Debian LTS Advisory ([SECURITY] [DLA 1576-1] ansible security update)

Published: 2018-11-11 23:00:00
CVE Author: NIST National Vulnerability Database (NVD)

CVSS Base Vector:

Solution Type:
Vendor Patch

Detection Type:
Linux Distribution Package

Affected Versions:
ansible on Debian Linux

For Debian 8 'Jessie', this issue has been fixed in ansible version 1.7.2+dfsg-2+deb8u1. We recommend that you upgrade your ansible Linux Distribution Packages.

It was discovered that there was a potential SSH passphrase disclosure vulnerability in the ansible configuration management system, The 'User' module leaked data that was passed as a parameter to the ssh-keygen(1) utility, thus revealing any credentials in cleartext form in the global process list.

Detection Method:
This check tests the installed software version using the apt Linux Distribution Package manager.

NIST (National Institute of Standards and Technology) NVD (National Vulnerability Database)


CVSS Score

You never have to pay for a vulnerability scanning and management software again.

Tired of paying a subscription 'per asset' or 'per IP'? Well you can officially cancel your current subscription. Mageni provides a free, open source and enterprise-ready vulnerability scanning and management platform which helps you to find, prioritize, remediate and manage your vulnerabilities. It is free and always will be.