PYSEC-2017-3

2017-06-0720:29:00

Google

osv.dev

0.0004 Low

EPSS

Percentile

5.1%

JSON

The chroot, jail, and zone connection plugins in ansible before 1.9.2 allow local users to escape a restricted environment via a symlink attack.

CPENameOperatorVersion
ansibleeq1.6
ansibleeq1.5.1
ansibleeq1.8.4
ansibleeq1.3.4
ansibleeq1.7.1
ansibleeq1.3.1
ansibleeq1.2
ansibleeq1.1
ansibleeq1.6.10
ansibleeq1.6.9

Name	Operator	Version
ansible	eq	1.6
ansible	eq	1.5.1
ansible	eq	1.8.4
ansible	eq	1.3.4
ansible	eq	1.7.1
ansible	eq	1.3.1
ansible	eq	1.2
ansible	eq	1.1
ansible	eq	1.6.10
ansible	eq	1.6.9

Rows per page:

1-10 of 451

References

www.openwall.com/lists/oss-security/2015/08/17/10

bugzilla.redhat.com/show_bug.cgi?id=1243468

github.com/ansible/ansible/commit/952166f48eb0f5797b75b160fd156bbe1e8fc647

github.com/ansible/ansible/commit/ca2f2c4ebd7b5e097eab0a710f79c1f63badf95b

lists.debian.org/debian-lts-announce/2019/09/msg00016.html

0.0004 Low

EPSS

Percentile

5.1%

JSON

Related for OSV:PYSEC-2017-3