CVE-2019-3461: Race Condition
Debian tmpreaper version 1.6.13+nmu1 has a race condition when doing a (bind) mount via rename() which could result in local privilege escalation. Mounting via rename() could potentially lead to a file being placed elsewhereon the filesystem hierarchy (e.g. /etc/cron.d/) if the directory being cleaned up was on the same physical filesystem. Fixed versions include 1.6.13+nmu1+deb9u1 and 1.6.14.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-3461?
CVE-2019-3461 is classified as a high-severity vulnerability due to its potential for local privilege escalation.
How do I fix CVE-2019-3461?
To fix CVE-2019-3461, upgrade tmpreaper to version 1.6.14+nmu2 or later.
Which software versions are affected by CVE-2019-3461?
CVE-2019-3461 affects Debian tmpreaper version 1.6.13+nmu1 and potentially Debian Linux releases 8.0 and 9.0 when using this package.
What exploitation method is described in CVE-2019-3461?
CVE-2019-3461 describes a race condition that can be exploited by performing a bind mount via the rename() function.
Can CVE-2019-3461 affect the system files?
Yes, successful exploitation of CVE-2019-3461 could lead to the placement of files in critical system directories, potentially affecting system integrity.