Test ID:	1.3.6.1.4.1.25623.1.0.844105
Category:	Ubuntu Local Security Checks
Title:	Ubuntu: Security Advisory (USN-4072-1)
Summary:	The remote host is missing an update for the 'ansible' package(s) announced via the USN-4072-1 advisory.
Description:	Summary: The remote host is missing an update for the 'ansible' package(s) announced via the USN-4072-1 advisory. Vulnerability Insight: It was discovered that Ansible failed to properly handle sensitive information. A local attacker could use those vulnerabilities to extract them. (CVE-2017-7481) (CVE-2018-10855) (CVE-2018-16837) (CVE-2018-16876) (CVE-2019-10156) It was discovered that Ansible could load configuration files from the current working directory containing crafted commands. An attacker could run arbitrary code as result. (CVE-2018-10874) (CVE-2018-10875) It was discovered that Ansible fetch module had a path traversal vulnerability. A local attacker could copy and overwrite files outside of the specified destination. (CVE-2019-3828) Affected Software/OS: 'ansible' package(s) on Ubuntu 16.04, Ubuntu 18.04, Ubuntu 19.04. Solution: Please install the updated package(s). CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2017-7481 BugTraq ID: 98492 http://www.securityfocus.com/bid/98492 https://lists.debian.org/debian-lts-announce/2021/01/msg00023.html RedHat Security Advisories: RHSA-2017:1244 https://access.redhat.com/errata/RHSA-2017:1244 RedHat Security Advisories: RHSA-2017:1334 https://access.redhat.com/errata/RHSA-2017:1334 RedHat Security Advisories: RHSA-2017:1476 https://access.redhat.com/errata/RHSA-2017:1476 RedHat Security Advisories: RHSA-2017:1499 https://access.redhat.com/errata/RHSA-2017:1499 RedHat Security Advisories: RHSA-2017:1599 https://access.redhat.com/errata/RHSA-2017:1599 RedHat Security Advisories: RHSA-2017:2524 https://access.redhat.com/errata/RHSA-2017:2524 https://usn.ubuntu.com/4072-1/ Common Vulnerability Exposure (CVE) ID: CVE-2018-10855 Debian Security Information: DSA-4396 (Google Search) https://www.debian.org/security/2019/dsa-4396 RedHat Security Advisories: RHBA-2018:3788 https://access.redhat.com/errata/RHBA-2018:3788 RedHat Security Advisories: RHSA-2018:1948 https://access.redhat.com/errata/RHSA-2018:1948 RedHat Security Advisories: RHSA-2018:1949 https://access.redhat.com/errata/RHSA-2018:1949 RedHat Security Advisories: RHSA-2018:2022 https://access.redhat.com/errata/RHSA-2018:2022 RedHat Security Advisories: RHSA-2018:2079 https://access.redhat.com/errata/RHSA-2018:2079 RedHat Security Advisories: RHSA-2018:2184 https://access.redhat.com/errata/RHSA-2018:2184 RedHat Security Advisories: RHSA-2018:2585 https://access.redhat.com/errata/RHSA-2018:2585 RedHat Security Advisories: RHSA-2019:0054 https://access.redhat.com/errata/RHSA-2019:0054 Common Vulnerability Exposure (CVE) ID: CVE-2018-10874 1041396 http://www.securitytracker.com/id/1041396 RHBA-2018:3788 RHSA-2018:2150 https://access.redhat.com/errata/RHSA-2018:2150 RHSA-2018:2151 https://access.redhat.com/errata/RHSA-2018:2151 RHSA-2018:2152 https://access.redhat.com/errata/RHSA-2018:2152 RHSA-2018:2166 https://access.redhat.com/errata/RHSA-2018:2166 RHSA-2018:2321 https://access.redhat.com/errata/RHSA-2018:2321 RHSA-2018:2585 RHSA-2019:0054 USN-4072-1 https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10874 Common Vulnerability Exposure (CVE) ID: CVE-2018-10875 https://lists.debian.org/debian-lts-announce/2019/09/msg00016.html RedHat Security Advisories: RHSA-2018:2150 RedHat Security Advisories: RHSA-2018:2151 RedHat Security Advisories: RHSA-2018:2152 RedHat Security Advisories: RHSA-2018:2166 RedHat Security Advisories: RHSA-2018:2321 SuSE Security Announcement: openSUSE-SU-2019:1125 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00021.html Common Vulnerability Exposure (CVE) ID: CVE-2018-16837 BugTraq ID: 105700 http://www.securityfocus.com/bid/105700 https://lists.debian.org/debian-lts-announce/2018/11/msg00012.html RedHat Security Advisories: RHSA-2018:3460 https://access.redhat.com/errata/RHSA-2018:3460 RedHat Security Advisories: RHSA-2018:3461 https://access.redhat.com/errata/RHSA-2018:3461 RedHat Security Advisories: RHSA-2018:3462 https://access.redhat.com/errata/RHSA-2018:3462 RedHat Security Advisories: RHSA-2018:3463 https://access.redhat.com/errata/RHSA-2018:3463 RedHat Security Advisories: RHSA-2018:3505 https://access.redhat.com/errata/RHSA-2018:3505 SuSE Security Announcement: openSUSE-SU-2019:1635 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00077.html SuSE Security Announcement: openSUSE-SU-2019:1858 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00020.html Common Vulnerability Exposure (CVE) ID: CVE-2018-16876 BugTraq ID: 106225 http://www.securityfocus.com/bid/106225 https://github.com/ansible/ansible/pull/49569 RedHat Security Advisories: RHSA-2018:3835 https://access.redhat.com/errata/RHSA-2018:3835 RedHat Security Advisories: RHSA-2018:3836 https://access.redhat.com/errata/RHSA-2018:3836 RedHat Security Advisories: RHSA-2018:3837 https://access.redhat.com/errata/RHSA-2018:3837 RedHat Security Advisories: RHSA-2018:3838 https://access.redhat.com/errata/RHSA-2018:3838 RedHat Security Advisories: RHSA-2019:0564 https://access.redhat.com/errata/RHSA-2019:0564 RedHat Security Advisories: RHSA-2019:0590 https://access.redhat.com/errata/RHSA-2019:0590 Common Vulnerability Exposure (CVE) ID: CVE-2019-10156 Debian Security Information: DSA-4950 (Google Search) https://www.debian.org/security/2021/dsa-4950 RedHat Security Advisories: RHSA-2019:3744 https://access.redhat.com/errata/RHSA-2019:3744 RedHat Security Advisories: RHSA-2019:3789 https://access.redhat.com/errata/RHSA-2019:3789 Common Vulnerability Exposure (CVE) ID: CVE-2019-3828 http://packetstormsecurity.com/files/172837/Ansible-Fetch-Path-Traversal.html https://github.com/ansible/ansible/pull/52133
Copyright	Copyright (C) 2019 Greenbone AG

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.