CVE catalog

CVE-2017-16355

passenger: CVE-2017-16355

Severity: Medium
Published: Dec 14, 2017, 10:29:00 PM UTC
Source: [NVD] · [CVE record]
EPSS: 0.36% · Oct 22, 2026

In agent/Core/SpawningKit/Spawner.h in Phusion Passenger 5.1.10 (fixed in Passenger Open Source 5.1.11 and Passenger Enterprise 5.1.10), if Passenger is running as root, it is possible to list the contents of arbitrary files on a system by symlinking a file named REVISION from the application root folder to a file of choice and querying passenger-status --show=xml.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

Distribution	Package	Release	Version	Status
Debian	passenger	sid	`6.2.0+ds-1`	fixed
Debian	passenger	forky	`6.2.0+ds-1`	fixed
Debian	passenger	trixie	`6.0.26+ds-1.1`	fixed
Debian	passenger	bookworm	`6.0.17+ds-1`	fixed
Ubuntu	passenger	pro	`5.0.7-3`	vulnerable
Ubuntu	passenger	pro	`5.0.22-1`	vulnerable
Ubuntu	passenger	pro	`5.0.22-1build1`	vulnerable
Ubuntu	passenger	pro	`5.0.22-1build2`	vulnerable
Ubuntu	passenger	pro	`5.0.27-2`	vulnerable
Ubuntu	passenger	pro	`5.0.27-2ubuntu0.1~esm1`	fixed
Ubuntu	passenger	pro	`5.0.7-3`	vulnerable
Ubuntu	passenger	pro	`5.0.22-1`	vulnerable
Ubuntu	passenger	pro	`5.0.22-1build1`	vulnerable
Ubuntu	passenger	pro	`5.0.22-1build2`	vulnerable
Ubuntu	passenger	pro	`5.0.27-2`	vulnerable
Ubuntu	passenger	pro	`5.0.27-2ubuntu0.1~esm1`	fixed
Ubuntu	passenger	18.04	`5.0.30-1`	vulnerable
Ubuntu	passenger	18.04	`5.0.30-1build1`	vulnerable
Ubuntu	passenger	18.04	`5.0.30-1build2`	vulnerable
Ubuntu	passenger	18.04	`5.0.30-1+deb9u1build0.18.04.1`	fixed
Suse	rubygem-passenger	linux enterprise module for containers 12	`5.0.18-12.5.1`	fixed

Fixed-version evidence

Distribution	Package	Type	Release	Fixed version	Urgency	Origin	Bugs
Debian	passenger	source	sid	`5.0.30-1.1`	not yet assigned	Not reported	[884463]
Debian	passenger	source	forky	`5.0.30-1.1`	not yet assigned	Not reported	[884463]
Debian	passenger	source	trixie	`5.0.30-1.1`	not yet assigned	Not reported	[884463]
Debian	passenger	source	bookworm	`5.0.30-1.1`	not yet assigned	Not reported	[884463]
Ubuntu	passenger	deb	pro	`5.0.27-2ubuntu0.1~esm1`	Not reported	USN-5261-1	Not reported
Ubuntu	passenger	deb	pro	`5.0.27-2ubuntu0.1~esm1`	Not reported	UBUNTU-CVE-2017-16355	Not reported
Ubuntu	passenger	deb	18.04	`5.0.30-1+deb9u1build0.18.04.1`	Not reported	UBUNTU-CVE-2017-16355	Not reported
Suse	rubygem-passenger	rpm	linux enterprise module for containers 12	`5.0.18-12.5.1`	Not reported	SUSE-SU-2018:0262-1	Not reported

[Debian bug #884463]

OpenFactory catalog packages

[Debian 12 (Bookworm)]

[libapache2-mod-passenger]Fixed
Source package: [passenger]
Details (2)
- 6.0.17+ds-1 · amd64 · bookworm
  Fixed · Fixed: 5.0.30-1.1
  dsa · passenger · debian · bookworm; dsa · passenger · debian · 12
- 6.0.17+ds-1 · arm64 · bookworm
  Fixed · Fixed: 5.0.30-1.1
  dsa · passenger · debian · bookworm; dsa · passenger · debian · 12
[passenger]Fixed
Details (2)
- 6.0.17+ds-1 · amd64 · bookworm
  Fixed · Fixed: 5.0.30-1.1
  dsa · passenger · debian · bookworm; dsa · passenger · debian · 12
- 6.0.17+ds-1 · arm64 · bookworm
  Fixed · Fixed: 5.0.30-1.1
  dsa · passenger · debian · bookworm; dsa · passenger · debian · 12

[Debian 13 (Trixie)]

[libapache2-mod-passenger]Fixed
Source package: [passenger]
Details (2)
- 6.0.26+ds-1.1 · amd64 · trixie
  Fixed · Fixed: 5.0.30-1.1
  dsa · passenger · debian · 13
- 6.0.26+ds-1.1 · arm64 · trixie
  Fixed · Fixed: 5.0.30-1.1
  dsa · passenger · debian · 13
[passenger]Fixed
Details (2)
- 6.0.26+ds-1.1 · amd64 · trixie
  Fixed · Fixed: 5.0.30-1.1
  dsa · passenger · debian · 13
- 6.0.26+ds-1.1 · arm64 · trixie
  Fixed · Fixed: 5.0.30-1.1
  dsa · passenger · debian · 13

Observed: Oct 23, 2026, 5:27:24 PM UTC

References

[Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database]