CVE catalog

CVE-2016-8647

ansible: CVE-2016-8647

[CVE catalog]

Severity
Medium · CVSS 4.9CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
Published
Source
[NVD] · [CVE record]
EPSS
1.44% · Oct 27, 2026

An input validation vulnerability was found in Ansible's mysql_user module before 2.2.1.0, which may fail to correctly change a password in certain circumstances. Thus the previous password would still be active when it should have been changed.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianansiblesid14.4.0+dfsg-1fixed
Debianansibleforky14.0.0+dfsg-1fixed
Debianansibletrixie12.0.0+dfsg-0+deb13u1fixed
Debianansiblebookworm7.7.0+dfsg-3+deb12u1fixed
SusePOS_Image-Graphical7manager client tools 15-beta0.1.1710765237.46af599-159000.3.24.2fixed
SusePOS_Image-JeOS7manager client tools 15-beta0.1.1710765237.46af599-159000.3.24.2fixed
Suseansiblemanager client tools 15-beta2.9.27-159000.3.12.2fixed
Susedracut-saltbootmanager client tools 15-beta0.1.1710765237.46af599-159000.3.33.2fixed
Susegrafanamanager client tools 15-beta9.5.16-159000.4.30.2fixed
Susespacecmdmanager client tools 15-beta5.0.5-159000.6.48.2fixed
Susespacewalk-client-toolsmanager client tools 15-beta5.0.4-159000.6.54.2fixed
Susesupportutils-plugin-susemanager-clientmanager client tools 15-beta5.0.3-159000.6.21.2fixed
Suseuyuni-toolsmanager client tools 15-beta0.1.7-159000.3.8.1fixed
Susegolang-github-prometheus-node_exportermanager client tools beta for sle micro 51.5.0-159000.6.2.1fixed
Suseuyuni-toolsmanager client tools beta for sle micro 50.1.7-159000.3.8.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianansiblesourcesid2.2.0.0-4not yet assignedNot reported[844691]
Debianansiblesourceforky2.2.0.0-4not yet assignedNot reported[844691]
Debianansiblesourcetrixie2.2.0.0-4not yet assignedNot reported[844691]
Debianansiblesourcebookworm2.2.0.0-4not yet assignedNot reported[844691]
SusePOS_Image-Graphical7rpmmanager client tools 15-beta0.1.1710765237.46af599-159000.3.24.2Not reportedSUSE-SU-2024:1427-1Not reported
SusePOS_Image-JeOS7rpmmanager client tools 15-beta0.1.1710765237.46af599-159000.3.24.2Not reportedSUSE-SU-2024:1427-1Not reported
Suseansiblerpmmanager client tools 15-beta2.9.27-159000.3.12.2Not reportedSUSE-SU-2024:1427-1Not reported
Susedracut-saltbootrpmmanager client tools 15-beta0.1.1710765237.46af599-159000.3.33.2Not reportedSUSE-SU-2024:1427-1Not reported
Susegrafanarpmmanager client tools 15-beta9.5.16-159000.4.30.2Not reportedSUSE-SU-2024:1427-1Not reported
Susespacecmdrpmmanager client tools 15-beta5.0.5-159000.6.48.2Not reportedSUSE-SU-2024:1427-1Not reported
Susespacewalk-client-toolsrpmmanager client tools 15-beta5.0.4-159000.6.54.2Not reportedSUSE-SU-2024:1427-1Not reported
Susesupportutils-plugin-susemanager-clientrpmmanager client tools 15-beta5.0.3-159000.6.21.2Not reportedSUSE-SU-2024:1427-1Not reported
Suseuyuni-toolsrpmmanager client tools 15-beta0.1.7-159000.3.8.1Not reportedSUSE-SU-2024:1427-1Not reported
Susegolang-github-prometheus-node_exporterrpmmanager client tools beta for sle micro 51.5.0-159000.6.2.1Not reportedSUSE-SU-2024:1427-1Not reported
Suseuyuni-toolsrpmmanager client tools beta for sle micro 50.1.7-159000.3.8.1Not reportedSUSE-SU-2024:1427-1Not reported

[Debian bug #844691]

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [ansible]Fixed
    Details (2)

    • 7.7.0+dfsg-3+deb12u1 · all · bookworm

      Fixed · Fixed: 2.2.0.0-4

      dsa · ansible · debian · bookworm; dsa · ansible · debian · 12

    • 7.7.0+dfsg-3+deb12u1 · all · bookworm

      Fixed · Fixed: 2.2.0.0-4

      dsa · ansible · debian · bookworm; dsa · ansible · debian · 12

[Debian 13 (Trixie)]

  • [ansible]Fixed
    Details (2)

    • 12.0.0+dfsg-0+deb13u1 · all · trixie

      Fixed · Fixed: 2.2.0.0-4

      dsa · ansible · debian · 13

    • 12.0.0+dfsg-0+deb13u1 · all · trixie

      Fixed · Fixed: 2.2.0.0-4

      dsa · ansible · debian · 13

Observed:

References

[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]