CVE-2023-5115: Ansible: malicious role archive can cause ansible-galaxy to overwrite arbitrary files
An absolute path traversal attack exists in the Ansible automation platform. This flaw allows an attacker to craft a malicious Ansible role and make the victim execute the role. A symlink can be used to overwrite a file outside of the extraction path.
Other sources
When installing a maliciously created Ansible role using ansible-galaxy role install, arbitrary files the user has access to can be overwritten. The malicious role must contain a symlink with an absolute path to the target file, followed by a file of the same name (as the symlink) with the contents to write to the target.
— Red Hat
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-5115?
CVE-2023-5115 has a high severity rating due to its potential to enable an absolute path traversal attack.
How do I fix CVE-2023-5115?
To fix CVE-2023-5115, upgrade to Ansible version 8.5.0 or later, or for Red Hat, upgrade to version 2.14.11.
What versions of Ansible are affected by CVE-2023-5115?
CVE-2023-5115 affects all Ansible versions prior to 8.5.0 and 2.14.11 for Red Hat users.
Can CVE-2023-5115 affect my Red Hat Enterprise Linux setup?
Yes, CVE-2023-5115 can affect Red Hat Enterprise Linux when using vulnerable versions of the Ansible automation platform.
What is an absolute path traversal attack in the context of CVE-2023-5115?
An absolute path traversal attack allows an attacker to overwrite files outside the intended extraction path by exploiting symlinks in the Ansible roles.