{"id":"CVE-2017-14696","aliases":["GHSA-657p-cj5r-mjrh","PYSEC-2017-37"],"url":"https://o3.security/vulnerability/CVE-2017-14696","summary":"SaltStack Salt Denial of Service via a crafted authentication request","details":"SaltStack Salt before 2016.3.8, 2016.11.x before 2016.11.8, and 2017.7.x before 2017.7.2 allows remote attackers to cause a denial of service via a crafted authentication request.","published":"2017-10-24T17:29:00.370Z","modified":"2026-07-08T05:48:33.695050043Z","cvss":{"score":7.5,"severity":"HIGH","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},"epss":null,"cisaKev":null,"exploitsKnown":0,"affectedPackages":[{"ecosystem":"PyPI","name":"salt","fixedVersion":"2016.3.8"},{"ecosystem":"PyPI","name":"salt","fixedVersion":"2016.11.8"},{"ecosystem":"PyPI","name":"salt","fixedVersion":"2017.7.2"}],"fix":{"url":"https://github.com/saltstack/salt/commit/5f8b5e1a0f23fe0f2be5b3c3e04199b57a53db5b","label":"saltstack/salt@5f8b5e1"},"references":[{"type":"REPORT","url":"http://lists.opensuse.org/opensuse-updates/2017-10/msg00073.html"},{"type":"REPORT","url":"http://lists.opensuse.org/opensuse-updates/2017-10/msg00075.html"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1500742"},{"type":"REPORT","url":"https://docs.saltstack.com/en/latest/topics/releases/2016.11.8.html"},{"type":"REPORT","url":"https://docs.saltstack.com/en/latest/topics/releases/2016.3.8.html"},{"type":"REPORT","url":"https://docs.saltstack.com/en/latest/topics/releases/2017.7.2.html"},{"type":"FIX","url":"https://github.com/saltstack/salt/commit/5f8b5e1a0f23fe0f2be5b3c3e04199b57a53db5b"}],"provenance":{"sources":["OSV.dev","FIRST.org (EPSS)"],"lastVerified":"2026-07-08T05:48:33.695050043Z"}}