Skip to content
OpenAdvisories
Medium · 5.0 CVE-2020-10729 EUVD-2021-0005GHSA-r6h7-5pq2-j77hPYSEC-2021-105

Insufficiently random values in Ansible

Published May 27, 2021 · Updated Aug 4, 2024 · Assigned by redhat

Description

A flaw was found in the use of insufficiently random values in Ansible. Two random password lookups of the same length generate the equal value as the template caching action for the same file since no re-evaluation happens. The highest threat from this vulnerability would be that all passwords are exposed at once for the file. This flaw affects Ansible Engine versions before 2.9.6.

Affected products

VendorProductAffectedFixed
— Ansible ansible-engine 2.9.6 —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Debian 14 ansible 2.9.6+dfsg-1 —
Debian 13 ansible 2.9.6+dfsg-1 —
Debian 12 ansible 2.9.6+dfsg-1 —
Debian 10 ansible 2.7.7+dfsg-1+deb10u1 DSA-4950-1
ReleasePackageFixed inAdvisory
Ubuntu Pro 20.04 LTS ansible 2.9.6+dfsg-1ubuntu0.1~esm3 USN-7330-1
Ubuntu Pro 18.04 LTS ansible 2.5.1+dfsg-1ubuntu0.1+esm5 USN-7330-1
Ubuntu Pro 16.04 LTS ansible 2.0.0.2-2ubuntu1.3+esm5 USN-7330-1
Show 1 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu Pro 14.04 LTS ansible 1.5.4+dfsg-1ubuntu0.1~esm3 USN-7330-1
ReleasePackageFixed inAdvisory
Red Hat Ansible Engine 2 ansible +1 2.9.6-1.el7ae RHBA-2020:0784
ReleasePackageFixed inAdvisory
SUSE Package Hub 15 SP3 ansible 2.9.21-bp153.2.3.1 openSUSE-SU-2022:0081-1
SUSE OpenStack Cloud Crowbar 8 ansible 2.9.14-3.15.1 SUSE-SU-2020:3309-1
SUSE OpenStack Cloud Crowbar 8 crowbar-core 5.0+git.1600432272.b3ad722f0-3.44.1 SUSE-SU-2020:3309-1
SUSE OpenStack Cloud Crowbar 8 crowbar-openstack 5.0+git.1599037158.5c4d07480-4.43.1 SUSE-SU-2020:3309-1
SUSE OpenStack Cloud Crowbar 8 documentation-suse-openstack-cloud-deployment +3 8.20201007-1.29.1 SUSE-SU-2020:3309-1
SUSE OpenStack Cloud Crowbar 8 grafana 6.7.4-4.12.1 SUSE-SU-2020:3309-1
SUSE OpenStack Cloud Crowbar 8 grafana-natel-discrete-panel 0.0.9-3.3.6 SUSE-SU-2020:3309-1
SUSE OpenStack Cloud Crowbar 8 openstack-cinder 11.2.3~dev29-3.28.2 SUSE-SU-2020:3309-1
SUSE OpenStack Cloud Crowbar 8 openstack-cinder-doc 11.2.3~dev29-3.28.1 SUSE-SU-2020:3309-1
SUSE OpenStack Cloud Crowbar 8 openstack-monasca-installer 20190923_16.32-3.15.1 SUSE-SU-2020:3309-1
SUSE OpenStack Cloud Crowbar 8 openstack-neutron 11.0.9~dev69-3.37.2 SUSE-SU-2020:3309-1
SUSE OpenStack Cloud Crowbar 8 openstack-neutron-doc 11.0.9~dev69-3.37.1 SUSE-SU-2020:3309-1
SUSE OpenStack Cloud Crowbar 8 openstack-nova 16.1.9~dev76-3.39.2 SUSE-SU-2020:3309-1
SUSE OpenStack Cloud Crowbar 8 openstack-nova-doc 16.1.9~dev76-3.39.1 SUSE-SU-2020:3309-1
SUSE OpenStack Cloud Crowbar 8 python-Django 1.11.29-3.19.2 SUSE-SU-2020:3309-1
SUSE OpenStack Cloud Crowbar 8 python-Pillow 4.2.1-3.9.2 SUSE-SU-2020:3309-1
SUSE OpenStack Cloud Crowbar 8 python-keystoneclient 3.13.1-3.3.2 SUSE-SU-2020:3309-1
SUSE OpenStack Cloud Crowbar 8 python-keystonemiddleware 4.17.1-5.3.1 SUSE-SU-2020:3309-1
SUSE OpenStack Cloud Crowbar 8 python-kombu 4.1.0-3.7.1 SUSE-SU-2020:3309-1
SUSE OpenStack Cloud Crowbar 8 python-straight-plugin 1.5.0-1.3.1 SUSE-SU-2020:3309-1
SUSE OpenStack Cloud Crowbar 8 python-urllib3 1.22-5.12.1 SUSE-SU-2020:3309-1
SUSE OpenStack Cloud Crowbar 8 release-notes-suse-openstack-cloud 8.20200922-3.23.1 SUSE-SU-2020:3309-1
SUSE OpenStack Cloud Crowbar 8 rubygem-crowbar-client 3.9.3-1.1 SUSE-SU-2020:3309-1
SUSE OpenStack Cloud Crowbar 8 storm 1.2.3-3.6.1 SUSE-SU-2020:3309-1
SUSE OpenStack Cloud 8 ansible 2.9.14-3.15.1 SUSE-SU-2020:3309-1
SUSE OpenStack Cloud 8 ardana-ansible 8.0+git.1596735237.54109b1-3.77.1 SUSE-SU-2020:3309-1
SUSE OpenStack Cloud 8 ardana-cinder 8.0+git.1596129856.263f430-3.43.1 SUSE-SU-2020:3309-1
SUSE OpenStack Cloud 8 ardana-glance 8.0+git.1593631779.76fa9b7-3.24.1 SUSE-SU-2020:3309-1
SUSE OpenStack Cloud 8 ardana-mq 8.0+git.1593618123.678c32b-3.26.1 SUSE-SU-2020:3309-1
SUSE OpenStack Cloud 8 ardana-nova 8.0+git.1601298847.dd01585-3.42.1 SUSE-SU-2020:3309-1
SUSE OpenStack Cloud 8 ardana-osconfig 8.0+git.1595885113.93abcbc-3.49.1 SUSE-SU-2020:3309-1
SUSE OpenStack Cloud 8 documentation-suse-openstack-cloud-user +8 8.20201007-1.29.1 SUSE-SU-2020:3309-1
SUSE OpenStack Cloud 8 grafana 6.7.4-4.12.1 SUSE-SU-2020:3309-1
SUSE OpenStack Cloud 8 grafana-natel-discrete-panel 0.0.9-3.3.6 SUSE-SU-2020:3309-1
SUSE OpenStack Cloud 8 openstack-cinder 11.2.3~dev29-3.28.2 SUSE-SU-2020:3309-1
SUSE OpenStack Cloud 8 openstack-cinder-doc 11.2.3~dev29-3.28.1 SUSE-SU-2020:3309-1
SUSE OpenStack Cloud 8 openstack-monasca-installer 20190923_16.32-3.15.1 SUSE-SU-2020:3309-1
SUSE OpenStack Cloud 8 openstack-neutron 11.0.9~dev69-3.37.2 SUSE-SU-2020:3309-1
SUSE OpenStack Cloud 8 openstack-neutron-doc 11.0.9~dev69-3.37.1 SUSE-SU-2020:3309-1
SUSE OpenStack Cloud 8 openstack-nova 16.1.9~dev76-3.39.2 SUSE-SU-2020:3309-1
SUSE OpenStack Cloud 8 openstack-nova-doc 16.1.9~dev76-3.39.1 SUSE-SU-2020:3309-1
SUSE OpenStack Cloud 8 python-Django 1.11.29-3.19.2 SUSE-SU-2020:3309-1
SUSE OpenStack Cloud 8 python-Flask-Cors 3.0.3-3.3.1 SUSE-SU-2020:3309-1
SUSE OpenStack Cloud 8 python-Pillow 4.2.1-3.9.2 SUSE-SU-2020:3309-1
SUSE OpenStack Cloud 8 python-ardana-packager 0.0.3-7.7.2 SUSE-SU-2020:3309-1
SUSE OpenStack Cloud 8 python-keystoneclient 3.13.1-3.3.2 SUSE-SU-2020:3309-1
SUSE OpenStack Cloud 8 python-keystonemiddleware 4.17.1-5.3.1 SUSE-SU-2020:3309-1
SUSE OpenStack Cloud 8 python-kombu 4.1.0-3.7.1 SUSE-SU-2020:3309-1
SUSE OpenStack Cloud 8 python-straight-plugin 1.5.0-1.3.1 SUSE-SU-2020:3309-1
SUSE OpenStack Cloud 8 python-urllib3 1.22-5.12.1 SUSE-SU-2020:3309-1
SUSE OpenStack Cloud 8 release-notes-suse-openstack-cloud 8.20200922-3.23.1 SUSE-SU-2020:3309-1
SUSE OpenStack Cloud 8 storm 1.2.3-3.6.1 SUSE-SU-2020:3309-1
SUSE OpenStack Cloud 8 venv-openstack-aodh 5.1.1~dev7-12.28.1 SUSE-SU-2020:3309-1
SUSE OpenStack Cloud 8 venv-openstack-barbican 5.0.2~dev3-12.29.1 SUSE-SU-2020:3309-1
SUSE OpenStack Cloud 8 venv-openstack-ceilometer 9.0.8~dev7-12.26.1 SUSE-SU-2020:3309-1
SUSE OpenStack Cloud 8 venv-openstack-cinder 11.2.3~dev29-14.30.1 SUSE-SU-2020:3309-1
SUSE OpenStack Cloud 8 venv-openstack-designate 5.0.3~dev7-12.27.1 SUSE-SU-2020:3309-1
SUSE OpenStack Cloud 8 venv-openstack-freezer 5.0.0.0~xrc2~dev2-10.24.1 SUSE-SU-2020:3309-1
SUSE OpenStack Cloud 8 venv-openstack-glance 15.0.3~dev3-12.27.1 SUSE-SU-2020:3309-1
SUSE OpenStack Cloud 8 venv-openstack-heat 9.0.8~dev22-12.29.1 SUSE-SU-2020:3309-1
SUSE OpenStack Cloud 8 venv-openstack-horizon 12.0.5~dev3-14.32.1 SUSE-SU-2020:3309-1
SUSE OpenStack Cloud 8 venv-openstack-ironic 9.1.8~dev8-12.29.1 SUSE-SU-2020:3309-1
SUSE OpenStack Cloud 8 venv-openstack-keystone 12.0.4~dev11-11.30.1 SUSE-SU-2020:3309-1
SUSE OpenStack Cloud 8 venv-openstack-magnum 5.0.2_5.0.2_5.0.2~dev31-11.28.1 SUSE-SU-2020:3309-1
SUSE OpenStack Cloud 8 venv-openstack-manila 5.1.1~dev5-12.33.1 SUSE-SU-2020:3309-1
SUSE OpenStack Cloud 8 venv-openstack-monasca 2.2.2~dev1-11.24.1 SUSE-SU-2020:3309-1
SUSE OpenStack Cloud 8 venv-openstack-monasca-ceilometer 1.5.1_1.5.1_1.5.1~dev3-8.24.1 SUSE-SU-2020:3309-1
SUSE OpenStack Cloud 8 venv-openstack-murano 4.0.2~dev2-12.24.1 SUSE-SU-2020:3309-1
SUSE OpenStack Cloud 8 venv-openstack-neutron 11.0.9~dev69-13.32.1 SUSE-SU-2020:3309-1
SUSE OpenStack Cloud 8 venv-openstack-nova 16.1.9~dev76-11.30.1 SUSE-SU-2020:3309-1
SUSE OpenStack Cloud 8 venv-openstack-octavia 1.0.6~dev3-12.29.1 SUSE-SU-2020:3309-1
SUSE OpenStack Cloud 8 venv-openstack-sahara 7.0.5~dev4-11.28.1 SUSE-SU-2020:3309-1
SUSE OpenStack Cloud 8 venv-openstack-swift 2.15.2_2.15.2_2.15.2~dev32-11.21.1 SUSE-SU-2020:3309-1
SUSE OpenStack Cloud 8 venv-openstack-trove 8.0.2~dev2-11.28.1 SUSE-SU-2020:3309-1
Show 1 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
SUSE HPE Helion OpenStack 8 ansible 2.9.14-3.15.1 SUSE-SU-2020:3309-1
SUSE HPE Helion OpenStack 8 ardana-ansible 8.0+git.1596735237.54109b1-3.77.1 SUSE-SU-2020:3309-1
SUSE HPE Helion OpenStack 8 ardana-cinder 8.0+git.1596129856.263f430-3.43.1 SUSE-SU-2020:3309-1
SUSE HPE Helion OpenStack 8 ardana-glance 8.0+git.1593631779.76fa9b7-3.24.1 SUSE-SU-2020:3309-1
SUSE HPE Helion OpenStack 8 ardana-mq 8.0+git.1593618123.678c32b-3.26.1 SUSE-SU-2020:3309-1
SUSE HPE Helion OpenStack 8 ardana-nova 8.0+git.1601298847.dd01585-3.42.1 SUSE-SU-2020:3309-1
SUSE HPE Helion OpenStack 8 ardana-osconfig 8.0+git.1595885113.93abcbc-3.49.1 SUSE-SU-2020:3309-1
SUSE HPE Helion OpenStack 8 documentation-hpe-helion-openstack-user +5 8.20201007-1.29.1 SUSE-SU-2020:3309-1
SUSE HPE Helion OpenStack 8 grafana 6.7.4-4.12.1 SUSE-SU-2020:3309-1
SUSE HPE Helion OpenStack 8 grafana-natel-discrete-panel 0.0.9-3.3.6 SUSE-SU-2020:3309-1
SUSE HPE Helion OpenStack 8 openstack-cinder 11.2.3~dev29-3.28.2 SUSE-SU-2020:3309-1
SUSE HPE Helion OpenStack 8 openstack-cinder-doc 11.2.3~dev29-3.28.1 SUSE-SU-2020:3309-1
SUSE HPE Helion OpenStack 8 openstack-monasca-installer 20190923_16.32-3.15.1 SUSE-SU-2020:3309-1
SUSE HPE Helion OpenStack 8 openstack-neutron 11.0.9~dev69-3.37.2 SUSE-SU-2020:3309-1
SUSE HPE Helion OpenStack 8 openstack-neutron-doc 11.0.9~dev69-3.37.1 SUSE-SU-2020:3309-1
SUSE HPE Helion OpenStack 8 openstack-nova 16.1.9~dev76-3.39.2 SUSE-SU-2020:3309-1
SUSE HPE Helion OpenStack 8 openstack-nova-doc 16.1.9~dev76-3.39.1 SUSE-SU-2020:3309-1
SUSE HPE Helion OpenStack 8 python-Django 1.11.29-3.19.2 SUSE-SU-2020:3309-1
SUSE HPE Helion OpenStack 8 python-Flask-Cors 3.0.3-3.3.1 SUSE-SU-2020:3309-1
SUSE HPE Helion OpenStack 8 python-Pillow 4.2.1-3.9.2 SUSE-SU-2020:3309-1
SUSE HPE Helion OpenStack 8 python-ardana-packager 0.0.3-7.7.2 SUSE-SU-2020:3309-1
SUSE HPE Helion OpenStack 8 python-keystoneclient 3.13.1-3.3.2 SUSE-SU-2020:3309-1
SUSE HPE Helion OpenStack 8 python-keystonemiddleware 4.17.1-5.3.1 SUSE-SU-2020:3309-1
SUSE HPE Helion OpenStack 8 python-kombu 4.1.0-3.7.1 SUSE-SU-2020:3309-1
SUSE HPE Helion OpenStack 8 python-urllib3 1.22-5.12.1 SUSE-SU-2020:3309-1
SUSE HPE Helion OpenStack 8 release-notes-hpe-helion-openstack 8.20200922-3.23.1 SUSE-SU-2020:3309-1
SUSE HPE Helion OpenStack 8 storm 1.2.3-3.6.1 SUSE-SU-2020:3309-1
SUSE HPE Helion OpenStack 8 venv-openstack-aodh 5.1.1~dev7-12.28.1 SUSE-SU-2020:3309-1
SUSE HPE Helion OpenStack 8 venv-openstack-barbican 5.0.2~dev3-12.29.1 SUSE-SU-2020:3309-1
SUSE HPE Helion OpenStack 8 venv-openstack-ceilometer 9.0.8~dev7-12.26.1 SUSE-SU-2020:3309-1
SUSE HPE Helion OpenStack 8 venv-openstack-cinder 11.2.3~dev29-14.30.1 SUSE-SU-2020:3309-1
SUSE HPE Helion OpenStack 8 venv-openstack-designate 5.0.3~dev7-12.27.1 SUSE-SU-2020:3309-1
SUSE HPE Helion OpenStack 8 venv-openstack-freezer 5.0.0.0~xrc2~dev2-10.24.1 SUSE-SU-2020:3309-1
SUSE HPE Helion OpenStack 8 venv-openstack-glance 15.0.3~dev3-12.27.1 SUSE-SU-2020:3309-1
SUSE HPE Helion OpenStack 8 venv-openstack-heat 9.0.8~dev22-12.29.1 SUSE-SU-2020:3309-1
SUSE HPE Helion OpenStack 8 venv-openstack-horizon-hpe 12.0.5~dev3-14.32.1 SUSE-SU-2020:3309-1
SUSE HPE Helion OpenStack 8 venv-openstack-ironic 9.1.8~dev8-12.29.1 SUSE-SU-2020:3309-1
SUSE HPE Helion OpenStack 8 venv-openstack-keystone 12.0.4~dev11-11.30.1 SUSE-SU-2020:3309-1
SUSE HPE Helion OpenStack 8 venv-openstack-magnum 5.0.2_5.0.2_5.0.2~dev31-11.28.1 SUSE-SU-2020:3309-1
SUSE HPE Helion OpenStack 8 venv-openstack-manila 5.1.1~dev5-12.33.1 SUSE-SU-2020:3309-1
SUSE HPE Helion OpenStack 8 venv-openstack-monasca 2.2.2~dev1-11.24.1 SUSE-SU-2020:3309-1
SUSE HPE Helion OpenStack 8 venv-openstack-monasca-ceilometer 1.5.1_1.5.1_1.5.1~dev3-8.24.1 SUSE-SU-2020:3309-1
SUSE HPE Helion OpenStack 8 venv-openstack-murano 4.0.2~dev2-12.24.1 SUSE-SU-2020:3309-1
SUSE HPE Helion OpenStack 8 venv-openstack-neutron 11.0.9~dev69-13.32.1 SUSE-SU-2020:3309-1
SUSE HPE Helion OpenStack 8 venv-openstack-nova 16.1.9~dev76-11.30.1 SUSE-SU-2020:3309-1
SUSE HPE Helion OpenStack 8 venv-openstack-octavia 1.0.6~dev3-12.29.1 SUSE-SU-2020:3309-1
SUSE HPE Helion OpenStack 8 venv-openstack-sahara 7.0.5~dev4-11.28.1 SUSE-SU-2020:3309-1
SUSE HPE Helion OpenStack 8 venv-openstack-swift 2.15.2_2.15.2_2.15.2~dev32-11.21.1 SUSE-SU-2020:3309-1
SUSE HPE Helion OpenStack 8 venv-openstack-trove 8.0.2~dev2-11.28.1 SUSE-SU-2020:3309-1
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed ansible-10 10.6.0-1.1 openSUSE-SU-2024:14536-1
openSUSE Tumbleweed ansible-11 11.11.0-1.1 openSUSE-SU-2025:15605-1
openSUSE Tumbleweed ansible-12 12.2.0-1.1 openSUSE-SU-2025:15753-1
openSUSE Tumbleweed ansible-13 13.7.0-1.1 openSUSE-SU-2026:10944-1
openSUSE Tumbleweed ansible-14 14.6.0-1.1 openSUSE-SU-2026:12447-1
openSUSE Tumbleweed ansible-9 9.8.0-1.1 openSUSE-SU-2024:14244-1
openSUSE Leap 15.3 ansible 2.9.21-bp153.2.3.1 openSUSE-SU-2022:0081-1

Affected packages

EcosystemPackageAffectedFixedRecord
PyPI ansible < 2.9.6 2.9.6 GHSA-r6h7-5pq2-j77h

Advisories 12

References