Improper input validation in [Unknown] Ansible
CVE-2017-7481
Ansible before versions 2.3.1.0 and 2.4.0.0 fails to properly mark lookup-plugin results as unsafe. If an attacker could control the results of lookup() calls, they could inject Unicode strings to be parsed by the jinja2 templating system, resulting in code execution. By default, the jinja2 templating language is now marked as 'unsafe' and is not evaluated.
Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)
Published · last modified .
CVSS v3 metric
CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.
EPSS exploit prediction
EPSS: 0.048 (91.6th percentile), scored .
Low probability of exploitation in the next 30 days, but still tracked. 92nd percentile — 91.6% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.048 · newest: 0.048 · change: -0.001
Affected products
- [Unknown] Ansible — versions ansible 2.4.0.0, ansible 2.3.1.0
- Canonical Ubuntu Linux — versions 16.04, 18.04, 19.04
- Debian Linux — versions 9.0
- Red Hat Ansible Engine
- Red Hat Enterprise Linux — versions 7.0
- Red Hat Gluster Storage — versions 3.2
- Red Hat Openshift Container Platform — versions 3.3, 3.4, 3.5
- Red Hat OpenStack — versions 10, 11
- Red Hat Storage Console — versions 2.0
- Red Hat Virtualization — versions 4.1
Weakness classification (CWE)
References
- access.redhat.com/errata/RHSA-2017:1599 (vendor-advisory, Vendor Advisory)
- bugzilla.redhat.com/show_bug.cgi (Patch, Issue Tracking, Vendor Advisory)
- access.redhat.com/errata/RHSA-2017:1334 (vendor-advisory, Vendor Advisory)
- www.securityfocus.com/bid/98492 (VDB Entry, Third Party Advisory, vdb-entry)
- github.com/ansible/ansible/commit/ed56f51f185a1ffd7ea57130d260098686fcc7c2 (Patch, Third Party Advisory)
- access.redhat.com/errata/RHSA-2017:1244 (vendor-advisory, Vendor Advisory)
- access.redhat.com/errata/RHSA-2017:1499 (vendor-advisory, Vendor Advisory)
- access.redhat.com/errata/RHSA-2017:2524 (vendor-advisory, Vendor Advisory)
- access.redhat.com/errata/RHSA-2017:1476 (vendor-advisory, Vendor Advisory)
- usn.ubuntu.com/4072-1/ (vendor-advisory, Third Party Advisory)
Frequently asked questions
- What is CVE-2017-7481?
- CVE-2017-7481 is a critical-severity vulnerability in [Unknown] Ansible, classified under Improper Input Validation. CVSS score: 9.8/10. Published 2018-07-19.
- How severe is CVE-2017-7481?
- Critical severity. CVSS v3 base score is 9.8 out of 10.