Skip to content
OpenAdvisories

Package · Debian

passenger

7 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.0
    CVE-2018-12029

    Phusion Passenger Race Condition Allows Privilege Escalation

    A race condition in the nginx module in Phusion Passenger 3.x through 5.x before 5.3.2 allows local escalation of privileges when a non-standard passenger_instance_registry_dir with insufficiently strict permissions is configured. Replacing a file with a syml…

    passenger passenger passenger Debian Ubuntu RubyGems
  • High 7.8
    CVE-2016-10345

    Phusion Passenger uses a known /tmp filename

    In Phusion Passenger before 5.1.0, a known /tmp filename was used during passenger-install-nginx-module execution, which could allow local attackers to gain the privileges of the passenger user.

    passenger passenger passenger Debian Ubuntu RubyGems