ansible: code execution
| Package(s): | ansible1.9 | CVE #(s): | CVE-2016-3096 | ||||||||||||||||||||||||
| Created: | April 26, 2016 | Updated: | July 20, 2016 | ||||||||||||||||||||||||
| Description: | From the Red Hat bugzilla:
A vulnerability in lxc_container, ansible module, was found allowing to get root inside the container. The problem is in the create_script function, which tries to write to /opt/.lxc-attach-script inside of the container. If the attacker can write to /opt/.lxc-attach-script before that, he can overwrite arbitrary files or execute commands as root. | ||||||||||||||||||||||||||
| Alerts: |
| ||||||||||||||||||||||||||