CVE-2016-9587
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2016-9587
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-9587.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2016-9587
- Aliases
- Related
- Published
- 2018-04-24T16:29:00Z
- Modified
- 2024-11-02T04:48:57.061724Z
- Severity
-
- 8.1 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
- Summary
- [none]
- Details
-
Ansible before versions 2.1.4, 2.2.1 is vulnerable to an improper input validation in Ansible's handling of data sent from client systems. An attacker with control over a client system being managed by Ansible and the ability to send facts back to the Ansible server could use this flaw to execute arbitrary code on the Ansible server using the Ansible server privileges.
- References
-
- http://rhn.redhat.com/errata/RHSA-2017-0195.html
- http://rhn.redhat.com/errata/RHSA-2017-0260.html
- http://www.securityfocus.com/bid/95352
- https://access.redhat.com/errata/RHSA-2017:0448
- https://access.redhat.com/errata/RHSA-2017:0515
- https://access.redhat.com/errata/RHSA-2017:1685
- https://security.gentoo.org/glsa/201701-77
- https://www.exploit-db.com/exploits/41013/
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-9587
- https://security.alpinelinux.org/vuln/CVE-2016-9587
- https://security-tracker.debian.org/tracker/CVE-2016-9587
Affected packages
Alpine:v3.4 / ansible
Package
- Name
- ansible
- Purl
- pkg:apk/alpine/ansible?arch=source
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed2.1.4.0-r0
Affected versions
0.*
0.3.1-r0
0.4-r0
0.5-r0
0.7-r0
0.7.1-r0
0.8-r0
0.9-r0
1.*
1.0-r0
1.0-r1
1.1-r0
1.1-r1
1.2-r1
1.2.1-r1
1.2.2-r0
1.2.3-r0
1.3.3-r0
1.3.4-r0
1.4.1-r0
1.4.3-r0
1.4.5-r0
1.5.0-r0
1.5.4-r0
1.5.5-r0
1.6.1-r0
1.6.5-r0
1.6.6-r0
1.6.7-r0
1.7.0-r0
1.7.1-r0
1.7.2-r0
1.8.0-r0
1.8.2-r0
1.8.4-r0
1.9.2-r0
1.9.2-r1
1.9.3-r0
1.9.3-r1
1.9.4-r0
2.*
2.0.0.2-r0
2.0.0.2-r1
2.0.1.0-r1
2.1.0.0-r0
Alpine:v3.5 / ansible
Package
- Name
- ansible
- Purl
- pkg:apk/alpine/ansible?arch=source
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed2.2.1.0-r0
Affected versions
0.*
0.3.1-r0
0.4-r0
0.5-r0
0.7-r0
0.7.1-r0
0.8-r0
0.9-r0
1.*
1.0-r0
1.0-r1
1.1-r0
1.1-r1
1.2-r1
1.2.1-r1
1.2.2-r0
1.2.3-r0
1.3.3-r0
1.3.4-r0
1.4.1-r0
1.4.3-r0
1.4.5-r0
1.5.0-r0
1.5.4-r0
1.5.5-r0
1.6.1-r0
1.6.5-r0
1.6.6-r0
1.6.7-r0
1.7.0-r0
1.7.1-r0
1.7.2-r0
1.8.0-r0
1.8.2-r0
1.8.4-r0
1.9.2-r0
1.9.2-r1
1.9.3-r0
1.9.3-r1
1.9.4-r0
2.*
2.0.0.2-r0
2.0.0.2-r1
2.0.1.0-r1
2.1.0.0-r0
2.1.1.0-r0
2.1.2.0-r0
2.2.0.0-r0
Debian:11 / ansible
Package
- Name
- ansible
- Purl
- pkg:deb/debian/ansible?arch=source
Debian:12 / ansible
Package
- Name
- ansible
- Purl
- pkg:deb/debian/ansible?arch=source
Debian:13 / ansible
Package
- Name
- ansible
- Purl
- pkg:deb/debian/ansible?arch=source
Git / github.com/ansible/ansible
Affected ranges
- Type
- GIT
- Repo
- https://github.com/ansible/ansible
- Events
-
Introduced0 Unknown introduced commit / All previous commits are affectedFixed
Affected versions
0.*
0.0.1
0.0.2
0.01
0.3
0.7
v1.*
v1.0
v1.1
v1.2
v1.4.0
v1.5.0
v1.5.1
v1.6.0
Other
v1_last
v2.*
v2.0.0-0.1.alpha1
v2.0.0-0.2.alpha2
v2.0.0-0.3.beta1
v2.0.0-0.4.beta2
v2.0.0-0.5.beta3
v2.1.0.0-0.1.rc1
v2.1.0.0-0.2.rc2
v2.1.0.0-0.3.rc3
v2.1.0.0-0.4.rc4
v2.1.1.0-0.1.rc1
v2.1.1.0-0.2.rc2
v2.1.1.0-0.3.rc3
v2.1.1.0-0.4.rc4
v2.1.1.0-0.5.rc5
v2.1.1.0-1
v2.1.2.0-0.1.rc1
v2.1.2.0-0.2.rc2
v2.1.2.0-0.3.rc3
v2.1.2.0-0.4.rc4
v2.1.2.0-0.5.rc5
v2.1.2.0-1
v2.1.3.0-0.1.rc1
v2.1.3.0-0.2.rc2
v2.1.3.0-0.3.rc3
v2.1.3.0-1
v2.1.4.0-0.1.rc1
v2.1.4.0-0.2.rc2
v2.1.4.0-0.3.rc3