CVE-2016-3096

Aliases:GHSA-rh6x-qvg7-rrmjPYSEC-2016-1
Advisory lineage Upstream: 0 Downstream: 9
Modified
Published: 03 Jun 2016, 14:00
Last modified:05 Aug 2024, 23:47

Vulnerability Summary

Overall Risk (default)
medium
31/100
CVSS Score
7.8 HIGH
v3.0 (nvd)
EPSS Score
0.04% LOW
0% probability -0.04%
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

03 Jun 2016, 14:00
Published
Vulnerability first disclosed
05 Aug 2024, 23:47
Last Modified
Vulnerability information updated

Description

The create_script function in the lxc_container module in Ansible before 1.9.6-1 and 2.x before 2.0.2.0 allows local users to write to arbitrary files or gain privileges via a symlink attack on (1) /opt/.lxc-attach-script, (2) the archived container in the archive_path directory, or the (3) lxc-attach-script.log or (4) lxc-attach-script.err files in the temporary directory.

CVSS Metrics

  • v4.0•HIGH•Score: 8.5CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
  • v3.0•HIGH•Score: 7.8CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
  • v2.0•HIGH•Score: 7.2AV:L/AC:L/Au:N/C:C/I:C/A:C

EPSS Trends

Current EPSS score: 0.04%• Percentile: 11%

Techniques & Countermeasures

  • CWE-59•Improper Link Resolution Before File Access ('Link Following')

    The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.

Affected Systems

  • fedoraproject•fedora

    22 | 23 | 24

  • PyPI•ansible

    ≥ 2.0.0.0, < 2.0.2.0 | < 1.9.6.1 | < 2.0.2.0

  • redhat•ansible

    ≤ 1.9.6 | 2.0 | 2.0.1

References (20)