Lucene search
Ubuntu.comUB:CVE-2023-5764HistoryDec 12, 2023 - 12:00 a.m.
CVE-2023-5764
2023-12-1200:00:00
ubuntu.com
ubuntu.com
10
ansible
template injection
code injection
security flaw
cve-2023-5764
debian bug
A template injection flaw was found in Ansible where a user’s controller
internal templating operations may remove the unsafe designation from
template data. This issue could allow an attacker to use a specially
crafted file to introduce templating injection when supplying templating
data.
Bugs
Notes
| Author | Note |
|---|---|
| sbeattie | core ansible binaries were split into ansible-base, which got renamed to ansible-core core ansible binaries were split into ansible-base, which got renamed to ansible-core |
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| ubuntu | 18.04 | noarch | ansible | < any | UNKNOWN |
| ubuntu | 20.04 | noarch | ansible | < any | UNKNOWN |
| ubuntu | 22.04 | noarch | ansible | < any | UNKNOWN |
| ubuntu | 14.04 | noarch | ansible | < any | UNKNOWN |
| ubuntu | 16.04 | noarch | ansible | < any | UNKNOWN |
| ubuntu | 22.04 | noarch | ansible-core | < any | UNKNOWN |
| ubuntu | 23.10 | noarch | ansible-core | < any | UNKNOWN |
| ubuntu | 24.04 | noarch | ansible-core | < any | UNKNOWN |
References
bugzilla.redhat.com/show_bug.cgi?id=2247629
github.com/ansible/ansible/pull/82293 (stable-2.16)
github.com/ansible/ansible/pull/82294 (stable-2.15)
github.com/ansible/ansible/pull/82295 (stable-2.14)
launchpad.net/bugs/cve/CVE-2023-5764
nvd.nist.gov/vuln/detail/CVE-2023-5764
security-tracker.debian.org/tracker/CVE-2023-5764
www.cve.org/CVERecord?id=CVE-2023-5764
Related
osv
osv
Ansible template injection vulnerability
2023-12-13 00:30:37
debiancve
debiancve
CVE-2023-5764
2023-12-12 22:01:33
openvas
openvas
Fedora: Security Advisory for ansible (FEDORA-2023-3a0ce521ab)
2023-12-20 00:00:00
Fedora: Security Advisory for ansible-core (FEDORA-2023-3a0ce521ab)
2023-12-20 00:00:00
prion
prion
Code injection
2023-12-12 22:15:00
github
github
Ansible template injection vulnerability
2023-12-13 00:30:37
nessus
nessus
Fedora 40 : ansible / ansible-core (2023-2aa09dd8d8)
2024-04-29 00:00:00
Amazon Linux 2023 : ansible-core, ansible-test (ALAS2023-2024-465)
2024-01-08 00:00:00
Fedora 39 : ansible / ansible-core (2023-3a0ce521ab)
2023-12-20 00:00:00
redhatcve
redhatcve
CVE-2023-5764
2023-11-02 13:48:02
cvelist
cvelist
CVE-2023-5764 Ansible: template injection
2023-12-12 22:01:33
cbl_mariner
cbl_mariner
CVE-2023-5764 affecting package ansible for versions less than 2.14.12-2
2024-01-14 22:46:30
cve
cve
CVE-2023-5764
2023-12-12 22:01:33
cloudlinux
cloudlinux
ansible: Fix of CVE-2023-5764
2024-05-21 10:38:53
veracode
veracode
Template Injection
2023-12-06 02:18:39
redhat
redhat
photon
photon
Important Photon OS Security Update - PHSA-2024-4.0-0547
2024-01-12 00:00:00
Important Photon OS Security Update - PHSA-2024-5.0-0184
2024-01-04 00:00:00
ibm
ibm