VDB
DEBIAN-CVE-2016-9587
DEBIAN-CVE-2016-9587
PUBLISHED
CVSS 8.100000381469727 HIGH
Record from OSV · Published April 24, 2018
Ansible before versions 2.1.4, 2.2.1 is vulnerable to an improper input validation in Ansible's handling of data sent from client systems. An attacker with control over a client system being managed by Ansible and the ability to send facts back to the Ansible server could use this flaw to execute arbitrary code on the Ansible server using the Ansible server privileges.
Fixed versions
Upgrade to a fixed version or later. Language registries are listed first, then Linux distributions, then vendor products.
| Package | Ecosystem | Fixed in |
|---|---|---|
| ansible | Debian:14 | 2.2.0.0-3 |
| ansible | Debian:13 | 2.2.0.0-3 |
| ansible | Debian:12 | 2.2.0.0-3 |
Risk scores
CVSS 3.1
8.100000381469727
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
| Vendor | Product | Versions |
|---|---|---|
| Debian:14 | ansible | 0 |
| Debian:13 | ansible | 0 |
| Debian:12 | ansible | 0 |
Timeline
- Apr 24, 2018 CVE Published
- Sep 22, 2026 CVE Updated
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln DEBIAN-CVE-2016-9587
vulnetix vdb fixes DEBIAN-CVE-2016-9587Or with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/DEBIAN-CVE-2016-9587/fixes/registry"The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart