PyPI/ansible CVE-2017-7466: unknown, EPSS 3.14%
Ansible before version 2.3 has an input validation vulnerability in the handling of data sent from client systems. An attacker with control over a client system being managed by Ansible, and the abili
Action: Upgrade ansible to 2.3.0.0 or later.
pip install ansible==2.3.0.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.3.0.0 | - |
Fixed versions
| 2.3.0.0 |
Sources
- osv: PYSEC-2018-40
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-7466
- https://access.redhat.com/errata/RHSA-2017:1685
- https://access.redhat.com/errata/RHSA-2017:1599
- https://access.redhat.com/errata/RHSA-2017:1499
- https://access.redhat.com/errata/RHSA-2017:1476
- https://access.redhat.com/errata/RHSA-2017:1334
- https://access.redhat.com/errata/RHSA-2017:1244
- http://www.securityfocus.com/bid/97595
- https://github.com/advisories/GHSA-3m8p-xpm6-8ww3
CVE-2017-7466 · published · modified · JSON