Login Request a demo
Critical severity · published Jul 19, 2018
CVE-2017-7481
Ansible before versions 2.3.1.0 and 2.4.0.0 fails to properly mark lookup-plugin results as unsafe
9.8
CVSS
4.8%
EPSS
No
On KEV
Description
Ansible before versions 2.3.1.0 and 2.4.0.0 fails to properly mark lookup-plugin results as unsafe. If an attacker could control the results of lookup() calls, they could inject Unicode strings to be parsed by the jinja2 templating system, resulting in code execution. By default, the jinja2 templating language is now marked as 'unsafe' and is not evaluated.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)4.8% · higher than 92% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AE
Ansible Engine · Redhat
before 2.3.1.0; 2.3.2.0 before 2.4.0.0 · source: NVD
DL
Debian Linux · Debian
9.0 · source: NVD
GS
Gluster Storage · Redhat
3.2 · source: NVD
OC
Openshift Container Platform · Redhat
3.3; 3.4; 3.5 · source: NVD
OP
Openstack · Redhat
10; 11 · source: NVD
SC
Storage Console · Redhat
2.0 · source: NVD
UL
Ubuntu Linux · Canonical
16.04; 18.04; 19.04 · source: NVD
VI
Virtualization · Redhat
4.1 · source: NVD
VM
Virtualization Manager · Redhat
4.1 · source: NVD
Affected product
UL
Ubuntu Linux
Canonical
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2017-7481
CVE.org
https://www.cve.org/CVERecord?id=CVE-2017-7481
Third Party Advisory
http://www.securityfocus.com/bid/98492
Vendor Advisory
https://access.redhat.com/errata/RHSA-2017:1244
Vendor Advisory
https://access.redhat.com/errata/RHSA-2017:1334
Vendor Advisory
https://access.redhat.com/errata/RHSA-2017:1476
Vendor Advisory
https://access.redhat.com/errata/RHSA-2017:1499
Vendor Advisory
https://access.redhat.com/errata/RHSA-2017:1599
More from Ubuntu Linux
9.8
CVE-2020-11651
SaltStack Salt Authentication Bypass Vulnerability
9.8
CVE-2020-7247
OpenSMTPD Remote Code Execution Vulnerability
9.8
CVE-2019-11043
Underflow in PHP-FPM can lead to RCE
9.8
CVE-2019-16928
Exim Out-of-bounds Write Vulnerability
9.8
CVE-2019-10149
Exim Mail Transfer Agent (MTA) Improper Input Validation