CVE-2018-16837: debian debian_linux
Vulnerability summary
CVE-2018-16837 is a high (CVSS 7.8) vulnerability in debian debian_linux. EPSS estimates a 0.36% chance of exploitation in the next 30 days, higher than 30.4% of scored vulnerabilities.
Not severe (CVSS 7.8, local access); no exploitation reported by the 5 checked sources
Source freshness unavailable
How is this decided?Advisory lineage
Upstream 0 · Downstream 14 · Related 11Timeline
- 23-10-2018PublishedVulnerability first disclosed.
- 05-08-2024Last modifiedVulnerability information updated.
Description
Ansible "User" module leaks any data which is passed on as a parameter to ssh-keygen. This could lean in undesirable situations such as passphrases credentials passed as a parameter for the ssh-keygen executable. Showing those credentials in clear text form for every user which have access just to the process list.
CVSS metrics
9 scores · 7 sources · 3 versions- NVDNIST7.8HighCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- OSV · AlpineEcosystem advisory · calculated7.8HighCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- OSV · PypiEcosystem advisory · calculated7.8HighCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- OSV · Red hatEcosystem advisory · calculated7.8HighCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- OSV · UbuntuEcosystem advisory · calculated7.8HighCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- OSV · DebianEcosystem advisory · calculated7.8HighCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS trend
Probability
0.36%
Chance of exploitation in the next 30 days
Percentile
30%
Versus all other CVEs
30-day change
No change 0.00 pp
From 0.36% on 04-10-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root cause- CWE-214Invocation of Process Using Visible Sensitive InformationA process is invoked with sensitive command-line arguments, environment variables, or other elements that can be seen by other processes on the operating system.
- CWE-311Missing Encryption of Sensitive DataThe product does not encrypt sensitive or critical information before storage or transmission.
Affected systems
Known conditions: local access, no authentication, user interaction (CVSS vector). Other conditions: not stated in public data.
Redhat4 products
- ansible_engine2.0 | 2.5 | 2.6 | 2.7
- ansible_tower3.3.0
- ansible< 0:2.6.7-1.el7ae | < 0:2.5.11-1.el7ae | < 0:2.7.1-1.el7ae
- ansible-doc< 0:2.5.11-1.el7ae
Debian2 products
- ansible< 1.7.2+dfsg-2+deb8u1 | < 2.7.1+dfsg-1
- debian_linuxEOL8.0 | 9.0
[unknown]1 product
- ansiblen/a
Alpine1 product
- ansible< 2.5.11-r0 | < 2.7.1-r0
PyPI1 product
- ansible≥ 2.7.0a1, < 2.7.1 | ≥ 2.6.0a1, < 2.6.7 | < 2.5.11
Suse1 product
Ubuntu1 product
- ansibleAll versions (No fix recorded) | < 2.0.0.2-2ubuntu1.3 | < 2.5.1+dfsg-1ubuntu0.1
7 vendors · 11 products
References
40 links- bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16837X Refsource CONFIRMIssue TrackingVendor AdvisoryWEBREPORT
lists.debian.org/debian-lts-announce/2018/11/msg00012.htmlMailing ListX Refsource MLISTThird Party AdvisoryWEB- www.debian.org/security/2019/dsa-4396Vendor AdvisoryX Refsource DEBIANThird Party AdvisoryWEBAdvisory
- lists.opensuse.org/opensuse-security-announce/2019-04/msg00021.htmlVendor AdvisoryX Refsource SUSEThird Party AdvisoryWEB
Show all 40 references
- lists.opensuse.org/opensuse-security-announce/2019-06/msg00077.htmlVendor AdvisoryX Refsource SUSEWEB
- lists.opensuse.org/opensuse-security-announce/2019-08/msg00020.htmlVendor AdvisoryX Refsource SUSEWEB
- github.com/ansible/ansiblePACKAGE