PYSEC-2020-2: Medium severity Ansible ansible-engine vulnerability

Q: Which systems are exposed to this issue?

Systems running ansible-engine 2.9.x earlier than 2.9.7 are affected when they use ansible-galaxy collection install to extract a collection .tar.gz archive.

Q: What does an attacker need to exploit the flaw?

An attacker needs to cause a vulnerable installation process to extract a crafted collection archive. The archive can contain a filename that causes directory creation outside the intended extraction path, allowing file overwrite on the system.

Published Apr 30, 2020

Updated

An archive traversal flaw was found in all ansible-engine versions 2.9.x prior to 2.9.7, when running ansible-galaxy collection install. When extracting a collection .tar.gz file, the directory is created without sanitizing the filename. An attacker could take advantage to overwrite any file within the system.

Affected Software

1 affected component

Ansible ansible-engine<2.9.7

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade ansible-engine to a version that resolves this vulnerability.
Fixed in 2.9.7

Event History

Apr 30, 2020

CVE Published

via OSV·05:15 PM

Data Sourced

via OSV·05:15 PM

DescriptionSeverity

Frequently Asked Questions

Which systems are exposed to this issue?

Systems running ansible-engine 2.9.x earlier than 2.9.7 are affected when they use ansible-galaxy collection install to extract a collection .tar.gz archive.

What does an attacker need to exploit the flaw?

An attacker needs to cause a vulnerable installation process to extract a crafted collection archive. The archive can contain a filename that causes directory creation outside the intended extraction path, allowing file overwrite on the system.

PYSEC-2020-2: Medium severity Ansible ansible-engine vulnerability

Affected Software

Remediation

Event History

Frequently Asked Questions

Which systems are exposed to this issue?

What does an attacker need to exploit the flaw?

Company

Resources

Contact

Frequently Asked Questions

Which systems are exposed to this issue?

What does an attacker need to exploit the flaw?