DEBIAN-CVE-2016-8614

DEBIAN-CVE-2016-8614 PUBLISHED CVSS 7.5 HIGH

A flaw was found in Ansible before version 2.2.0. The apt_key module does not properly verify key fingerprints, allowing remote adversary to create an OpenPGP key which matches the short key ID and inject this key instead of the correct key.

Risk Scores

CVSS v3.0

7.5

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Affected Products

Vendor	Product	Versions
Debian:13	ansible	0, 0, 0
Debian:11	ansible	0, 0, 0
Debian:14	ansible	0, 0, 0
Debian:12	ansible	0, 0, 0

Timeline

Jul 31, 2018 CVE Published
Apr 28, 2026 CVE Updated

References

https://security-tracker.debian.org/tracker/CVE-2016-8614 advisory

Open in Interactive Console →