PyPI/ansible CVE-2016-8628: critical 9.1, EPSS 3.21%
Ansible fails to properly sanitize fact variables sent from the Ansible controller
Action: Upgrade ansible to 2.2.0.0 or later.
pip install ansible==2.2.0.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.2.0.0 | - |
Fixed versions
| 2.2.0.0 |
Sources
- osv: GHSA-jg4f-jqm5-4mgq
- https://nvd.nist.gov/vuln/detail/CVE-2016-8628
- https://github.com/ansible/ansible/issues/41903
- https://github.com/ansible/ansible/commit/35938b907dfcd1106ca40b794f0db446bdb8cf09
- https://access.redhat.com/errata/RHSA-2016:2778
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-8628
- https://github.com/advisories/GHSA-jg4f-jqm5-4mgq
- https://github.com/ansible/ansible
- https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2018-38.yaml
- https://web.archive.org/web/20200227214455/http://www.securityfocus.com/bid/94109
CVE-2016-8628 · published · modified · JSON