuse.org/opensuse-updates/2017-10/msg00073.html
Issue Tracking
Release Notes
Third Party Advisory
http://lists.opensuse.org/opensuse-updates/2017-10/msg00075.html
Issue Tracking
Release Notes
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1500742
Issue Tracking
Release Notes
Third Party Advisory
https://docs.saltstack.com/en/latest/topics/releases/2016.11.8.html
Issue Tracking
Release Notes
Vendor Advisory
https://docs.saltstack.com/en/latest/topics/releases/2016.3.8.html
Issue Tracking
Release Notes
Vendor Advisory
https://docs.saltstack.com/en/latest/topics/releases/2017.7.2.html
Issue Tracking
Release Notes
Vendor Advisory
https://github.com/saltstack/salt/commit/5f8b5e1a0f23fe0f2be5b3c3e04199b57a53db5b
Issue Tracking
Patch
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:saltstack:salt:*:*:*:*:*:*:*:*

Версия до 2016.3.7 (включая)

cpe:2.3:a:saltstack:salt:2016.11:*:*:*:*:*:*:*

cpe:2.3:a:saltstack:salt:2016.11.0:*:*:*:*:*:*:*

cpe:2.3:a:saltstack:salt:2016.11.1:*:*:*:*:*:*:*

cpe:2.3:a:saltstack:salt:2016.11.1:rc1:*:*:*:*:*:*

cpe:2.3:a:saltstack:salt:2016.11.1:rc2:*:*:*:*:*:*

cpe:2.3:a:saltstack:salt:2016.11.2:*:*:*:*:*:*:*

cpe:2.3:a:saltstack:salt:2016.11.3:*:*:*:*:*:*:*

cpe:2.3:a:saltstack:salt:2016.11.4:*:*:*:*:*:*:*

cpe:2.3:a:saltstack:salt:2016.11.5:*:*:*:*:*:*:*

cpe:2.3:a:saltstack:salt:2016.11.6:*:*:*:*:*:*:*

cpe:2.3:a:saltstack:salt:2016.11.7:*:*:*:*:*:*:*

cpe:2.3:a:saltstack:salt:2017.7.0:*:*:*:*:*:*:*

cpe:2.3:a:saltstack:salt:2017.7.0:rc1:*:*:*:*:*:*

cpe:2.3:a:saltstack:salt:2017.7.1:*:*:*:*:*:*:*

EPSS

Процентиль: 85%

0.02762

Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-20

Связанные уязвимости

CVE-2017-14696

CVSS3: 7.5

ubuntu

почти 9 лет назад

SaltStack Salt before 2016.3.8, 2016.11.x before 2016.11.8, and 2017.7.x before 2017.7.2 allows remote attackers to cause a denial of service via a crafted authentication request.

CVE-2017-14696

CVSS3: 7.5

redhat

почти 9 лет назад

SaltStack Salt before 2016.3.8, 2016.11.x before 2016.11.8, and 2017.7.x before 2017.7.2 allows remote attackers to cause a denial of service via a crafted authentication request.

CVE-2017-14696

CVSS3: 7.5

debian

почти 9 лет назад

SaltStack Salt before 2016.3.8, 2016.11.x before 2016.11.8, and 2017.7 ...

GHSA-657p-cj5r-mjrh

CVSS3: 7.5

github

больше 4 лет назад

SaltStack Salt Denial of Service via a crafted authentication request

openSUSE-SU-2017:2824-1

suse-cvrf

почти 9 лет назад

Security update for salt

EPSS

Процентиль: 85%

0.02762

Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-20