7.5

CVE-2017-14696

SaltStack Salt before 2016.3.8, 2016.11.x before 2016.11.8, and 2017.7.x before 2017.7.2 allows remote attackers to cause a denial of service via a crafted authentication request.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Saltstack ≫ Salt Version <= 2016.3.7
Saltstack ≫ Salt Version 2016.11
Saltstack ≫ Salt Version 2016.11.0
Saltstack ≫ Salt Version 2016.11.1
Saltstack ≫ Salt Version 2016.11.1 Update rc1
Saltstack ≫ Salt Version 2016.11.1 Update rc2
Saltstack ≫ Salt Version 2016.11.2
Saltstack ≫ Salt Version 2016.11.3
Saltstack ≫ Salt Version 2016.11.4
Saltstack ≫ Salt Version 2016.11.5
Saltstack ≫ Salt Version 2016.11.6
Saltstack ≫ Salt Version 2016.11.7
Saltstack ≫ Salt Version 2017.7.0
Saltstack ≫ Salt Version 2017.7.0 Update rc1
Saltstack ≫ Salt Version 2017.7.1
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 2.76% 0.848
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.5 3.9 3.6
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
NIST 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:N/A:P
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://lists.opensuse.org/opensuse-updates/2017-10/msg00073.html
Third Party Advisory
Release Notes
Issue Tracking
http://lists.opensuse.org/opensuse-updates/2017-10/msg00075.html
Third Party Advisory
Release Notes
Issue Tracking
https://docs.saltstack.com/en/latest/topics/releases/2016.11.8.html
Vendor Advisory
Release Notes
Issue Tracking
https://docs.saltstack.com/en/latest/topics/releases/2016.3.8.html
Vendor Advisory
Release Notes
Issue Tracking
https://docs.saltstack.com/en/latest/topics/releases/2017.7.2.html
Vendor Advisory
Release Notes
Issue Tracking
https://bugzilla.redhat.com/show_bug.cgi?id=1500742
Third Party Advisory
Release Notes
Issue Tracking
https://github.com/saltstack/salt/commit/5f8b5e1a0f23fe0f2be5b3c3e04199b57a53db5b
Patch
Third Party Advisory
Issue Tracking