PT-2020-7631 · Ansible+1 · Ansible+2

Published 2014-04-02 · Updated 2022-05-17 · CVE-2014-2686

Positive Technologies (AI Summary)

CVSS v4.0

8.7

High

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions Ansible versions prior to 1.5.4

Description The issue arises from the mishandling of certain string evaluations.

Recommendations For versions prior to 1.5.4, update to version 1.5.4 or later to resolve the issue.

Fix

Weakness Enumeration

CWE-670

Related Identifiers

ALT-PU-2014-1425

CVE-2014-2686

GHSA-49M5-2838-Q2RV

PYSEC-2020-198

Affected Products

Alt Linux

Ansible

Ansible-Core

References · 14

• https://osv.dev/vulnerability/UBUNTU-CVE-2014-2686 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2014-2686 · Security Note
• https://osv.dev/vulnerability/CVE-2014-2686 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2014-2686 · Security Note
• https://ubuntu.com/security/CVE-2014-2686 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2020-198 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-49m5-2838-q2rv · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2014-2686 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2014-2686 · Vendor Advisory
• https://github.com/ansible/ansible · Note
• https://github.com/ansible/ansible/commit/998793fd0ab55705d57527a38cee5e83f535974c · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2020-198.yaml · Note
• https://groups.google.com/forum/#%21searchin/ansible-project/1.5.4/ansible-project/MUQxiKwSQDc/id6aVaawVboJ · Note
• https://groups.google.com/forum/#!searchin/ansible-project/1.5.4/ansible-project/MUQxiKwSQDc/id6aVaawVboJ · Note