https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 05:21:26 +0000 https://cve.radiocsirt.org/vuln/bdu:2021-03714 bdu:2021-03714 https://cve.radiocsirt.org/vuln/bdu:2021-03714 https://cve.radiocsirt.org/vuln/brew-ansible-cve-2019-14904 <p><strong>Affected:</strong> Homebrew: ansible</p> <p>A flaw was found in the solaris_zone module from the Ansible Community modules. When setting the name for the zone on the Solaris host, the zone name is checked by listing the process with the &#39;ps&#39; bare command on the remote machine. An attacker could take advantage of this flaw by crafting the name of the zone and executing arbitrary commands in the remote host. Ansible Engine 2.7.15, 2.8.7, and 2.9.2 as well as previous versions are affected.</p> <p><strong>Affected:</strong> Homebrew: ansible</p> <p>A flaw was found in the solaris_zone module from the Ansible Community modules. When setting the name for the zone on the Solaris host, the zone name is checked by listing the process with the &#39;ps&#39; bare command on the remote machine. An attacker could take advantage of this flaw by crafting the name of the zone and executing arbitrary commands in the remote host. Ansible Engine 2.7.15, 2.8.7, and 2.9.2 as well as previous versions are affected.</p> https://cve.radiocsirt.org/vuln/brew-ansible-cve-2019-14904 https://cve.radiocsirt.org/vuln/cnvd-2019-44537 cnvd-2019-44537 https://cve.radiocsirt.org/vuln/cnvd-2019-44537 https://cve.radiocsirt.org/vuln/euvd-2026-56705 EUVD-2026-56705 https://cve.radiocsirt.org/vuln/euvd-2026-56705 https://cve.radiocsirt.org/vuln/fkie_cve-2019-14904 <p>A flaw was found in the solaris_zone module from the Ansible Community modules. When setting the name for the zone on the Solaris host, the zone name is checked by listing the process with the &#39;ps&#39; bare command on the remote machine. An attacker could take advantage of this flaw by crafting the name of the zone and executing arbitrary commands in the remote host. Ansible Engine 2.7.15, 2.8.7, and 2.9.2 as well as previous versions are affected.</p> <p>A flaw was found in the solaris_zone module from the Ansible Community modules. When setting the name for the zone on the Solaris host, the zone name is checked by listing the process with the &#39;ps&#39; bare command on the remote machine. An attacker could take advantage of this flaw by crafting the name of the zone and executing arbitrary commands in the remote host. Ansible Engine 2.7.15, 2.8.7, and 2.9.2 as well as previous versions are affected.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2019-14904 https://cve.radiocsirt.org/vuln/ghsa-gwr8-5j83-483c <p><strong>Affected:</strong> PyPI: ansible</p> <p>A flaw was found in the solaris_zone module from the Ansible Community modules. When setting the name for the zone on the Solaris host, the zone name is checked by listing the process with the &#39;ps&#39; bare command on the remote machine. An attacker could take advantage of this flaw by crafting the name of the zone and executing arbitrary commands in the remote host. Ansible Engine 2.7.15, 2.8.7, and 2.9.2 as well as previous versions are affected.</p> <p><strong>Affected:</strong> PyPI: ansible</p> <p>A flaw was found in the solaris_zone module from the Ansible Community modules. When setting the name for the zone on the Solaris host, the zone name is checked by listing the process with the &#39;ps&#39; bare command on the remote machine. An attacker could take advantage of this flaw by crafting the name of the zone and executing arbitrary commands in the remote host. Ansible Engine 2.7.15, 2.8.7, and 2.9.2 as well as previous versions are affected.</p> https://cve.radiocsirt.org/vuln/ghsa-gwr8-5j83-483c https://cve.radiocsirt.org/vuln/gsd-2019-14904 gsd-2019-14904 https://cve.radiocsirt.org/vuln/gsd-2019-14904 https://cve.radiocsirt.org/vuln/oesa-2021-1349 <p><strong>Affected:</strong> openEuler:20.03-LTS-SP2: ansible</p> <p>Ansible is a radically simple model-driven configuration management, multi-node deployment, and remote task execution system. Ansible works over SSH and does not require any software or daemons to be installed on remote nodes. Extension modules can be written in any language and are transferred to managed machines automatically. Security Fix(es): A flaw was found in Ansible 2.7.16 and prior, 2.8.8 and prior, and 2.9.5 and prior when a password is set with the argument &amp;quot;password&amp;quot; of svn module, it is used on svn command line, disclosing to other users within the same node. An attacker could take advantage by reading the cmdline file from that particular PID on the procfs.(CVE-2020-1739) A flaw was found in Ansible Engine when using Ansible Vault for editing encrypted files. When a user executes &amp;quot;ansible-vault edit&amp;quot;, another user on the same computer can read the old and new secret, as it is created in a temporary file with mkstemp and the returned file descriptor is closed and the method write_data is called to write the existing secret in the file. This method will delete the file before recreating it insecurely. All versions in 2.7.x, 2.8.x and 2.9.x branches are believed to be vulnerable.(CVE-2020-1740) A flaw was found in Ansible Engine when the module package or service is used and the parameter &amp;apos;use&amp;apos; is not specified. If a previous task is executed with a malicious user, the module sent can be selected by the attacker using the…</p> <p><strong>Affected:</strong> openEuler:20.03-LTS-SP2: ansible</p> <p>Ansible is a radically simple model-driven configuration management, multi-node deployment, and remote task execution system. Ansible works over SSH and does not require any software or daemons to be installed on remote nodes. Extension modules can be written in any language and are transferred to managed machines automatically. Security Fix(es): A flaw was found in Ansible 2.7.16 and prior, 2.8.8 and prior, and 2.9.5 and prior when a password is set with the argument &amp;quot;password&amp;quot; of svn module, it is used on svn command line, disclosing to other users within the same node. An attacker could take advantage by reading the cmdline file from that particular PID on the procfs.(CVE-2020-1739) A flaw was found in Ansible Engine when using Ansible Vault for editing encrypted files. When a user executes &amp;quot;ansible-vault edit&amp;quot;, another user on the same computer can read the old and new secret, as it is created in a temporary file with mkstemp and the returned file descriptor is closed and the method write_data is called to write the existing secret in the file. This method will delete the file before recreating it insecurely. All versions in 2.7.x, 2.8.x and 2.9.x branches are believed to be vulnerable.(CVE-2020-1740) A flaw was found in Ansible Engine when the module package or service is used and the parameter &amp;apos;use&amp;apos; is not specified. If a previous task is executed with a malicious user, the module sent can be selected by the attacker using the…</p> https://cve.radiocsirt.org/vuln/oesa-2021-1349 https://cve.radiocsirt.org/vuln/opensuse-su-2020:0513-1 <p>Security update for ansible</p> <p>Security update for ansible</p> https://cve.radiocsirt.org/vuln/opensuse-su-2020:0513-1 https://cve.radiocsirt.org/vuln/pysec-2020-161 <p><strong>Affected:</strong> PyPI: ansible</p> <p>A flaw was found in the solaris_zone module from the Ansible Community modules. When setting the name for the zone on the Solaris host, the zone name is checked by listing the process with the &#39;ps&#39; bare command on the remote machine. An attacker could take advantage of this flaw by crafting the name of the zone and executing arbitrary commands in the remote host. Ansible Engine 2.7.15, 2.8.7, and 2.9.2 as well as previous versions are affected.</p> <p><strong>Affected:</strong> PyPI: ansible</p> <p>A flaw was found in the solaris_zone module from the Ansible Community modules. When setting the name for the zone on the Solaris host, the zone name is checked by listing the process with the &#39;ps&#39; bare command on the remote machine. An attacker could take advantage of this flaw by crafting the name of the zone and executing arbitrary commands in the remote host. Ansible Engine 2.7.15, 2.8.7, and 2.9.2 as well as previous versions are affected.</p> https://cve.radiocsirt.org/vuln/pysec-2020-161 https://cve.radiocsirt.org/vuln/rhsa-2020:0215 <p>Ansible: vulnerability in solaris_zone module via crafted solaris zone Ansible: malicious code could craft filename in nxos_file_copy module</p> <p>Ansible: vulnerability in solaris_zone module via crafted solaris zone Ansible: malicious code could craft filename in nxos_file_copy module</p> https://cve.radiocsirt.org/vuln/rhsa-2020:0215 https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-14904 <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: ansible, Ubuntu:Pro:18.04:LTS: ansible</p> <p>A flaw was found in the solaris_zone module from the Ansible Community modules. When setting the name for the zone on the Solaris host, the zone name is checked by listing the process with the &#39;ps&#39; bare command on the remote machine. An attacker could take advantage of this flaw by crafting the name of the zone and executing arbitrary commands in the remote host. Ansible Engine 2.7.15, 2.8.7, and 2.9.2 as well as previous versions are affected.</p> <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: ansible, Ubuntu:Pro:18.04:LTS: ansible</p> <p>A flaw was found in the solaris_zone module from the Ansible Community modules. When setting the name for the zone on the Solaris host, the zone name is checked by listing the process with the &#39;ps&#39; bare command on the remote machine. An attacker could take advantage of this flaw by crafting the name of the zone and executing arbitrary commands in the remote host. Ansible Engine 2.7.15, 2.8.7, and 2.9.2 as well as previous versions are affected.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-14904 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2482 <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Ansible ausnutzen, um beliebigen Programmcode auszuführen.</p> <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Ansible ausnutzen, um beliebigen Programmcode auszuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2482