CVE-2016-8628 Ansible fails to properly sanitize fact variables sent from the Ansible controller
CriticalCVSS 9.1
EPSS 3.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Ansible before version 2.2.0 fails to properly sanitize fact variables sent from the Ansible controller. An attacker with the ability to create special variables on the controller could execute arbitrary commands on Ansible clients as the user Ansible runs as.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| pypi ansible(PyPI) | < 2.2.0.0 | 2.2.0.0 |
| pypi ansible(PyPI) | = 1.0 | No fix listed |
| pypi ansible(PyPI) | = 1.1 | No fix listed |
| pypi ansible(PyPI) | = 1.2 | No fix listed |
| pypi ansible(PyPI) | = 1.2.1 | No fix listed |
| pypi ansible(PyPI) | = 1.2.2 | No fix listed |
| pypi ansible(PyPI) | = 1.2.3 | No fix listed |
| pypi ansible(PyPI) | = 1.3.0 | No fix listed |
| pypi ansible(PyPI) | = 1.3.1 | No fix listed |
| pypi ansible(PyPI) | = 1.3.2 | No fix listed |
| pypi ansible(PyPI) | = 1.3.3 | No fix listed |
| pypi ansible(PyPI) | = 1.3.4 | No fix listed |
| pypi ansible(PyPI) | = 1.4 | No fix listed |
| pypi ansible(PyPI) | = 1.4.1 | No fix listed |
| pypi ansible(PyPI) | = 1.4.2 | No fix listed |
| pypi ansible(PyPI) | = 1.4.3 | No fix listed |
| pypi ansible(PyPI) | = 1.4.4 | No fix listed |
| pypi ansible(PyPI) | = 1.4.5 | No fix listed |
| pypi ansible(PyPI) | = 1.5 | No fix listed |
| pypi ansible(PyPI) | = 1.5.1 | No fix listed |
| pypi ansible(PyPI) | = 1.5.2 | No fix listed |
| pypi ansible(PyPI) | = 1.5.3 | No fix listed |
| pypi ansible(PyPI) | = 1.5.4 | No fix listed |
| pypi ansible(PyPI) | = 1.5.5 | No fix listed |
| pypi ansible(PyPI) | = 1.6 | No fix listed |
Show 44 more
| Product | Affected versions | Fixed in |
|---|---|---|
| pypi ansible(PyPI) | = 1.6.1 | No fix listed |
| pypi ansible(PyPI) | = 1.6.10 | No fix listed |
| pypi ansible(PyPI) | = 1.6.2 | No fix listed |
| pypi ansible(PyPI) | = 1.6.3 | No fix listed |
| pypi ansible(PyPI) | = 1.6.4 | No fix listed |
| pypi ansible(PyPI) | = 1.6.5 | No fix listed |
| pypi ansible(PyPI) | = 1.6.6 | No fix listed |
| pypi ansible(PyPI) | = 1.6.7 | No fix listed |
| pypi ansible(PyPI) | = 1.6.8 | No fix listed |
| pypi ansible(PyPI) | = 1.6.9 | No fix listed |
| pypi ansible(PyPI) | = 1.7 | No fix listed |
| pypi ansible(PyPI) | = 1.7.1 | No fix listed |
| pypi ansible(PyPI) | = 1.7.2 | No fix listed |
| pypi ansible(PyPI) | = 1.8 | No fix listed |
| pypi ansible(PyPI) | = 1.8.1 | No fix listed |
| pypi ansible(PyPI) | = 1.8.2 | No fix listed |
| pypi ansible(PyPI) | = 1.8.3 | No fix listed |
| pypi ansible(PyPI) | = 1.8.4 | No fix listed |
| pypi ansible(PyPI) | = 1.9.0 | No fix listed |
| pypi ansible(PyPI) | = 1.9.0.1 | No fix listed |
| pypi ansible(PyPI) | = 1.9.1 | No fix listed |
| pypi ansible(PyPI) | = 1.9.2 | No fix listed |
| pypi ansible(PyPI) | = 1.9.3 | No fix listed |
| pypi ansible(PyPI) | = 1.9.4 | No fix listed |
| pypi ansible(PyPI) | = 1.9.5 | No fix listed |
| pypi ansible(PyPI) | = 1.9.6 | No fix listed |
| pypi ansible(PyPI) | = 2.0.0 | No fix listed |
| pypi ansible(PyPI) | = 2.0.0.0 | No fix listed |
| pypi ansible(PyPI) | = 2.0.0.1 | No fix listed |
| pypi ansible(PyPI) | = 2.0.0.2 | No fix listed |
| pypi ansible(PyPI) | = 2.0.1.0 | No fix listed |
| pypi ansible(PyPI) | = 2.0.2.0 | No fix listed |
| pypi ansible(PyPI) | = 2.1.0.0 | No fix listed |
| pypi ansible(PyPI) | = 2.1.1.0 | No fix listed |
| pypi ansible(PyPI) | = 2.1.2.0 | No fix listed |
| pypi ansible(PyPI) | = 2.1.3.0 | No fix listed |
| pypi ansible(PyPI) | = 2.1.4.0 | No fix listed |
| pypi ansible(PyPI) | = 2.1.5.0 | No fix listed |
| pypi ansible(PyPI) | = 2.1.6.0 | No fix listed |
| debian/ansible(Debian:12) | < 2.2.0.0-1 | 2.2.0.0-1 |
| debian/ansible(Debian:13) | < 2.2.0.0-1 | 2.2.0.0-1 |
| debian/ansible(Debian:14) | < 2.2.0.0-1 | 2.2.0.0-1 |
| redhat ansible | < 2.2.0 | 2.2.0 |
| redhat ansible | = 2.2.0 | No fix listed |
References
- nvd.nist.gov third-party-advisory vendor-advisory
- github.com
- github.com patch
- RHSA-2016:2778 third-party-advisory vendor-advisory
- bugzilla.redhat.com issue-tracking third-party-advisory
- github.com vendor-advisory
- github.com product
- github.com
- web.archive.org
- 94109 third-party-advisory vdb-entry
- Debian Security Tracker CVE-2016-8628 vendor-advisory
- bugs.debian.org issue-tracking