Skip to content
OpenAdvisories
Medium RHSA-2017:0195 1 CVE

Red Hat Security Advisory: ansible security update

Published Sep 13, 2024 · Updated Jul 1, 2026

Ecosystem: Red Hat

Fixed packages 1

ReleasePackageFixed in
Red Hat · OpenStack 10 openstack:10::el7 ansible 0:2.2.1.0-1.el7

Vulnerabilities 1

  • Medium 6.6
    CVE-2016-9587 Public exploit EPSS 17%

    Ansible is vulnerable to an improper input validation in Ansible's handling of data sent from client systems

    Ansible before versions 2.1.4, 2.2.1 is vulnerable to an improper input validation in Ansible's handling of data sent from client systems. An attacker with control over a client system being managed by Ansible and the ability to send facts back to the Ansible…

    ansible ansible ansible ansible Debian Ubuntu Alpine PyPI

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1404378
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_0195.json
  • report
    https://access.redhat.com/security/cve/CVE-2016-9587
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2016-9587
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2016-9587