CVE-2022-22935: SaltStack Salt - Minion Authentication Denial of Service
Summary
CVE-2022-22935: An issue was discovered in SaltStack Salt in versions before 3002.8, 3003.4, 3004.1. Affects salt versions < 3002.8. Fixed in 3002.8. How to fix ↓
Also tracked for
- salt · Debian:10
The same CVE-2022-22935 is tracked separately for each ecosystem and vendor. Its fix information is the same; the package and affected versions differ.
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
SaltStack Salt is an open-source configuration management and remote execution tool. It is designed to automate the management and deployment of infrastructure. SaltStack Salt allows administrators to control a large number of servers simultaneously, making it a popular choice for managing complex systems. However, versions before 3002.8, 3003.4, and 3004.1 are vulnerable to a minion authentication denial of service attack.
Vulnerability Detail
The vulnerability in SaltStack Salt allows a man-in-the-middle (MiTM) attacker to impersonate a master and force a minion process to stop. By exploiting this vulnerability, an attacker can disrupt the authentication process between the minion and the master, causing the minion to stop functioning. This can lead to a denial of service (DoS) situation, impacting the availability of the affected system. The vulnerability can be triggered by sending specially crafted authentication requests to the minion.
How To Fix
Latest published version: 3008.3.0 as of 22 Oct 2026
pip install --upgrade "salt==3008.3.0"Upgrading to it may include breaking changes; the version below is the minimum fixed release for this vulnerability.
If you need the minimum change
3002.8
This is the first release that contains the fix.
pip install --upgrade "salt==3002.8"Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no known workaround for this vulnerability. It is essential to apply the recommended fix by upgrading to the patched versions of SaltStack Salt.
Conclusion
The vulnerability in SaltStack Salt allows a man-in-the-middle attacker to disrupt the authentication process and cause a denial of service situation. It is crucial to upgrade to the patched versions of SaltStack Salt to mitigate this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for salt →
FAQ
SaltStack Salt is an open-source configuration management and remote execution tool used for managing and deploying infrastructure.
The vulnerability allows a man-in-the-middle attacker to impersonate a master and cause a minion process to stop, leading to a denial of service situation.
Versions before 3002.8, 3003.4, and 3004.1 are affected by this vulnerability.
No, there is no known workaround. It is recommended to upgrade to the patched versions of SaltStack Salt.
To fix this vulnerability, upgrade SaltStack Salt to version 3002.8, 3003.4, or 3004.1 or later.
Related vulnerabilities
Recent vulnerabilities recorded for salt.
