Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Debian Subscribe
Filtered by product Tmpreaper
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2019-3461 1 Debian 2 Debian Linux, Tmpreaper 2019-07-29 4.4 MEDIUM 7.0 HIGH
Debian tmpreaper version 1.6.13+nmu1 has a race condition when doing a (bind) mount via rename() which could result in local privilege escalation. Mounting via rename() could potentially lead to a file being placed elsewhereon the filesystem hierarchy (e.g. /etc/cron.d/) if the directory being cleaned up was on the same physical filesystem. Fixed versions include 1.6.13+nmu1+deb9u1 and 1.6.14.