CVE-2017-14696: SaltStack Salt

High severity, CVSS 7.5. EPSS: 2.8% chance of exploitation in the next 30 days.

SaltStack Salt before 2016.3.8, 2016.11.x before 2016.11.8, and 2017.7.x before 2017.7.2 allows remote attackers to cause a denial of service via a crafted authentication request.

Affected products

• SaltStack Salt: up to and including 2016.3.7; version 2016.11 only; version 2016.11.0 only; version 2016.11.1 only; version 2016.11.2 only; version 2016.11.3 only; …

Published 2017-10-24. Last modified 2026-06-17.