Vulnerability Details CVE-2016-3096
The create_script function in the lxc_container module in Ansible before 1.9.6-1 and 2.x before 2.0.2.0 allows local users to write to arbitrary files or gain privileges via a symlink attack on (1) /opt/.lxc-attach-script, (2) the archived container in the archive_path directory, or the (3) lxc-attach-script.log or (4) lxc-attach-script.err files in the temporary directory.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 26.5%
CVSS Severity
CVSS v3 Score 7.8
CVSS v2 Score 7.2
References
- http://lists.fedoraproject.org/pipermail/package-announce/2016-April/183103.html
- http://lists.fedoraproject.org/pipermail/package-announce/2016-April/183132.html
- http://lists.fedoraproject.org/pipermail/package-announce/2016-April/183252.html
- http://lists.fedoraproject.org/pipermail/package-announce/2016-April/183274.html
- http://lists.fedoraproject.org/pipermail/package-announce/2016-May/184175.html
- https://bugzilla.redhat.com/show_bug.cgi?id=1322925
- https://github.com/ansible/ansible-modules-extras/pull/1941
- https://github.com/ansible/ansible-modules-extras/pull/1941/commits/8c6fe646ee79f5e55361b885b7efed5bec72d4a4
- https://github.com/ansible/ansible/blob/v1.9.6-1/CHANGELOG.md#196-dancing-in-the-street---tbd
- https://github.com/ansible/ansible/blob/v2.0.2.0-1/CHANGELOG.md#202-over-the-hills-and-far-away
- https://groups.google.com/forum/#%21topic/ansible-announce/E80HLZilTU0
- https://groups.google.com/forum/#%21topic/ansible-announce/tqiZbcWxYig
- https://security.gentoo.org/glsa/201607-14
- http://lists.fedoraproject.org/pipermail/package-announce/2016-April/183103.html
- http://lists.fedoraproject.org/pipermail/package-announce/2016-April/183132.html
- http://lists.fedoraproject.org/pipermail/package-announce/2016-April/183252.html
- http://lists.fedoraproject.org/pipermail/package-announce/2016-April/183274.html
- http://lists.fedoraproject.org/pipermail/package-announce/2016-May/184175.html
- https://bugzilla.redhat.com/show_bug.cgi?id=1322925
- https://github.com/ansible/ansible-modules-extras/pull/1941
- https://github.com/ansible/ansible-modules-extras/pull/1941/commits/8c6fe646ee79f5e55361b885b7efed5bec72d4a4
- https://github.com/ansible/ansible/blob/v1.9.6-1/CHANGELOG.md#196-dancing-in-the-street---tbd
- https://github.com/ansible/ansible/blob/v2.0.2.0-1/CHANGELOG.md#202-over-the-hills-and-far-away
- https://groups.google.com/forum/#%21topic/ansible-announce/E80HLZilTU0
- https://groups.google.com/forum/#%21topic/ansible-announce/tqiZbcWxYig
- https://security.gentoo.org/glsa/201607-14
Products affected by CVE-2016-3096
-
cpe:2.3:a:redhat:ansible:0.0.1
-
cpe:2.3:a:redhat:ansible:0.0.2
-
cpe:2.3:a:redhat:ansible:0.01
-
cpe:2.3:a:redhat:ansible:0.3
-
cpe:2.3:a:redhat:ansible:0.3.1
-
cpe:2.3:a:redhat:ansible:0.4
-
cpe:2.3:a:redhat:ansible:0.4.1
-
cpe:2.3:a:redhat:ansible:0.5
-
cpe:2.3:a:redhat:ansible:0.6
-
cpe:2.3:a:redhat:ansible:0.7
-
cpe:2.3:a:redhat:ansible:0.7.1
-
cpe:2.3:a:redhat:ansible:0.7.2
-
cpe:2.3:a:redhat:ansible:0.8
-
cpe:2.3:a:redhat:ansible:0.9
-
cpe:2.3:a:redhat:ansible:1.0
-
cpe:2.3:a:redhat:ansible:1.1
-
cpe:2.3:a:redhat:ansible:1.2
-
cpe:2.3:a:redhat:ansible:1.2.1
-
cpe:2.3:a:redhat:ansible:1.2.2
-
cpe:2.3:a:redhat:ansible:1.2.3
-
cpe:2.3:a:redhat:ansible:1.3.0
-
cpe:2.3:a:redhat:ansible:1.3.1
-
cpe:2.3:a:redhat:ansible:1.3.2
-
cpe:2.3:a:redhat:ansible:1.3.3
-
cpe:2.3:a:redhat:ansible:1.3.4
-
cpe:2.3:a:redhat:ansible:1.4.0
-
cpe:2.3:a:redhat:ansible:1.4.1
-
cpe:2.3:a:redhat:ansible:1.4.2
-
cpe:2.3:a:redhat:ansible:1.4.3
-
cpe:2.3:a:redhat:ansible:1.4.4
-
cpe:2.3:a:redhat:ansible:1.4.5
-
cpe:2.3:a:redhat:ansible:1.5.0
-
cpe:2.3:a:redhat:ansible:1.5.1
-
cpe:2.3:a:redhat:ansible:1.5.2
-
cpe:2.3:a:redhat:ansible:1.5.3
-
cpe:2.3:a:redhat:ansible:1.5.4
-
cpe:2.3:a:redhat:ansible:1.5.5
-
cpe:2.3:a:redhat:ansible:1.6.0
-
cpe:2.3:a:redhat:ansible:1.6.1
-
cpe:2.3:a:redhat:ansible:1.6.10
-
cpe:2.3:a:redhat:ansible:1.6.2
-
cpe:2.3:a:redhat:ansible:1.6.3
-
cpe:2.3:a:redhat:ansible:1.6.4
-
cpe:2.3:a:redhat:ansible:1.6.5
-
cpe:2.3:a:redhat:ansible:1.6.6
-
cpe:2.3:a:redhat:ansible:1.6.7
-
cpe:2.3:a:redhat:ansible:1.6.8
-
cpe:2.3:a:redhat:ansible:1.6.9
-
cpe:2.3:a:redhat:ansible:1.7.0
-
cpe:2.3:a:redhat:ansible:1.7.1
-
cpe:2.3:a:redhat:ansible:1.7.2
-
cpe:2.3:a:redhat:ansible:1.8.0
-
cpe:2.3:a:redhat:ansible:1.8.1
-
cpe:2.3:a:redhat:ansible:1.8.2
-
cpe:2.3:a:redhat:ansible:1.8.3
-
cpe:2.3:a:redhat:ansible:1.8.4
-
cpe:2.3:a:redhat:ansible:1.9.0-0.1
-
cpe:2.3:a:redhat:ansible:1.9.0-0.2
-
cpe:2.3:a:redhat:ansible:1.9.0-1
-
cpe:2.3:a:redhat:ansible:1.9.0-2
-
cpe:2.3:a:redhat:ansible:1.9.0.1-1
-
cpe:2.3:a:redhat:ansible:1.9.1
-
cpe:2.3:a:redhat:ansible:1.9.1-0.1
-
cpe:2.3:a:redhat:ansible:1.9.1-0.2
-
cpe:2.3:a:redhat:ansible:1.9.1-0.3
-
cpe:2.3:a:redhat:ansible:1.9.1-0.4
-
cpe:2.3:a:redhat:ansible:1.9.1-1
-
cpe:2.3:a:redhat:ansible:1.9.2-0.1
-
cpe:2.3:a:redhat:ansible:1.9.2-0.2
-
cpe:2.3:a:redhat:ansible:1.9.2-1
-
cpe:2.3:a:redhat:ansible:1.9.3-0.1
-
cpe:2.3:a:redhat:ansible:1.9.3-0.2
-
cpe:2.3:a:redhat:ansible:1.9.3-0.3
-
cpe:2.3:a:redhat:ansible:1.9.3-1
-
cpe:2.3:a:redhat:ansible:1.9.4-0.1
-
cpe:2.3:a:redhat:ansible:1.9.4-0.2
-
cpe:2.3:a:redhat:ansible:1.9.4-0.3
-
cpe:2.3:a:redhat:ansible:1.9.4-1
-
cpe:2.3:a:redhat:ansible:1.9.5-0.1
-
cpe:2.3:a:redhat:ansible:1.9.5-1
-
cpe:2.3:a:redhat:ansible:1.9.6
-
cpe:2.3:a:redhat:ansible:2.0
-
cpe:2.3:a:redhat:ansible:2.0.1
-
cpe:2.3:o:fedoraproject:fedora:22
-
cpe:2.3:o:fedoraproject:fedora:23
-
cpe:2.3:o:fedoraproject:fedora:24