Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2018-12615
5
MEDIUMCVSS v2
Published
June 21, 2018
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
An issue was discovered in switchGroup() in agent/ExecHelper/ExecHelperMain.cpp in Phusion Passenger before 5.3.2. The set of groups (gidset) is not set correctly, leaving it up to randomness (i.e., uninitialized memory) which supplementary groups are actually being set while lowering privileges.
phusion/passenger
GitHubA fast and robust web server and application server for Ruby, Python and Node.js
GitHubA fast and robust web server and application server for Ruby, Python and Node.js< 5.3.2NVD