ISOMAN

CVE

CVE-2018-10875

A flaw was found in ansible. ansible.cfg is read from the current working directory which can be altered to make it point to a plugin or a module path under the control of an attacker, thus allowing the attacker to execute arbitrary code.

Severity
HIGH
CVSS
7.8
Published
Modified
NVD detailAll CVEs

Linked Releases

DistributionReleaseStatusEvidence
Ubuntu18.04.6 amd64 desktopunknownsource
Ubuntu18.04.6 amd64 live-serverunknownsource
Ubuntu16.04.7 amd64 desktopunknownsource
Ubuntu16.04.6 i386 desktopunknownsource
Ubuntu16.04.7 amd64 serverunknownsource
Ubuntu16.04.6 i386 serverunknownsource

References

  1. http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00021.html
  2. http://www.securitytracker.com/id/1041396
  3. https://access.redhat.com/errata/RHBA-2018:3788
  4. https://access.redhat.com/errata/RHSA-2018:2150
  5. https://access.redhat.com/errata/RHSA-2018:2151
  6. https://access.redhat.com/errata/RHSA-2018:2152
  7. https://access.redhat.com/errata/RHSA-2018:2166
  8. https://access.redhat.com/errata/RHSA-2018:2321
  9. https://access.redhat.com/errata/RHSA-2018:2585
  10. https://access.redhat.com/errata/RHSA-2019:0054
  11. https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10875
  12. https://lists.debian.org/debian-lts-announce/2019/09/msg00016.html
  13. https://usn.ubuntu.com/4072-1/
  14. https://www.debian.org/security/2019/dsa-4396
  15. http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00021.html
  16. http://www.securitytracker.com/id/1041396
  17. https://access.redhat.com/errata/RHBA-2018:3788
  18. https://access.redhat.com/errata/RHSA-2018:2150
  19. https://access.redhat.com/errata/RHSA-2018:2151
  20. https://access.redhat.com/errata/RHSA-2018:2152