Medium
ansible, ansible-core — security advisory
A flaw was found in Ansible, where sensitive information stored in Ansible Vault files can be exposed in plaintext during the execution of a playbook. This occurs when using tasks such as include_vars to load vaulted variables without setting the no_log: true parameter, resulting in sensitive data being printed in the playbook output or logs. This can lead to the unintentional disclosure of secrets like passwords or API keys, compromising security and potentially allowing unauthorized access or actions.
- Products
- ansible, ansible-core
- Affected versions
- 1.1+dfsg-1, 1.3.4+dfsg-1, 1.4.0+dfsg-1, 1.4.1+dfsg-1, 1.4.3+dfsg-1, 1.4.4+dfsg-1, 1.5.4+dfsg-1, 1.5.4+dfsg-1ubuntu0.1~esm1, 1.5.4+dfsg-1ubuntu0.1~esm2, 1.5.4+dfsg-1ubuntu0.1~esm3, 1.9.2+dfsg-2, 1.9.4-1, 11.2.0+dfsg-1, 12.0.0+dfsg-1, 12.0.0~a2+dfsg-1, 12.0.0~a4+dfsg-1, 12.0.0~a6+dfsg-1, 12.0.0~b1+dfsg-1, 12.2.0+dfsg-1, 13.1.0+dfsg-1, 13.1.0+dfsg-1ubuntu1, 13.4.0+dfsg-1, 2.0.0.2-2, 2.0.0.2-2ubuntu1, 2.0.0.2-2ubuntu1.1, 2.0.0.2-2ubuntu1.2, 2.0.0.2-2ubuntu1.3, 2.0.0.2-2ubuntu1.3+esm1, 2.0.0.2-2ubuntu1.3+esm2, 2.0.0.2-2ubuntu1.3+esm3, 2.0.0.2-2ubuntu1.3+esm4, 2.0.0.2-2ubuntu1.3+esm5, 2.0.0.2-2ubuntu1.3+esm6, 2.10.7+merged+base+2.10.8+dfsg-1, 2.10.7+merged+base+2.10.8+dfsg-1ubuntu0.1~esm1, 2.10.7+merged+base+2.10.8+dfsg-1ubuntu0.1~esm4, 2.12.0-1, 2.12.0-1ubuntu0.1, 2.14.11-1, 2.14.11-2, 2.14.13-1, 2.14.9-2, 2.16.3-0ubuntu1, 2.16.3-0ubuntu2, 2.18.1-4ubuntu1, 2.19.0-1ubuntu1, 2.19.0~beta4-1ubuntu1, 2.19.4-1, 2.20.1-1, 2.21.1~rc1-1, 2.21.1~rc1-2, 2.21.1~rc1-2ubuntu1, 2.22.0~beta2-1, 2.3.1.0+dfsg-2, 2.5.0+dfsg-1, 2.5.1+dfsg-1, 2.5.1+dfsg-1ubuntu0.1, 2.5.1+dfsg-1ubuntu0.1+esm1, 2.5.1+dfsg-1ubuntu0.1+esm2, 2.5.1+dfsg-1ubuntu0.1+esm3, 2.5.1+dfsg-1ubuntu0.1+esm4, 2.5.1+dfsg-1ubuntu0.1+esm5, 2.8.3+dfsg-1, 2.8.6+dfsg-1, 2.9.2+dfsg-1, 2.9.4+dfsg-1, 2.9.6+dfsg-1, 2.9.6+dfsg-1ubuntu0.1~esm1, 2.9.6+dfsg-1ubuntu0.1~esm2, 2.9.6+dfsg-1ubuntu0.1~esm3, 7.7.0+dfsg-1, 7.7.0+dfsg-3, 9.2.0+dfsg-0ubuntu4, 9.2.0+dfsg-0ubuntu5
- Fixed versions
- Not specified
- CVEs
- CVE-2024-8775
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 31 Oct 2026, 01:24 UTC · Revision 1
Source evidence
A flaw was found in Ansible, where sensitive information stored in Ansible Vault files can be exposed in plaintext during the execution of a playbook. This occurs when using tasks such as include_vars to load vaulted variables without setting the no_log: true parameter, resulting in sensitive data being printed in the playbook output or logs. This can lead to the unintentional disclosure of secrets like passwords or API keys, compromising security and potentially allowing unauthorized access or actions.
osv:UBUNTU-CVE-2024-8775
ansible
Fixed versions: Not specified
ansible
Fixed versions: Not specified
ansible
Fixed versions: Not specified
ansible
Fixed versions: Not specified
ansible-core
Fixed versions: Not specified
ansible
Fixed versions: Not specified
ansible
Fixed versions: Not specified
ansible-core
Fixed versions: Not specified
ansible
Fixed versions: Not specified
ansible-core
Fixed versions: Not specified
ansible
Fixed versions: Not specified
ansible-core
Fixed versions: Not specified
ansible
Fixed versions: Not specified
ansible-core
Fixed versions: Not specified
Complete source record
{
"id": "b674f3c1ca92862d5dddc9aa3d53ca2882454face2f0b110af6e619aa4c50a02",
"url": "https://osv.dev/vulnerability/UBUNTU-CVE-2024-8775",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "UBUNTU-CVE-2024-8775",
"summary": "A flaw was found in Ansible, where sensitive information stored in Ansible Vault files can be exposed in plaintext during the execution of a playbook. This occurs when using tasks such as include_vars to load vaulted variables without setting the no_log: true parameter, resulting in sensitive data being printed in the playbook output or logs. This can lead to the unintentional disclosure of secrets like passwords or API keys, compromising security and potentially allowing unauthorized access or actions.",
"evidence": "osv:UBUNTU-CVE-2024-8775",
"products": [
{
"name": {
"value": "ansible",
"evidence": "/affected/0/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "1.1+dfsg-1",
"evidence": "/affected/0/versions"
},
{
"value": "1.3.4+dfsg-1",
"evidence": "/affected/0/versions"
},
{
"value": "1.4.0+dfsg-1",
"evidence": "/affected/0/versions"
},
{
"value": "1.4.1+dfsg-1",
"evidence": "/affected/0/versions"
},
{
"value": "1.4.3+dfsg-1",
"evidence": "/affected/0/versions"
},
{
"value": "1.4.4+dfsg-1",
"evidence": "/affected/0/versions"
},
{
"value": "1.5.4+dfsg-1",
"evidence": "/affected/0/versions"
},
{
"value": "1.5.4+dfsg-1ubuntu0.1~esm1",
"evidence": "/affected/0/versions"
},
{
"value": "1.5.4+dfsg-1ubuntu0.1~esm2",
"evidence": "/affected/0/versions"
},
{
"value": "1.5.4+dfsg-1ubuntu0.1~esm3",
"evidence": "/affected/0/versions"
}
]
},
{
"name": {
"value": "ansible",
"evidence": "/affected/1/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "1.9.2+dfsg-2",
"evidence": "/affected/1/versions"
},
{
"value": "1.9.4-1",
"evidence": "/affected/1/versions"
},
{
"value": "2.0.0.2-2",
"evidence": "/affected/1/versions"
},
{
"value": "2.0.0.2-2ubuntu1",
"evidence": "/affected/1/versions"
},
{
"value": "2.0.0.2-2ubuntu1.1",
"evidence": "/affected/1/versions"
},
{
"value": "2.0.0.2-2ubuntu1.2",
"evidence": "/affected/1/versions"
},
{
"value": "2.0.0.2-2ubuntu1.3",
"evidence": "/affected/1/versions"
},
{
"value": "2.0.0.2-2ubuntu1.3+esm1",
"evidence": "/affected/1/versions"
},
{
"value": "2.0.0.2-2ubuntu1.3+esm2",
"evidence": "/affected/1/versions"
},
{
"value": "2.0.0.2-2ubuntu1.3+esm3",
"evidence": "/affected/1/versions"
},
{
"value": "2.0.0.2-2ubuntu1.3+esm4",
"evidence": "/affected/1/versions"
},
{
"value": "2.0.0.2-2ubuntu1.3+esm5",
"evidence": "/affected/1/versions"
},
{
"value": "2.0.0.2-2ubuntu1.3+esm6",
"evidence": "/affected/1/versions"
}
]
},
{
"name": {
"value": "ansible",
"evidence": "/affected/2/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "2.3.1.0+dfsg-2",
"evidence": "/affected/2/versions"
},
{
"value": "2.5.0+dfsg-1",
"evidence": "/affected/2/versions"
},
{
"value": "2.5.1+dfsg-1",
"evidence": "/affected/2/versions"
},
{
"value": "2.5.1+dfsg-1ubuntu0.1",
"evidence": "/affected/2/versions"
},
{
"value": "2.5.1+dfsg-1ubuntu0.1+esm1",
"evidence": "/affected/2/versions"
},
{
"value": "2.5.1+dfsg-1ubuntu0.1+esm2",
"evidence": "/affected/2/versions"
},
{
"value": "2.5.1+dfsg-1ubuntu0.1+esm3",
"evidence": "/affected/2/versions"
},
{
"value": "2.5.1+dfsg-1ubuntu0.1+esm4",
"evidence": "/affected/2/versions"
},
{
"value": "2.5.1+dfsg-1ubuntu0.1+esm5",
"evidence": "/affected/2/versions"
}
]
},
{
"name": {
"value": "ansible",
"evidence": "/affected/3/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "2.8.3+dfsg-1",
"evidence": "/affected/3/versions"
},
{
"value": "2.8.6+dfsg-1",
"evidence": "/affected/3/versions"
},
{
"value": "2.9.2+dfsg-1",
"evidence": "/affected/3/versions"
},
{
"value": "2.9.4+dfsg-1",
"evidence": "/affected/3/versions"
},
{
"value": "2.9.6+dfsg-1",
"evidence": "/affected/3/versions"
},
{
"value": "2.9.6+dfsg-1ubuntu0.1~esm1",
"evidence": "/affected/3/versions"
},
{
"value": "2.9.6+dfsg-1ubuntu0.1~esm2",
"evidence": "/affected/3/versions"
},
{
"value": "2.9.6+dfsg-1ubuntu0.1~esm3",
"evidence": "/affected/3/versions"
}
]
},
{
"name": {
"value": "ansible-core",
"evidence": "/affected/4/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "2.12.0-1",
"evidence": "/affected/4/versions"
},
{
"value": "2.12.0-1ubuntu0.1",
"evidence": "/affected/4/versions"
}
]
},
{
"name": {
"value": "ansible",
"evidence": "/affected/5/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "2.10.7+merged+base+2.10.8+dfsg-1",
"evidence": "/affected/5/versions"
},
{
"value": "2.10.7+merged+base+2.10.8+dfsg-1ubuntu0.1~esm1",
"evidence": "/affected/5/versions"
},
{
"value": "2.10.7+merged+base+2.10.8+dfsg-1ubuntu0.1~esm4",
"evidence": "/affected/5/versions"
}
]
},
{
"name": {
"value": "ansible",
"evidence": "/affected/6/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "7.7.0+dfsg-1",
"evidence": "/affected/6/versions"
},
{
"value": "7.7.0+dfsg-3",
"evidence": "/affected/6/versions"
},
{
"value": "9.2.0+dfsg-0ubuntu4",
"evidence": "/affected/6/versions"
},
{
"value": "9.2.0+dfsg-0ubuntu5",
"evidence": "/affected/6/versions"
}
]
},
{
"name": {
"value": "ansible-core",
"evidence": "/affected/7/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "2.14.9-2",
"evidence": "/affected/7/versions"
},
{
"value": "2.14.11-1",
"evidence": "/affected/7/versions"
},
{
"value": "2.14.11-2",
"evidence": "/affected/7/versions"
},
{
"value": "2.14.13-1",
"evidence": "/affected/7/versions"
},
{
"value": "2.16.3-0ubuntu1",
"evidence": "/affected/7/versions"
},
{
"value": "2.16.3-0ubuntu2",
"evidence": "/affected/7/versions"
}
]
},
{
"name": {
"value": "ansible",
"evidence": "/affected/8/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "11.2.0+dfsg-1",
"evidence": "/affected/8/versions"
},
{
"value": "12.0.0~a2+dfsg-1",
"evidence": "/affected/8/versions"
},
{
"value": "12.0.0~a4+dfsg-1",
"evidence": "/affected/8/versions"
},
{
"value": "12.0.0~a6+dfsg-1",
"evidence": "/affected/8/versions"
},
{
"value": "12.0.0~b1+dfsg-1",
"evidence": "/affected/8/versions"
}
]
},
{
"name": {
"value": "ansible-core",
"evidence": "/affected/9/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "2.18.1-4ubuntu1",
"evidence": "/affected/9/versions"
},
{
"value": "2.19.0~beta4-1ubuntu1",
"evidence": "/affected/9/versions"
},
{
"value": "2.19.0-1ubuntu1",
"evidence": "/affected/9/versions"
}
]
},
{
"name": {
"value": "ansible",
"evidence": "/affected/10/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "13.1.0+dfsg-1ubuntu1",
"evidence": "/affected/10/versions"
},
{
"value": "13.4.0+dfsg-1",
"evidence": "/affected/10/versions"
}
]
},
{
"name": {
"value": "ansible-core",
"evidence": "/affected/11/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "2.20.1-1",
"evidence": "/affected/11/versions"
},
{
"value": "2.21.1~rc1-1",
"evidence": "/affected/11/versions"
},
{
"value": "2.21.1~rc1-2",
"evidence": "/affected/11/versions"
},
{
"value": "2.21.1~rc1-2ubuntu1",
"evidence": "/affected/11/versions"
},
{
"value": "2.22.0~beta2-1",
"evidence": "/affected/11/versions"
}
]
},
{
"name": {
"value": "ansible",
"evidence": "/affected/12/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "12.0.0~b1+dfsg-1",
"evidence": "/affected/12/versions"
},
{
"value": "12.0.0+dfsg-1",
"evidence": "/affected/12/versions"
},
{
"value": "12.2.0+dfsg-1",
"evidence": "/affected/12/versions"
},
{
"value": "13.1.0+dfsg-1",
"evidence": "/affected/12/versions"
},
{
"value": "13.1.0+dfsg-1ubuntu1",
"evidence": "/affected/12/versions"
}
]
},
{
"name": {
"value": "ansible-core",
"evidence": "/affected/13/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "2.19.0-1ubuntu1",
"evidence": "/affected/13/versions"
},
{
"value": "2.19.4-1",
"evidence": "/affected/13/versions"
},
{
"value": "2.20.1-1",
"evidence": "/affected/13/versions"
}
]
}
],
"severity": "medium",
"structured": {
"id": "UBUNTU-CVE-2024-8775",
"aliases": [
"UBUNTU-CVE-2024-8775"
],
"metrics": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"
},
{
"type": "Ubuntu",
"score": "medium"
}
],
"affected": [
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "ansible",
"purl": "pkg:deb/ubuntu/ansible?arch=source&distro=esm-infra-legacy%2Ftrusty",
"ecosystem": "Ubuntu:Pro:14.04:LTS"
},
"versions": [
"1.1+dfsg-1",
"1.3.4+dfsg-1",
"1.4.0+dfsg-1",
"1.4.1+dfsg-1",
"1.4.3+dfsg-1",
"1.4.4+dfsg-1",
"1.5.4+dfsg-1",
"1.5.4+dfsg-1ubuntu0.1~esm1",
"1.5.4+dfsg-1ubuntu0.1~esm2",
"1.5.4+dfsg-1ubuntu0.1~esm3"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2024/UBUNTU-CVE-2024-8775.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "ansible",
"binary_version": "1.5.4+dfsg-1ubuntu0.1~esm3"
},
{
"binary_name": "ansible-fireball",
"binary_version": "1.5.4+dfsg-1ubuntu0.1~esm3"
},
{
"binary_name": "ansible-node-fireball",
"binary_version": "1.5.4+dfsg-1ubuntu0.1~esm3"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "ansible",
"purl": "pkg:deb/ubuntu/ansible?arch=source&distro=esm-apps%2Fxenial",
"ecosystem": "Ubuntu:Pro:16.04:LTS"
},
"versions": [
"1.9.2+dfsg-2",
"1.9.4-1",
"2.0.0.2-2",
"2.0.0.2-2ubuntu1",
"2.0.0.2-2ubuntu1.1",
"2.0.0.2-2ubuntu1.2",
"2.0.0.2-2ubuntu1.3",
"2.0.0.2-2ubuntu1.3+esm1",
"2.0.0.2-2ubuntu1.3+esm2",
"2.0.0.2-2ubuntu1.3+esm3",
"2.0.0.2-2ubuntu1.3+esm4",
"2.0.0.2-2ubuntu1.3+esm5",
"2.0.0.2-2ubuntu1.3+esm6"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2024/UBUNTU-CVE-2024-8775.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "ansible",
"binary_version": "2.0.0.2-2ubuntu1.3+esm6"
},
{
"binary_name": "ansible-fireball",
"binary_version": "2.0.0.2-2ubuntu1.3+esm6"
},
{
"binary_name": "ansible-node-fireball",
"binary_version": "2.0.0.2-2ubuntu1.3+esm6"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "ansible",
"purl": "pkg:deb/ubuntu/ansible?arch=source&distro=esm-apps%2Fbionic",
"ecosystem": "Ubuntu:Pro:18.04:LTS"
},
"versions": [
"2.3.1.0+dfsg-2",
"2.5.0+dfsg-1",
"2.5.1+dfsg-1",
"2.5.1+dfsg-1ubuntu0.1",
"2.5.1+dfsg-1ubuntu0.1+esm1",
"2.5.1+dfsg-1ubuntu0.1+esm2",
"2.5.1+dfsg-1ubuntu0.1+esm3",
"2.5.1+dfsg-1ubuntu0.1+esm4",
"2.5.1+dfsg-1ubuntu0.1+esm5"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2024/UBUNTU-CVE-2024-8775.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "ansible",
"binary_version": "2.5.1+dfsg-1ubuntu0.1+esm5"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "ansible",
"purl": "pkg:deb/ubuntu/ansible?arch=source&distro=esm-apps%2Ffocal",
"ecosystem": "Ubuntu:Pro:20.04:LTS"
},
"versions": [
"2.8.3+dfsg-1",
"2.8.6+dfsg-1",
"2.9.2+dfsg-1",
"2.9.4+dfsg-1",
"2.9.6+dfsg-1",
"2.9.6+dfsg-1ubuntu0.1~esm1",
"2.9.6+dfsg-1ubuntu0.1~esm2",
"2.9.6+dfsg-1ubuntu0.1~esm3"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2024/UBUNTU-CVE-2024-8775.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "ansible",
"binary_version": "2.9.6+dfsg-1ubuntu0.1~esm3"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "ansible-core",
"purl": "pkg:deb/ubuntu/ansible-core?arch=source&distro=jammy",
"ecosystem": "Ubuntu:22.04:LTS"
},
"versions": [
"2.12.0-1",
"2.12.0-1ubuntu0.1"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2024/UBUNTU-CVE-2024-8775.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "ansible-core",
"binary_version": "2.12.0-1ubuntu0.1"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "ansible",
"purl": "pkg:deb/ubuntu/ansible?arch=source&distro=esm-apps%2Fjammy",
"ecosystem": "Ubuntu:Pro:22.04:LTS"
},
"versions": [
"2.10.7+merged+base+2.10.8+dfsg-1",
"2.10.7+merged+base+2.10.8+dfsg-1ubuntu0.1~esm1",
"2.10.7+merged+base+2.10.8+dfsg-1ubuntu0.1~esm4"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2024/UBUNTU-CVE-2024-8775.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "ansible",
"binary_version": "2.10.7+merged+base+2.10.8+dfsg-1ubuntu0.1~esm4"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "ansible",
"purl": "pkg:deb/ubuntu/ansible?arch=source&distro=noble",
"ecosystem": "Ubuntu:24.04:LTS"
},
"versions": [
"7.7.0+dfsg-1",
"7.7.0+dfsg-3",
"9.2.0+dfsg-0ubuntu4",
"9.2.0+dfsg-0ubuntu5"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2024/UBUNTU-CVE-2024-8775.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "ansible",
"binary_version": "9.2.0+dfsg-0ubuntu5"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "ansible-core",
"purl": "pkg:deb/ubuntu/ansible-core?arch=source&distro=noble",
"ecosystem": "Ubuntu:24.04:LTS"
},
"versions": [
"2.14.9-2",
"2.14.11-1",
"2.14.11-2",
"2.14.13-1",
"2.16.3-0ubuntu1",
"2.16.3-0ubuntu2"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2024/UBUNTU-CVE-2024-8775.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "ansible-core",
"binary_version": "2.16.3-0ubuntu2"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "ansible",
"purl": "pkg:deb/ubuntu/ansible?arch=source&distro=questing",
"ecosystem": "Ubuntu:25.10"
},
"versions": [
"11.2.0+dfsg-1",
"12.0.0~a2+dfsg-1",
"12.0.0~a4+dfsg-1",
"12.0.0~a6+dfsg-1",
"12.0.0~b1+dfsg-1"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2024/UBUNTU-CVE-2024-8775.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "ansible",
"binary_version": "12.0.0~b1+dfsg-1"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "ansible-core",
"purl": "pkg:deb/ubuntu/ansible-core?arch=source&distro=questing",
"ecosystem": "Ubuntu:25.10"
},
"versions": [
"2.18.1-4ubuntu1",
"2.19.0~beta4-1ubuntu1",
"2.19.0-1ubuntu1"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2024/UBUNTU-CVE-2024-8775.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "ansible-core",
"binary_version": "2.19.0-1ubuntu1"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "ansible",
"purl": "pkg:deb/ubuntu/ansible?arch=source&distro=stonking",
"ecosystem": "Ubuntu:26.10"
},
"versions": [
"13.1.0+dfsg-1ubuntu1",
"13.4.0+dfsg-1"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2024/UBUNTU-CVE-2024-8775.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "ansible",
"binary_version": "13.4.0+dfsg-1"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "ansible-core",
"purl": "pkg:deb/ubuntu/ansible-core?arch=source&distro=stonking",
"ecosystem": "Ubuntu:26.10"
},
"versions": [
"2.20.1-1",
"2.21.1~rc1-1",
"2.21.1~rc1-2",
"2.21.1~rc1-2ubuntu1",
"2.22.0~beta2-1"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2024/UBUNTU-CVE-2024-8775.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "ansible-core",
"binary_version": "2.22.0~beta2-1"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "ansible",
"purl": "pkg:deb/ubuntu/ansible?arch=source&distro=resolute",
"ecosystem": "Ubuntu:26.04:LTS"
},
"versions": [
"12.0.0~b1+dfsg-1",
"12.0.0+dfsg-1",
"12.2.0+dfsg-1",
"13.1.0+dfsg-1",
"13.1.0+dfsg-1ubuntu1"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2024/UBUNTU-CVE-2024-8775.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "ansible",
"binary_version": "13.1.0+dfsg-1ubuntu1"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "ansible-core",
"purl": "pkg:deb/ubuntu/ansible-core?arch=source&distro=resolute",
"ecosystem": "Ubuntu:26.04:LTS"
},
"versions": [
"2.19.0-1ubuntu1",
"2.19.4-1",
"2.20.1-1"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2024/UBUNTU-CVE-2024-8775.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "ansible-core",
"binary_version": "2.20.1-1"
}
]
}
}
],
"modified": "2026-10-17T12:56:47.244219263Z",
"provider": "osv",
"upstream": [
"CVE-2024-8775"
],
"references": [
"https://ubuntu.com/security/CVE-2024-8775",
"https://www.cve.org/CVERecord?id=CVE-2024-8775",
"https://bugzilla.redhat.com/show_bug.cgi?id=2312119",
"https://access.redhat.com/security/cve/CVE-2024-8775"
]
},
"related_cves": [
{
"value": "CVE-2024-8775",
"evidence": "/upstream"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 356253,
"published_at": "2024-09-14T03:15:00+00:00"
}