{"action":"Upgrade ansible to 2.5.11 or later.","affected":[{"fixed":"2.7.1","introduced":"2.7.0a1"},{"fixed":"2.6.7","introduced":"2.6.0a1"},{"fixed":"2.5.11","introduced":"0"}],"component":"ansible","cve_ids":["CVE-2018-16837"],"ecosystem":"PyPI","epss":0.00362,"exploited":false,"fixed_versions":["2.7.1","2.6.7","2.5.11"],"ghsa_id":"GHSA-hwrm-63v2-42g4","id":"tcs_01M5KFMKS3T330N5NR2PNBRHMK","modified_at":"2024-09-04T19:31:23.827971Z","published_at":"2022-05-13T01:50:27Z","references":["https://osv.dev/vulnerability/GHSA-hwrm-63v2-42g4","https://nvd.nist.gov/vuln/detail/CVE-2018-16837","https://github.com/ansible/ansible/pull/47487","https://github.com/ansible/ansible/pull/47486","https://github.com/ansible/ansible/pull/47445","https://github.com/ansible/ansible/pull/47436","https://github.com/ansible/ansible/commit/77928e6c3a2ad878b20312ce5d74d9d7741e0df0","https://github.com/ansible/ansible/commit/b618339c321c387230d3ea523e80ad47af3de5cf","https://github.com/ansible/ansible/commit/f50cc0b8cb399bb7b7c1ad23b94c9404f0cc6d23","https://www.debian.org/security/2019/dsa-4396","https://web.archive.org/web/20200227105539/http://www.securityfocus.com/bid/105700","https://usn.ubuntu.com/4072-1","https://lists.debian.org/debian-lts-announce/2018/11/msg00012.html","https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2018-44.yaml","https://github.com/ansible/ansible/blob/c963ef1dfbf73efea5106624eb48b346f01eaefd/changelogs/CHANGELOG-v2.7.rst?plain=1#L138","https://github.com/ansible/ansible","https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16837","https://access.redhat.com/security/cve/cve-2018-16837","https://access.redhat.com/errata/RHSA-2018:3505","https://access.redhat.com/errata/RHSA-2018:3463","https://access.redhat.com/errata/RHSA-2018:3462","https://access.redhat.com/errata/RHSA-2018:3461","https://access.redhat.com/errata/RHSA-2018:3460","http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00021.html","http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00077.html","http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00020.html"],"severity":{"label":"high","score":7.8},"sources":[{"source":"osv","source_id":"GHSA-hwrm-63v2-42g4","url":"https://osv.dev/vulnerability/GHSA-hwrm-63v2-42g4"}],"summary":"Ansible Leaks Data Passed to ssh-keygen"}