CVE-2014-4967

Related Files

Gentoo Linux Security Advisory 201411-09

Posted Nov 24, 2014

Authored by Gentoo | Site security.gentoo.org

Gentoo Linux Security Advisory 201411-9 - Multiple vulnerabilities have been found in Ansible which may allow local privilege escalation. Versions less than 1.6.8 are affected.

tags | advisory, local, vulnerability

systems | linux, gentoo

advisories | CVE-2014-4657, CVE-2014-4678, CVE-2014-4966, CVE-2014-4967

SHA-256 | 2864926da3458a61d02dbe8623f01598e75752b681274d074fedc48f55914d2f

Download | Favorite | View

Ansible 1.6.6 Arbitrary Code Execution

Posted Jul 22, 2014

Authored by Open Source CERT

The Ansible platform suffers from input sanitization errors that allow arbitrary code execution as well as information leak, in case an attacker is able to control certain playbook variables. Versions 1.6.6 and below are affected.

tags | advisory, arbitrary, code execution

advisories | CVE-2014-4966, CVE-2014-4967

SHA-256 | b465397fc2a757360069751e13b345820b4f62ef4a925ba616292d6bb0511da6

Download | Favorite | View