Most recent entries from all

bdu:2020-02914

BREW-ansible-CVE-2017-7481

Affected: Homebrew: ansible

Ansible before versions 2.3.1.0 and 2.4.0.0 fails to properly mark lookup-plugin results as unsafe. If an attacker could control the results of lookup() calls, they could inject Unicode strings to be parsed by the jinja2 templating system, resulting in code execution. By default, the jinja2 templating language is now marked as 'unsafe' and is not evaluated.

cnvd-2017-10573

EUVD-2026-74714

fkie_cve-2017-7481

GHSA-w578-j992-554x — Ansible fails to properly mark lookup-plugin results as unsafe

Affected: PyPI: ansible

Ansible before versions 2.1.6.0, 2.2.3.0, 2.3.1.0, and 2.4.0.0 fails to properly mark lookup-plugin results as unsafe. If an attacker could control the results of lookup() calls, they could inject Unicode strings to be parsed by the jinja2 templating system, resulting in code execution. By default, the jinja2 templating language is now marked as 'unsafe' and is not evaluated.

gsd-2017-7481

openSUSE-SU-2017:2976-1 — Security update for ansible

Security update for ansible

PYSEC-2018-41

Affected: PyPI: ansible

RHSA-2017:1244 — Red Hat Security Advisory: ansible and openshift-ansible security and bug fix update

ansible: Arbitrary code execution on control node (incomplete fix for CVE-2016-9587) ansible: Security issue with lookup return not tainting the jinja2 environment

SUSE-SU-2017:3029-1 — Security update for ansible and monasca-installer

Security update for ansible and monasca-installer

UBUNTU-CVE-2017-7481

Affected: Ubuntu:16.04:LTS: ansible

WID-SEC-W-2026-1808 — Red Hat OpenShift Container Platform: Mehrere Schwachstellen ermöglichen Ausführen von beliebigem Programmcode mit den…

Ein entfernter, authentisierter oder anonymer Angreifer kann mehrere Schwachstellen in Red Hat OpenShift Container Platform ausnutzen, um beliebigen Programmcode mit den Rechten des Dienstes auszuführen.