PyPI/ansible CVE-2013-4259: medium 4, EPSS 0.34%

Ansible uses a socket with predictable filename in /tmp

Action: Upgrade ansible to 1.2.3 or later.

pip install ansible==1.2.3

Affected

Fixed versions

Sources

• osv: GHSA-fj24-ghp9-39v3
• https://nvd.nist.gov/vuln/detail/CVE-2013-4259
• https://bugzilla.redhat.com/show_bug.cgi?id=998223
• https://github.com/ansible/ansible
• https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2013-1.yaml
• https://groups.google.com/forum/#!topic/ansible-project/UVDYW0HGcNg
• https://groups.google.com/forum/#%21topic/ansible-project/UVDYW0HGcNg
• http://www.ansible.com/security

CVE-2013-4259 · published 2022-05-14T02:03:36Z · modified 2024-09-04T20:05:01.052910Z · JSON