Multiple argument injection vulnerabilities in Ansible before 1.6.7 allow remote attackers to execute arbitrary code by leveraging access to an Ansible managed host and providing a crafted fact, as demonstrated by a fact with (1) a trailing " src=" clause, (2) a trailing " temp=" clause, or (3) a trailing " validate=" clause accompanied by a shell command.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade ansible | Aug 30, 2017 | Jul 29, 2014 |
| Debian | — | Upgrade ansible | Jul 30, 2024 | Feb 18, 2020 |
| Gentoo Linux | — | Upgrade app-admin/ansible. | Oct 30, 2017 | Nov 23, 2014 |
| Ubuntu | — | Upgrade ansible (Ubuntu Pro) | Nov 19, 2024 | Feb 18, 2020 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub