CVE-2016-8628
Fixed in a distro release EPSS 3%CVSS 7.6
Ansible before version 2.2.0 fails to properly sanitize fact variables sent from the Ansible controller. An attacker with the ability to create special variables on the controller could execute arbitrary commands on Ansible clients as the user Ansible runs as.
Products: Red Hat Ansible
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| PyPI | ansible | 2.2.0.0 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | ansible | 2.2.0.0-1 |
| Debian 13 | ansible | 2.2.0.0-1 |
| Debian 14 | ansible | 2.2.0.0-1 |
| Red Hat openshift 3.2 | ansible | 0:2.2.0.0-1.el7 |
| Red Hat openshift 3.2 | atomic-openshift-utils | 0:3.2.42-1.git.0.6b09be9.el7 |
| Red Hat openshift 3.2 | openshift-ansible | 0:3.2.42-1.git.0.6b09be9.el7 |
| Red Hat openshift 3.2 | openshift-ansible-docs | 0:3.2.42-1.git.0.6b09be9.el7 |
| Red Hat openshift 3.2 | openshift-ansible-filter-plugins | 0:3.2.42-1.git.0.6b09be9.el7 |
| Red Hat openshift 3.2 | openshift-ansible-lookup-plugins | 0:3.2.42-1.git.0.6b09be9.el7 |
| Red Hat openshift 3.2 | openshift-ansible-playbooks | 0:3.2.42-1.git.0.6b09be9.el7 |
| Red Hat openshift 3.2 | openshift-ansible-roles | 0:3.2.42-1.git.0.6b09be9.el7 |
| Red Hat openshift 3.3 | ansible | 0:2.2.0.0-1.el7 |
| Red Hat openshift 3.3 | atomic-openshift-utils | 0:3.3.50-1.git.0.5bdbeaa.el7 |
| Red Hat openshift 3.3 | openshift-ansible | 0:3.3.50-1.git.0.5bdbeaa.el7 |
| Red Hat openshift 3.3 | openshift-ansible-callback-plugins | 0:3.3.50-1.git.0.5bdbeaa.el7 |
| Red Hat openshift 3.3 | openshift-ansible-docs | 0:3.3.50-1.git.0.5bdbeaa.el7 |
| Red Hat openshift 3.3 | openshift-ansible-filter-plugins | 0:3.3.50-1.git.0.5bdbeaa.el7 |
| Red Hat openshift 3.3 | openshift-ansible-lookup-plugins | 0:3.3.50-1.git.0.5bdbeaa.el7 |
| Red Hat openshift 3.3 | openshift-ansible-playbooks | 0:3.3.50-1.git.0.5bdbeaa.el7 |
| Red Hat openshift 3.3 | openshift-ansible-roles | 0:3.3.50-1.git.0.5bdbeaa.el7 |
| SUSE HPE Helion OpenStack 8 | ansible | 2.9.14-3.15.1 |
| SUSE HPE Helion OpenStack 8 | ardana-ansible | 8.0+git.1596735237.54109b1-3.77.1 |
| SUSE HPE Helion OpenStack 8 | ardana-cinder | 8.0+git.1596129856.263f430-3.43.1 |
| SUSE HPE Helion OpenStack 8 | ardana-glance | 8.0+git.1593631779.76fa9b7-3.24.1 |
| SUSE HPE Helion OpenStack 8 | ardana-mq | 8.0+git.1593618123.678c32b-3.26.1 |
| SUSE HPE Helion OpenStack 8 | ardana-nova | 8.0+git.1601298847.dd01585-3.42.1 |
| SUSE HPE Helion OpenStack 8 | ardana-osconfig | 8.0+git.1595885113.93abcbc-3.49.1 |
| SUSE HPE Helion OpenStack 8 | documentation-hpe-helion-openstack-installation | 8.20201007-1.29.1 |
| SUSE HPE Helion OpenStack 8 | documentation-hpe-helion-openstack-operations | 8.20201007-1.29.1 |
| SUSE HPE Helion OpenStack 8 | documentation-hpe-helion-openstack-opsconsole | 8.20201007-1.29.1 |
| SUSE HPE Helion OpenStack 8 | documentation-hpe-helion-openstack-planning | 8.20201007-1.29.1 |
| SUSE HPE Helion OpenStack 8 | documentation-hpe-helion-openstack-security | 8.20201007-1.29.1 |
| SUSE HPE Helion OpenStack 8 | documentation-hpe-helion-openstack-user | 8.20201007-1.29.1 |
| SUSE HPE Helion OpenStack 8 | grafana | 6.7.4-4.12.1 |
| SUSE HPE Helion OpenStack 8 | grafana-natel-discrete-panel | 0.0.9-3.3.6 |
| SUSE HPE Helion OpenStack 8 | openstack-cinder | 11.2.3~dev29-3.28.2 |
| SUSE HPE Helion OpenStack 8 | openstack-cinder-doc | 11.2.3~dev29-3.28.1 |
| SUSE HPE Helion OpenStack 8 | openstack-monasca-installer | 20190923_16.32-3.15.1 |
| SUSE HPE Helion OpenStack 8 | openstack-neutron | 11.0.9~dev69-3.37.2 |
| SUSE HPE Helion OpenStack 8 | openstack-neutron-doc | 11.0.9~dev69-3.37.1 |
| SUSE HPE Helion OpenStack 8 | openstack-nova | 16.1.9~dev76-3.39.2 |
| SUSE HPE Helion OpenStack 8 | openstack-nova-doc | 16.1.9~dev76-3.39.1 |
| SUSE HPE Helion OpenStack 8 | python-Django | 1.11.29-3.19.2 |
| SUSE HPE Helion OpenStack 8 | python-Flask-Cors | 3.0.3-3.3.1 |
| SUSE HPE Helion OpenStack 8 | python-Pillow | 4.2.1-3.9.2 |
| SUSE HPE Helion OpenStack 8 | python-ardana-packager | 0.0.3-7.7.2 |
| SUSE HPE Helion OpenStack 8 | python-keystoneclient | 3.13.1-3.3.2 |
| SUSE HPE Helion OpenStack 8 | python-keystonemiddleware | 4.17.1-5.3.1 |
| SUSE HPE Helion OpenStack 8 | python-kombu | 4.1.0-3.7.1 |
| SUSE HPE Helion OpenStack 8 | python-urllib3 | 1.22-5.12.1 |
| SUSE HPE Helion OpenStack 8 | release-notes-hpe-helion-openstack | 8.20200922-3.23.1 |
| SUSE HPE Helion OpenStack 8 | storm | 1.2.3-3.6.1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-aodh | 5.1.1~dev7-12.28.1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-barbican | 5.0.2~dev3-12.29.1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-ceilometer | 9.0.8~dev7-12.26.1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-cinder | 11.2.3~dev29-14.30.1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-designate | 5.0.3~dev7-12.27.1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-freezer | 5.0.0.0~xrc2~dev2-10.24.1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-glance | 15.0.3~dev3-12.27.1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-heat | 9.0.8~dev22-12.29.1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-horizon-hpe | 12.0.5~dev3-14.32.1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-ironic | 9.1.8~dev8-12.29.1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-keystone | 12.0.4~dev11-11.30.1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-magnum | 5.0.2_5.0.2_5.0.2~dev31-11.28.1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-manila | 5.1.1~dev5-12.33.1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-monasca | 2.2.2~dev1-11.24.1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-monasca-ceilometer | 1.5.1_1.5.1_1.5.1~dev3-8.24.1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-murano | 4.0.2~dev2-12.24.1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-neutron | 11.0.9~dev69-13.32.1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-nova | 16.1.9~dev76-11.30.1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-octavia | 1.0.6~dev3-12.29.1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-sahara | 7.0.5~dev4-11.28.1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-swift | 2.15.2_2.15.2_2.15.2~dev32-11.21.1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-trove | 8.0.2~dev2-11.28.1 |
| SUSE Linux Enterprise Module for Package Hub 15 SP5 | golang-github-prometheus-promu | 0.14.0-150000.3.18.2 |
| SUSE Manager Client Tools 15 | POS_Image-Graphical7 | 0.1.1710765237.46af599-150000.1.21.2 |
| SUSE Manager Client Tools 15 | POS_Image-JeOS7 | 0.1.1710765237.46af599-150000.1.21.2 |
| SUSE Manager Client Tools 15 | ansible | 2.9.27-150000.1.17.2 |
| SUSE Manager Client Tools 15 | dracut-saltboot | 0.1.1710765237.46af599-150000.1.53.2 |
| SUSE Manager Client Tools 15 | grafana | 9.5.18-150000.1.63.2 |
| SUSE Manager Client Tools 15 | mgr-daemon | 4.3.9-150000.1.47.2 |
| SUSE Manager Client Tools 15 | spacecmd | 4.3.27-150000.3.116.2 |
| SUSE Manager Client Tools 15 | spacewalk-client-tools | 4.3.19-150000.3.89.2 |
| SUSE Manager Client Tools 15 | spacewalk-koan | 4.3.6-150000.3.33.2 |
| SUSE Manager Client Tools 15 | uyuni-common-libs | 4.3.10-150000.1.39.2 |
| SUSE Manager Client Tools 15 | uyuni-proxy-systemd-services | 4.3.12-150000.1.21.2 |
| SUSE Manager Client Tools for SLE Micro 5 | dracut-saltboot | 0.1.1710765237.46af599-150000.1.53.2 |
| SUSE Manager Client Tools for SLE Micro 5 | uyuni-proxy-systemd-services | 4.3.12-150000.1.21.2 |
| SUSE Manager Proxy Module 4.3 | ansible | 2.9.27-150000.1.17.2 |
| SUSE Manager Proxy Module 4.3 | uyuni-proxy-systemd-services | 4.3.12-150000.1.21.2 |
| SUSE OpenStack Cloud 8 | ansible | 2.9.14-3.15.1 |
| SUSE OpenStack Cloud 8 | ardana-ansible | 8.0+git.1596735237.54109b1-3.77.1 |
| SUSE OpenStack Cloud 8 | ardana-cinder | 8.0+git.1596129856.263f430-3.43.1 |
| SUSE OpenStack Cloud 8 | ardana-glance | 8.0+git.1593631779.76fa9b7-3.24.1 |
| SUSE OpenStack Cloud 8 | ardana-mq | 8.0+git.1593618123.678c32b-3.26.1 |
| SUSE OpenStack Cloud 8 | ardana-nova | 8.0+git.1601298847.dd01585-3.42.1 |
| SUSE OpenStack Cloud 8 | ardana-osconfig | 8.0+git.1595885113.93abcbc-3.49.1 |
| SUSE OpenStack Cloud 8 | documentation-suse-openstack-cloud-installation | 8.20201007-1.29.1 |
| SUSE OpenStack Cloud 8 | documentation-suse-openstack-cloud-operations | 8.20201007-1.29.1 |
| SUSE OpenStack Cloud 8 | documentation-suse-openstack-cloud-opsconsole | 8.20201007-1.29.1 |
| SUSE OpenStack Cloud 8 | documentation-suse-openstack-cloud-planning | 8.20201007-1.29.1 |
| SUSE OpenStack Cloud 8 | documentation-suse-openstack-cloud-security | 8.20201007-1.29.1 |
| SUSE OpenStack Cloud 8 | documentation-suse-openstack-cloud-supplement | 8.20201007-1.29.1 |
| SUSE OpenStack Cloud 8 | documentation-suse-openstack-cloud-upstream-admin | 8.20201007-1.29.1 |
| SUSE OpenStack Cloud 8 | documentation-suse-openstack-cloud-upstream-user | 8.20201007-1.29.1 |
| SUSE OpenStack Cloud 8 | documentation-suse-openstack-cloud-user | 8.20201007-1.29.1 |
| SUSE OpenStack Cloud 8 | grafana | 6.7.4-4.12.1 |
| SUSE OpenStack Cloud 8 | grafana-natel-discrete-panel | 0.0.9-3.3.6 |
| SUSE OpenStack Cloud 8 | openstack-cinder | 11.2.3~dev29-3.28.2 |
| SUSE OpenStack Cloud 8 | openstack-cinder-doc | 11.2.3~dev29-3.28.1 |
| SUSE OpenStack Cloud 8 | openstack-monasca-installer | 20190923_16.32-3.15.1 |
| SUSE OpenStack Cloud 8 | openstack-neutron | 11.0.9~dev69-3.37.2 |
| SUSE OpenStack Cloud 8 | openstack-neutron-doc | 11.0.9~dev69-3.37.1 |
| SUSE OpenStack Cloud 8 | openstack-nova | 16.1.9~dev76-3.39.2 |
| SUSE OpenStack Cloud 8 | openstack-nova-doc | 16.1.9~dev76-3.39.1 |
| SUSE OpenStack Cloud 8 | python-Django | 1.11.29-3.19.2 |
| SUSE OpenStack Cloud 8 | python-Flask-Cors | 3.0.3-3.3.1 |
| SUSE OpenStack Cloud 8 | python-Pillow | 4.2.1-3.9.2 |
| SUSE OpenStack Cloud 8 | python-ardana-packager | 0.0.3-7.7.2 |
| SUSE OpenStack Cloud 8 | python-keystoneclient | 3.13.1-3.3.2 |
| SUSE OpenStack Cloud 8 | python-keystonemiddleware | 4.17.1-5.3.1 |
| SUSE OpenStack Cloud 8 | python-kombu | 4.1.0-3.7.1 |
| SUSE OpenStack Cloud 8 | python-straight-plugin | 1.5.0-1.3.1 |
| SUSE OpenStack Cloud 8 | python-urllib3 | 1.22-5.12.1 |
| SUSE OpenStack Cloud 8 | release-notes-suse-openstack-cloud | 8.20200922-3.23.1 |
| SUSE OpenStack Cloud 8 | storm | 1.2.3-3.6.1 |
| SUSE OpenStack Cloud 8 | venv-openstack-aodh | 5.1.1~dev7-12.28.1 |
| SUSE OpenStack Cloud 8 | venv-openstack-barbican | 5.0.2~dev3-12.29.1 |
| SUSE OpenStack Cloud 8 | venv-openstack-ceilometer | 9.0.8~dev7-12.26.1 |
| SUSE OpenStack Cloud 8 | venv-openstack-cinder | 11.2.3~dev29-14.30.1 |
| SUSE OpenStack Cloud 8 | venv-openstack-designate | 5.0.3~dev7-12.27.1 |
| SUSE OpenStack Cloud 8 | venv-openstack-freezer | 5.0.0.0~xrc2~dev2-10.24.1 |
| SUSE OpenStack Cloud 8 | venv-openstack-glance | 15.0.3~dev3-12.27.1 |
| SUSE OpenStack Cloud 8 | venv-openstack-heat | 9.0.8~dev22-12.29.1 |
| SUSE OpenStack Cloud 8 | venv-openstack-horizon | 12.0.5~dev3-14.32.1 |
| SUSE OpenStack Cloud 8 | venv-openstack-ironic | 9.1.8~dev8-12.29.1 |
| SUSE OpenStack Cloud 8 | venv-openstack-keystone | 12.0.4~dev11-11.30.1 |
| SUSE OpenStack Cloud 8 | venv-openstack-magnum | 5.0.2_5.0.2_5.0.2~dev31-11.28.1 |
| SUSE OpenStack Cloud 8 | venv-openstack-manila | 5.1.1~dev5-12.33.1 |
| SUSE OpenStack Cloud 8 | venv-openstack-monasca | 2.2.2~dev1-11.24.1 |
| SUSE OpenStack Cloud 8 | venv-openstack-monasca-ceilometer | 1.5.1_1.5.1_1.5.1~dev3-8.24.1 |
| SUSE OpenStack Cloud 8 | venv-openstack-murano | 4.0.2~dev2-12.24.1 |
| SUSE OpenStack Cloud 8 | venv-openstack-neutron | 11.0.9~dev69-13.32.1 |
| SUSE OpenStack Cloud 8 | venv-openstack-nova | 16.1.9~dev76-11.30.1 |
| SUSE OpenStack Cloud 8 | venv-openstack-octavia | 1.0.6~dev3-12.29.1 |
| SUSE OpenStack Cloud 8 | venv-openstack-sahara | 7.0.5~dev4-11.28.1 |
| SUSE OpenStack Cloud 8 | venv-openstack-swift | 2.15.2_2.15.2_2.15.2~dev32-11.21.1 |
| SUSE OpenStack Cloud 8 | venv-openstack-trove | 8.0.2~dev2-11.28.1 |
| SUSE OpenStack Cloud Crowbar 8 | ansible | 2.9.14-3.15.1 |
| SUSE OpenStack Cloud Crowbar 8 | crowbar-core | 5.0+git.1600432272.b3ad722f0-3.44.1 |
| SUSE OpenStack Cloud Crowbar 8 | crowbar-openstack | 5.0+git.1599037158.5c4d07480-4.43.1 |
| SUSE OpenStack Cloud Crowbar 8 | documentation-suse-openstack-cloud-deployment | 8.20201007-1.29.1 |
| SUSE OpenStack Cloud Crowbar 8 | documentation-suse-openstack-cloud-supplement | 8.20201007-1.29.1 |
| SUSE OpenStack Cloud Crowbar 8 | documentation-suse-openstack-cloud-upstream-admin | 8.20201007-1.29.1 |
| SUSE OpenStack Cloud Crowbar 8 | documentation-suse-openstack-cloud-upstream-user | 8.20201007-1.29.1 |
| SUSE OpenStack Cloud Crowbar 8 | grafana | 6.7.4-4.12.1 |
| SUSE OpenStack Cloud Crowbar 8 | grafana-natel-discrete-panel | 0.0.9-3.3.6 |
| SUSE OpenStack Cloud Crowbar 8 | openstack-cinder | 11.2.3~dev29-3.28.2 |
| SUSE OpenStack Cloud Crowbar 8 | openstack-cinder-doc | 11.2.3~dev29-3.28.1 |
| SUSE OpenStack Cloud Crowbar 8 | openstack-monasca-installer | 20190923_16.32-3.15.1 |
| SUSE OpenStack Cloud Crowbar 8 | openstack-neutron | 11.0.9~dev69-3.37.2 |
| SUSE OpenStack Cloud Crowbar 8 | openstack-neutron-doc | 11.0.9~dev69-3.37.1 |
| SUSE OpenStack Cloud Crowbar 8 | openstack-nova | 16.1.9~dev76-3.39.2 |
| SUSE OpenStack Cloud Crowbar 8 | openstack-nova-doc | 16.1.9~dev76-3.39.1 |
| SUSE OpenStack Cloud Crowbar 8 | python-Django | 1.11.29-3.19.2 |
| SUSE OpenStack Cloud Crowbar 8 | python-Pillow | 4.2.1-3.9.2 |
| SUSE OpenStack Cloud Crowbar 8 | python-keystoneclient | 3.13.1-3.3.2 |
| SUSE OpenStack Cloud Crowbar 8 | python-keystonemiddleware | 4.17.1-5.3.1 |
| SUSE OpenStack Cloud Crowbar 8 | python-kombu | 4.1.0-3.7.1 |
| SUSE OpenStack Cloud Crowbar 8 | python-straight-plugin | 1.5.0-1.3.1 |
| SUSE OpenStack Cloud Crowbar 8 | python-urllib3 | 1.22-5.12.1 |
| SUSE OpenStack Cloud Crowbar 8 | release-notes-suse-openstack-cloud | 8.20200922-3.23.1 |
| SUSE OpenStack Cloud Crowbar 8 | rubygem-crowbar-client | 3.9.3-1.1 |
| SUSE OpenStack Cloud Crowbar 8 | storm | 1.2.3-3.6.1 |
| SUSE Package Hub 12 | ansible | 2.4.1.0-6.1 |
| Ubuntu 16.04 LTS | ansible | 2.0.0.2-2ubuntu1.1 |
| openSUSE Leap 15.5 | POS_Image-Graphical7 | 0.1.1710765237.46af599-150000.1.21.2 |
| openSUSE Leap 15.5 | POS_Image-JeOS7 | 0.1.1710765237.46af599-150000.1.21.2 |
| openSUSE Leap 15.5 | ansible | 2.9.27-150000.1.17.2 |
| openSUSE Leap 15.5 | dracut-saltboot | 0.1.1710765237.46af599-150000.1.53.2 |
| openSUSE Leap 15.5 | golang-github-prometheus-promu | 0.14.0-150000.3.18.2 |
| openSUSE Leap 15.5 | spacecmd | 4.3.27-150000.3.116.2 |