CVE-2017-16355
- Source
- https://cve.org/CVERecord?id=CVE-2017-16355
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-16355.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2017-16355
- Aliases
- Downstream
- Related
- Published
- 2017-12-14T22:29:00.210Z
- Modified
- 2026-02-07T04:59:18.748205Z
- Severity
-
- 4.7 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N CVSS Calculator
- Summary
- [none]
- Details
-
In agent/Core/SpawningKit/Spawner.h in Phusion Passenger 5.1.10 (fixed in Passenger Open Source 5.1.11 and Passenger Enterprise 5.1.10), if Passenger is running as root, it is possible to list the contents of arbitrary files on a system by symlinking a file named REVISION from the application root folder to a file of choice and querying passenger-status --show=xml.
- References
-
- https://blog.phusion.nl/2017/10/13/passenger-security-advisory-5-1-11/
- https://github.com/phusion/passenger/commit/4043718264095cde6623c2cbe8c644541036d7bf
- https://seclists.org/bugtraq/2019/Mar/34
- https://www.debian.org/security/2019/dsa-4415
- https://seclists.org/bugtraq/2019/Mar/34
- https://github.com/phusion/passenger/commit/4043718264095cde6623c2cbe8c644541036d7bf
- https://seclists.org/bugtraq/2019/Mar/34
Affected packages
Git / github.com/phusion/passenger
Affected versions
release-5.*
release-5.0.10
release-5.0.11
release-5.0.13
release-5.0.14
release-5.0.15
release-5.0.16
release-5.0.17
release-5.0.18
release-5.0.19
release-5.0.20
release-5.0.21
release-5.0.22
release-5.0.23
release-5.0.24
release-5.0.25
release-5.0.26
release-5.0.27
release-5.0.28
release-5.0.29
release-5.0.30
release-5.1.0
release-5.1.1
release-5.1.2
release-5.1.3
release-5.1.4
release-5.1.5
release-5.1.6
release-5.1.7
release-5.1.8
Database specific
vanir_signatures
[
{
"deprecated": false,
"source": "https://github.com/phusion/passenger/commit/4043718264095cde6623c2cbe8c644541036d7bf",
"id": "CVE-2017-16355-bb6469dd",
"target": {
"file": "src/agent/Core/SpawningKit/Spawner.h"
},
"digest": {
"line_hashes": [
"268799682548938772947881921096668350310",
"117681501307321166777979843663423129027",
"280083727406545110470011300718420250903",
"222560687676110990119119317121042802472",
"235854114548696804817144001729705555967",
"83449442481079981626893397623410921398",
"320115127452501949654491876132754416636",
"207948168575058203827937063282176268874",
"327753644294967020574950308097127961444",
"130370208306564958597886905471594157991",
"55551024395305749768445773965125912360"
],
"threshold": 0.9
},
"signature_type": "Line",
"signature_version": "v1"
}
]
source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-16355.json"