CVE-2017-14696

Severity CVSS v4.0:
Pending analysis
Type:
CWE-20 Input Validation
Publication date:
24/10/2017
Last modified:
20/04/2025

Description

SaltStack Salt before 2016.3.8, 2016.11.x before 2016.11.8, and 2017.7.x before 2017.7.2 allows remote attackers to cause a denial of service via a crafted authentication request.

Vulnerable products and versions

CPE From Up to
cpe:2.3:a:saltstack:salt:*:*:*:*:*:*:*:* 2016.3.7 (including)
cpe:2.3:a:saltstack:salt:2016.11:*:*:*:*:*:*:*
cpe:2.3:a:saltstack:salt:2016.11.0:*:*:*:*:*:*:*
cpe:2.3:a:saltstack:salt:2016.11.1:*:*:*:*:*:*:*
cpe:2.3:a:saltstack:salt:2016.11.1:rc1:*:*:*:*:*:*
cpe:2.3:a:saltstack:salt:2016.11.1:rc2:*:*:*:*:*:*
cpe:2.3:a:saltstack:salt:2016.11.2:*:*:*:*:*:*:*
cpe:2.3:a:saltstack:salt:2016.11.3:*:*:*:*:*:*:*
cpe:2.3:a:saltstack:salt:2016.11.4:*:*:*:*:*:*:*
cpe:2.3:a:saltstack:salt:2016.11.5:*:*:*:*:*:*:*
cpe:2.3:a:saltstack:salt:2016.11.6:*:*:*:*:*:*:*
cpe:2.3:a:saltstack:salt:2016.11.7:*:*:*:*:*:*:*
cpe:2.3:a:saltstack:salt:2017.7.0:*:*:*:*:*:*:*
cpe:2.3:a:saltstack:salt:2017.7.0:rc1:*:*:*:*:*:*
cpe:2.3:a:saltstack:salt:2017.7.1:*:*:*:*:*:*:*