CVE-2015-6240

Опубликовано: 07 июн. 2017

Источник: nvd

CVSS3: 7.8

CVSS2: 7.2

EPSS Низкий

Описание

The chroot, jail, and zone connection plugins in ansible before 1.9.2 allow local users to escape a restricted environment via a symlink attack.

Ссылки

http://www.openwall.com/lists/oss-security/2015/08/17/10
Mailing List
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1243468
Issue Tracking
Third Party Advisory
https://github.com/ansible/ansible/commit/952166f48eb0f5797b75b160fd156bbe1e8fc647
Patch
https://github.com/ansible/ansible/commit/ca2f2c4ebd7b5e097eab0a710f79c1f63badf95b
Patch
https://lists.debian.org/debian-lts-announce/2019/09/msg00016.html
http://www.openwall.com/lists/oss-security/2015/08/17/10
Mailing List
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1243468
Issue Tracking
Third Party Advisory
https://github.com/ansible/ansible/commit/952166f48eb0f5797b75b160fd156bbe1e8fc647
Patch
https://github.com/ansible/ansible/commit/ca2f2c4ebd7b5e097eab0a710f79c1f63badf95b
Patch
https://lists.debian.org/debian-lts-announce/2019/09/msg00016.html

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:redhat:ansible:*:*:*:*:*:*:*:*

Версия до 1.9.1 (включая)

EPSS

Процентиль: 37%

0.00447

Низкий

7.8 High

CVSS3

7.2 High

CVSS2

Дефекты

CWE-59

Связанные уязвимости

CVE-2015-6240

CVSS3: 7.8

ubuntu

около 9 лет назад

The chroot, jail, and zone connection plugins in ansible before 1.9.2 allow local users to escape a restricted environment via a symlink attack.

CVE-2015-6240

redhat

около 11 лет назад

The chroot, jail, and zone connection plugins in ansible before 1.9.2 allow local users to escape a restricted environment via a symlink attack.

CVE-2015-6240

CVSS3: 7.8

debian

около 9 лет назад

The chroot, jail, and zone connection plugins in ansible before 1.9.2 ...

GHSA-wwwh-47wp-m522

CVSS3: 7.8

github

больше 4 лет назад

Ansible Sandbox Escape via Symlink Attack

EPSS

Процентиль: 37%

0.00447

Низкий

7.8 High

CVSS3

7.2 High

CVSS2

Дефекты

CWE-59