6.6med
CVE-2016-95871 exploit
Ansible is vulnerable to an improper input validation in Ansible's handling of data sent from client systems
Also known as GHSA-m956-frf4-m2wr, PYSEC-2018-39
Published 8 y ago · modified 4 mo ago · JSON
CVSS
6.6
v3.0 · CNA
CISA KEV
No
not known exploited
EPSS
17.0%
percentile 97%
Public exploits
1
Exploit-DB
Summary
Ansible before versions 2.1.4, 2.2.1 is vulnerable to an improper input validation in Ansible's handling of data sent from client systems. An attacker with control over a client system being managed by Ansible and the ability to send facts back to the Ansible server could use this flaw to execute arbitrary code on the Ansible server using the Ansible server privileges.
Exploit prediction (EPSS)
17.01% probability of exploitation in the next 30 days, higher than 97% of all scored CVEs.
Exploits and detections
- EDB-41013 Ansible 2.1.4/2.2.1 - Command Execution · remote · 2017-01-09
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| CNA | 3.0 | 6.6 | CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H |
| NVD | 3.1 | 8.1 | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H |
| CNA | 3.0 | 6.6 | CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H |
| NVD | 2.0 | 9.3 | AV:N/AC:M/Au:N/C:C/I:C/A:C |
| GitHub | 3.1 | 8.1 | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H |
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| pypi | ansible | <2.1.4.0 >=2.2.0.0, <2.2.1.0 | 2.1.4.0 2.2.1.0 |
Affected products
- unspecified Ansible
Classification
- Weakness
- CWE-20 Improper Input Validation
References
- access.redhat.com /errata/RHSA-2017:0515 · vendor-advisory, x_refsource_REDHAT, x_transferred
- exploit-db.com /exploits/41013/ · exploit, x_refsource_EXPLOIT-DB, x_transferred
- security.gentoo.org /glsa/201701-77 · vendor-advisory, x_refsource_GENTOO, x_transferred
- access.redhat.com /errata/RHSA-2017:1685 · vendor-advisory, x_refsource_REDHAT, x_transferred
- securityfocus.com /bid/95352 · vdb-entry, x_refsource_BID, x_transferred
- access.redhat.com /errata/RHSA-2017:0448 · vendor-advisory, x_refsource_REDHAT, x_transferred
- bugzilla.redhat.com /show_bug.cgi?id=CVE-2016-9587 · x_refsource_CONFIRM, x_transferred
- rhn.redhat.com /errata/RHSA-2017-0195.html · vendor-advisory, x_refsource_REDHAT, x_transferred
- rhn.redhat.com /errata/RHSA-2017-0260.html · vendor-advisory, x_refsource_REDHAT, x_transferred
- nvd.nist.gov /vuln/detail/CVE-2016-9587 · advisory
- github.com /advisories/GHSA-m956-frf4-m2wr · advisory
- github.com /ansible/ansible · package
- github.com /pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2018-39.yaml · web
- web.archive.org /web/20170115210655/http://www.securityfocus.com/bid/95352 · web
- exploit-db.com /exploits/41013 · web
Sources
- CVE List: CVE-2016-9587
- GitHub Advisory: GHSA-m956-frf4-m2wr
- NVD: CVE-2016-9587
- OSV: PYSEC-2018-39
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.