uWSGI before 2.0.17 mishandles a DOCUMENT_ROOT check during use of the --php-docroot option, allowing directory traversal.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - uWSGI before 2.0.17 mishandles a DOCUMENT_ROOT check during use of the --php-docroot option, allowing
    directory traversal. (CVE-2018-7490)

- Fix building in Rawhide (#1556525) (Jakub Jelen)

  - Disable tcp_wrappers for Fedora 28 and newer (Jakub     Jelen)

---

  - Modernize and generalize building of Python subpackages :

  - replace python with python2

  - use appropriate macros for when refering to Python 3

  - prefix Python-dependent plugins with the version of     Python they are built with

  - Also build Python 3 subpackages for the other Python 3     version in EPEL7

---

  - Build Python 3 version(s) of gevent plugin on Fedora and     EPEL7

  - Build Python 3 version of greenlet plugin on Fedora and     EPEL7

  - Build Python 2 version of greenlet plugin on EPEL7

  - Always build Python 3 version of tornado plugin when     building with Python 3 (drop python3_tornado build     conditional)

---

  - Latest upstream (rhbz#1549354)

  - Enable uwsgi-plugin-coroae on EL7

  - Use systemd tmpfiles to create /run/uwsgi with group     write permissions (rhbz#1427303)

  - Use /var/run/uwsgi when not using systemd

  - Build with versioned python command

  - Remove %%config from systemd unit file

  - Disable greenlet plugin on EL7

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

- Conditionally disable router-access for tcp_wrappers     deprecation (Jorge Gallegos)

  - Updated to 2.0.16 which includes fix for CVE-2018-6758     (Jorge Gallegos)

---

  - Modernize and generalize building of Python subpackages :

  - replace python with python2

  - use appropriate macros for when refering to Python 3

  - prefix Python-dependent plugins with the version of     Python they are built with

  - Also build Python 3 subpackages for the other Python 3     version in EPEL7

---

  - Build Python 3 version(s) of gevent plugin on Fedora and     EPEL7

  - Build Python 3 version of greenlet plugin on Fedora and     EPEL7

  - Build Python 2 version of greenlet plugin on EPEL7

  - Always build Python 3 version of tornado plugin when     building with Python 3 (drop python3_tornado build     conditional)

---

  - Latest upstream (rhbz#1549354)

  - Enable uwsgi-plugin-coroae on EL7

  - Use systemd tmpfiles to create /run/uwsgi with group     write permissions (rhbz#1427303)

  - Use /var/run/uwsgi when not using systemd

  - Build with versioned python command

  - Remove %%config from systemd unit file

  - Disable greenlet plugin on EL7

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Marios Nicolaides discovered that the PHP plugin in uWSGI, a fast, self-healing application container server, does not properly handle a DOCUMENT_ROOT check during use of the --php-docroot option, allowing a remote attacker to mount a directory traversal attack and gain unauthorized read access to sensitive files located outside of the web root directory.

ID	Name	Product	Family	Severity
433498	SCA: security update for uWSGI (GHSA-h2vm-c85r-5vh5)	Tenable Cloud Security	SCA Checks	high
433498	SCA: security update for uWSGI (GHSA-h2vm-c85r-5vh5)	Tenable Self-Hosted Container Security	SCA Checks	high
407448	Alpine: uwsgi: security update to 2.0.17-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	high
407448	Alpine: uwsgi: security update to 2.0.17-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	high
120701	Fedora 28 : uwsgi (2018-acfce682f4)	Nessus	Fedora Local Security Checks	high
111235	Fedora 27 : uwsgi (2018-04b3af1edf)	Nessus	Fedora Local Security Checks	critical
108419	Debian DSA-4142-1 : uwsgi - security update	Nessus	Debian Local Security Checks	high

Detections

Analytics

CVE-2018-7490

high

Tenable Plugins

high

high

high

high

high

critical

high