CVE catalog

CVE-2020-1733

ansible: CVE-2020-1733

[CVE catalog]

Severity
Medium · CVSS 5CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L
Published
Source
[NVD] · [CVE record]
EPSS
0.40% · Oct 25, 2026

A race condition flaw was found in Ansible Engine 2.7.17 and prior, 2.8.9 and prior, 2.9.6 and prior when running a playbook with an unprivileged become user. When Ansible needs to run a module with become user, the temporary directory is created in /var/tmp. This directory is created with "umask 77 && mkdir -p <dir>"; this operation does not fail if the directory already exists and is owned by another user. An attacker could take advantage to gain control of the become user as the target directory can be retrieved by iterating '/proc/<pid>/cmdline'.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianansiblesid14.4.0+dfsg-1fixed
Debianansibleforky14.0.0+dfsg-1fixed
Debianansibletrixie12.0.0+dfsg-0+deb13u1fixed
Debianansiblebookworm7.7.0+dfsg-3+deb12u1fixed
Alpineansible3.102.8.11-r0fixed
Alpineansible3.112.9.7-r0fixed
Alpineansible3.122.9.7-r0fixed
Alpineansible3.92.7.17-r0fixed
Alpineansible-base3.132.9.7-r0fixed
Alpineansible-base3.142.9.7-r0fixed
Ubuntuansiblepro2.8.3+dfsg-1vulnerable
Ubuntuansiblepro2.8.6+dfsg-1vulnerable
Ubuntuansiblepro2.9.2+dfsg-1vulnerable
Ubuntuansiblepro2.9.4+dfsg-1vulnerable
Ubuntuansiblepro2.9.6+dfsg-1vulnerable
Ubuntuansiblepro2.9.6+dfsg-1ubuntu0.1~esm1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianansiblesourcesid2.9.7+dfsg-1not yet assignedNot reportedNot reported
Debianansiblesourceforky2.9.7+dfsg-1not yet assignedNot reportedNot reported
Debianansiblesourcetrixie2.9.7+dfsg-1not yet assignedNot reportedNot reported
Debianansiblesourcebookworm2.9.7+dfsg-1not yet assignedNot reportedNot reported
Alpineansibleapk3.102.8.11-r0Not reportedALPINE-CVE-2020-1733Not reported
Alpineansibleapk3.112.9.7-r0Not reportedALPINE-CVE-2020-1733Not reported
Alpineansibleapk3.122.9.7-r0Not reportedALPINE-CVE-2020-1733Not reported
Alpineansibleapk3.92.7.17-r0Not reportedALPINE-CVE-2020-1733Not reported
Alpineansible-baseapk3.132.9.7-r0Not reportedALPINE-CVE-2020-1733Not reported
Alpineansible-baseapk3.142.9.7-r0Not reportedALPINE-CVE-2020-1733Not reported
Ubuntuansibledebpro2.9.6+dfsg-1ubuntu0.1~esm1Not reportedUBUNTU-CVE-2020-1733Not reported

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [ansible]Fixed
    Details (2)

    • 7.7.0+dfsg-3+deb12u1 · all · bookworm

      Fixed · Fixed: 2.9.7+dfsg-1

      dsa · ansible · debian · bookworm; dsa · ansible · debian · 12

    • 7.7.0+dfsg-3+deb12u1 · all · bookworm

      Fixed · Fixed: 2.9.7+dfsg-1

      dsa · ansible · debian · bookworm; dsa · ansible · debian · 12

[Debian 13 (Trixie)]

  • [ansible]Fixed
    Details (2)

    • 12.0.0+dfsg-0+deb13u1 · all · trixie

      Fixed · Fixed: 2.9.7+dfsg-1

      dsa · ansible · debian · 13

    • 12.0.0+dfsg-0+deb13u1 · all · trixie

      Fixed · Fixed: 2.9.7+dfsg-1

      dsa · ansible · debian · 13

Observed:

References

[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]