CVE-2017-16355
libapache2-mod-passenger: In agent/Core/SpawningKit/Spawner.h in Phusion Passenger 5.1.10 (fixed in Passenger Open Source 5.1.11 and Passenger...
CVE-2017-16355 is fixed in 3 products on 1 platform, first by libapache2-mod-passenger 5.0.30-1+deb9u1build0.18.04.1, released June 17, 2018. It is not reported as exploited. Patch Radar priority: Routine.
Routine
CVSS
n/a
Medium
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0036
30th percentile
In agent/Core/SpawningKit/Spawner.h in Phusion Passenger 5.1.10 (fixed in Passenger Open Source 5.1.11 and Passenger Enterprise 5.1.10), if Passenger is running as root, it is possible to list the contents of arbitrary files on a system by symlinking a file named REVISION from the application root folder to a file of choice and querying passenger-status --show=xml.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| libapache2-mod-passenger · Ubuntu 18.04.6 LTS (bionic) | 5.0.30-1+deb9u1build0.18.04.1 | libapache2-mod-passenger 5.0.30-1+deb9u1build0.18.04.1 | Jun 17, 2018 |
| passenger · Ubuntu 18.04.6 LTS (bionic) | 5.0.30-1+deb9u1build0.18.04.1 | passenger 5.0.30-1+deb9u1build0.18.04.1 | Jun 17, 2018 |
| ruby-passenger · Ubuntu 18.04.6 LTS (bionic) | 5.0.30-1+deb9u1build0.18.04.1 | ruby-passenger 5.0.30-1+deb9u1build0.18.04.1 | Jun 17, 2018 |