CVE-2014-4657
Fixed in a distro release EPSS 4%
The safe_eval function in Ansible before 1.5.4 does not properly restrict the code subset, which allows remote attackers to execute arbitrary code via crafted instructions.
Products: redhat ansible
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| PyPI | ansible | 1.5.4 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | ansible | 1.5.5+dfsg-1 |
| Debian 13 | ansible | 1.5.5+dfsg-1 |
| Debian 14 | ansible | 1.5.5+dfsg-1 |