← All advisories

High severity7.8NVD Advisory· Published Jun 7, 2017· Updated Jun 17, 2026

CVE-2015-6240

CVE-2015-6240

Description

The chroot, jail, and zone connection plugins in ansible before 1.9.2 allow local users to escape a restricted environment via a symlink attack.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
ansiblePyPI	< 1.9.2	1.9.2

Affected products

2

Red Hat/Ansible
cpe:2.3:a:redhat:ansible:*:*:*:*:*:*:*:*
Range: <=1.9.1
ghsa-coords
pkg:pypi/ansible
Range: < 1.9.2

Patches

Vulnerability mechanics

References

8

github.com/ansible/ansible/commit/952166f48eb0f5797b75b160fd156bbe1e8fc647nvdPatchWEB
github.com/ansible/ansible/commit/ca2f2c4ebd7b5e097eab0a710f79c1f63badf95bnvdPatchWEB
www.openwall.com/lists/oss-security/2015/08/17/10nvdMailing ListThird Party AdvisoryWEB
bugzilla.redhat.com/show_bug.cginvdIssue TrackingThird Party AdvisoryWEB
github.com/advisories/GHSA-wwwh-47wp-m522ghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2015-6240ghsaADVISORY
github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2017-3.yamlghsaWEB
lists.debian.org/debian-lts-announce/2019/09/msg00016.htmlnvdWEB

News mentions

0

No linked articles in our index yet.