23 matches found
Linux Distros Unpatched Vulnerability : CVE-2017-7481
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Ansible before versions 2.3.1.0 and 2.4.0.0 fails to properly mark lookup-plugin results as unsafe. If an attacker could control the results of lookup calls, th...
Mageia: Security Advisory (MGASA-2017-0164)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2017-7481
creationtimestamp| type| source ---|---|--- 2021-11-08 08:58:19+00:00| seen| MISP/f5030aca-7d5a-43a4-ae03-8f4ac8e85422...
Debian: Security Advisory (DLA-2535-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian DLA-2535-1 : ansible security update
CVE-2017-7481 Ansible fails to properly mark lookup-plugin results as unsafe. If an attacker could control the results of lookup calls, they could inject Unicode strings to be parsed by the jinja2 templating system, resulting in code execution. By default, the jinja2 templating language is now...
Ubuntu: Security Advisory (USN-4072-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
ansitom (>=0.0.1, <=0.0.2), cloudmesh-client (>=4.5.0, <=4.7.3) +2 more potentially affected by CVE-2017-7481 via ansible (2.2.1.0)
ansible PYPI version 2.2.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on ansible and may be impacted: - ansitom =0.0.1, =4.5.0, =0.0.21a8, =0.0.21a21, =0.0.22a2 Source cves: CVE-2017-7481 Source advisory: GHSA-W578-J992-554X...
pyansible (>=1.0.0, <=1.0.3) potentially affected by CVE-2017-7481 via ansible (1.9.4)
ansible PYPI version 1.9.4 is affected by a known vulnerability. The following packages have a transitive dependency on ansible and may be impacted: - pyansible =1.0.0, =1.0.3 Source cves: CVE-2017-7481 Source advisory: OSV:GHSA-W578-J992-554X...
ansible-flow (0.1.0) potentially affected by CVE-2017-7481 via ansible (1.9.6)
ansible PYPI version 1.9.6 is affected by a known vulnerability. The following packages have a transitive dependency on ansible and may be impacted: - ansible-flow 0.1.0 Source cves: CVE-2017-7481 Source advisory: OSV:GHSA-W578-J992-554X...
ara (>=0.14.3.0rc1, <=0.14.3), kayobe (>=3.1.2, <=3.1.3) +2 more potentially affected by CVE-2017-7481 via ansible (2.3.3.0)
ansible PYPI version 2.3.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on ansible and may be impacted: - ara =0.14.3.0rc1, =3.1.2, =3.0.0, =3.0.3 Source cves: CVE-2017-7481 Source advisory: OSV:PYSEC-2018-41...
DEBIAN-CVE-2017-7481
Ansible before versions 2.3.1.0 and 2.4.0.0 fails to properly mark lookup-plugin results as unsafe. If an attacker could control the results of lookup calls, they could inject Unicode strings to be parsed by the jinja2 templating system, resulting in code execution. By default, the jinja2...
ansitom (>=0.0.1, <=0.0.2), cloudmesh-client (>=4.2.6, <=4.7.3) +5 more potentially affected by CVE-2017-7481 via ansible (>=2.0.0.0, <=2.2.3.0)
ansible PYPI version =2.0.0.0, =0.0.1, =4.2.6, =0.0.11, =0.1.4, =0.0.21a21, =0.1.7, =0.1.14 Source cves: CVE-2017-7481 Source advisory: OSV:PYSEC-2018-41...
ansitom (>=0.0.1, <=0.0.2), cloudmesh-client (>=4.5.0, <=4.7.3) +2 more potentially affected by CVE-2017-7481 via ansible (2.2.1.0)
ansible PYPI version 2.2.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on ansible and may be impacted: - ansitom =0.0.1, =4.5.0, =0.0.21a8, =0.0.21a21, =0.0.22a2 Source cves: CVE-2017-7481 Source advisory: MEND:CVE-2017-7481...
CVE-2017-7481
CVE-2017-7481 affects Ansible before versions 2.3.1.0 and 2.4.0.0, where lookup-plugin results could be marked unsafe, allowing code execution via jinja2 if an attacker controls lookup() results. The description and connected advisories confirm the vulnerability originates from unsafe lookup resu...
SUSE-SU-2017:3029-1 Security update for ansible and monasca-installer
This update for ansible provides version 2.2.3.0 and fixes the following security issues: - CVE-2017-7481: Data for lookup plugins used as variables was not being marked as 'unsafe' and could lead to unintentional disclosure of information. bsc1038785 - CVE-2016-9587: Prevent compromised host to...
RHEL 7 : ansible (RHSA-2017:2524)
An update for ansible is now available for RHEV Engine version 4.1. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the C...
Moderate: Red Hat Security Advisory: ansible security, bug fix, and enhancement update
An update for ansible is now available for RHEV Engine version 4.1. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the C...
Fedora 26 : ansible (2017-49c0ac5ce7)
Update to 2.3.1, with various bugfixes and fix for CVE-2017-7481. Full changes available at : https://github.com/ansible/ansible/blob/stable-2.3/CHANGELOG.md Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable ha...
RHEL 7 : ansible (RHSA-2017:1499)
The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2017:1499 advisory. Ansible is a simple model-driven configuration management, multi-node deployment, and remote-task execution system. Ansible works over SSH a...
Important: Red Hat Security Advisory: ansible security update
An update for ansible is now available for Red Hat Storage Console 2 for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available...