High severity7.0NVD Advisory· Published Jun 17, 2018· Updated Jun 17, 2026
CVE-2018-12029
CVE-2018-12029
Description
A race condition in the nginx module in Phusion Passenger 3.x through 5.x before 5.3.2 allows local escalation of privileges when a non-standard passenger_instance_registry_dir with insufficiently strict permissions is configured. Replacing a file with a symlink after the file was created, but before it was chowned, leads to the target of the link being chowned via the path. Targeting sensitive files such as root's crontab file allows privilege escalation.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
passengerRubyGems | >= 3.0.0, < 5.3.2 | 5.3.2 |
Affected products
2- ghsa-coords2 versionspkg:gem/passengerpkg:rpm/suse/rubygem-passenger&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Containers%2012
>= 3.0.0, < 5.3.2+ 1 more
- (no CPE)range: >= 3.0.0, < 5.3.2
- (no CPE)range: < 5.0.18-12.9.1
Patches
Vulnerability mechanics
References
8- blog.phusion.nl/passenger-5-3-2nvdMitigationVendor AdvisoryWEB
- github.com/advisories/GHSA-jjcj-fgfm-9g9rghsaADVISORY
- lists.debian.org/debian-lts-announce/2018/06/msg00007.htmlnvdMailing ListThird Party AdvisoryWEB
- nvd.nist.gov/vuln/detail/CVE-2018-12029ghsaADVISORY
- pulsesecurity.co.nz/advisories/phusion-passenger-priv-escnvdThird Party AdvisoryWEB
- security.gentoo.org/glsa/201807-02nvdThird Party AdvisoryWEB
- blog.phusion.nl/2018/06/12/passenger-5-3-2-various-security-fixesghsaWEB
- github.com/rubysec/ruby-advisory-db/blob/master/gems/passenger/CVE-2018-12029.ymlghsaWEB
News mentions
0No linked articles in our index yet.