CVE-2014-4678

2020-02-2003:15:10

Debian Security Bug Tracker

security-tracker.debian.org

0.139 Low

EPSS

Percentile

95.7%

JSON

The safe_eval function in Ansible before 1.6.4 does not properly restrict the code subset, which allows remote attackers to execute arbitrary code via crafted instructions. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-4657.

OSVersionArchitecturePackageVersionFilename
Debian12allansible< 1.6.6+dfsg-1ansible_1.6.6+dfsg-1_all.deb
Debian11allansible< 1.6.6+dfsg-1ansible_1.6.6+dfsg-1_all.deb
Debian10allansible< 1.6.6+dfsg-1ansible_1.6.6+dfsg-1_all.deb
Debian999allansible< 1.6.6+dfsg-1ansible_1.6.6+dfsg-1_all.deb
Debian13allansible< 1.6.6+dfsg-1ansible_1.6.6+dfsg-1_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	ansible	< 1.6.6+dfsg-1	ansible_1.6.6+dfsg-1_all.deb
Debian	11	all	ansible	< 1.6.6+dfsg-1	ansible_1.6.6+dfsg-1_all.deb
Debian	10	all	ansible	< 1.6.6+dfsg-1	ansible_1.6.6+dfsg-1_all.deb
Debian	999	all	ansible	< 1.6.6+dfsg-1	ansible_1.6.6+dfsg-1_all.deb
Debian	13	all	ansible	< 1.6.6+dfsg-1	ansible_1.6.6+dfsg-1_all.deb

0.139 Low

EPSS

Percentile

95.7%

JSON

Related for DEBIANCVE:CVE-2014-4678