CVE-2014-1831
Fixed in a distro release EPSS <1%
Phusion Passenger before 4.0.37 allows local users to write to certain files and directories via a symlink attack on (1) control_process.pid or a (2) generation-* file.
Products: phusion passenger
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| RubyGems | passenger | 4.0.38 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | passenger | 4.0.37-1 |
| Debian 13 | passenger | 4.0.37-1 |
| Debian 14 | passenger | 4.0.37-1 |