CVE-2016-3714 PoC — ImageMagick 输入验证错误漏洞

Description

Fix ImageMagick Command Injection (CVE-2016-3714) with Ansible.

介绍

Ansible Role: CVE-2016-3714
=========

[![Build Status](https://travis-ci.org/chusiang/CVE-2016-3714.ansible.role.svg?branch=master)](https://travis-ci.org/chusiang/CVE-2016-3714.ansible.role) [![Ansible Galaxy](https://img.shields.io/badge/role-CVE--2016--3714-blue.svg)](https://galaxy.ansible.com/chusiang/CVE-2016-3714/)


Fix **ImageMagick Command Injection (CVE-2016-3714)** security issue with Ansible.

Requirements
------------

Any installed imagemagick and before v6.7.7.10 machine.

Role Variables
--------------

A description of the settable variables for this role should go here, including any variables that are in defaults/main.yml.

    policy_path: "/etc/ImageMagick/policy.xml"
    injection_src: "/etc/passwd"
    injection_dest: "/tmp/hack.txt"

Dependencies
------------

none.

Example Playbook
----------------

Including an example of how to use your role (for instance, with variables passed in as parameters) is always nice for users too:

    - hosts: servers
      roles:
         - { role: chusiang.CVE-2016-3714 }

License
-------

Copyright (c) chusiang from 2016 under the MIT license.

文件快照

备注