7

CVE-2019-3461: debian gnu/linux tmpreaper Race Condition

CVSS: 7.0v3.0HighModified
AliasesUBUNTU-CVE-2019-3461USN-4077-1DEBIAN-CVE-2019-3461
Published 04-02-2019Last modified 16-09-2024
Open JSON

Vulnerability summary

CVE-2019-3461 is a high (CVSS 7.0) Race Condition vulnerability in debian gnu/linux tmpreaper. EPSS estimates a 0.25% chance of exploitation in the next 30 days, higher than 15.8% of scored vulnerabilities.

Overall risk
28/100
0100
Medium · default modelHow is this calculated?
CVSS score
7.0/10
010
High · v3.0 (NVD)
EPSS score
0.25%
0%100%
Low · -0.02 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Timeline

  1. 04-02-2019
    PublishedVulnerability first disclosed.
  2. 16-09-2024
    Last modifiedVulnerability information updated.

Description

Debian tmpreaper version 1.6.13+nmu1 has a race condition when doing a (bind) mount via rename() which could result in local privilege escalation. Mounting via rename() could potentially lead to a file being placed elsewhereon the filesystem hierarchy (e.g. /etc/cron.d/) if the directory being cleaned up was on the same physical filesystem. Fixed versions include 1.6.13+nmu1+deb9u1 and 1.6.14.

CVSS metrics

4 scores · 3 sources · 2 versions

EPSS trend

Probability

0.25%

Chance of exploitation in the next 30 days

Percentile

16%

Versus all other CVEs

30-day change

-0.02 pp

From 0.27% on 21-09-2026

21-09-202621-10-2026
EPSS score
0.25%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Debian3 products
  • tmpreaper< 1.6.14 | < 1.6.13+nmu1+deb9u1 | < 1.6.13+nmu1+deb8u1
  • debian_linuxEOL8.0 | 9.0
  • tmpreaper1.6.13\+nmu1
Debian gnu/linux1 product
Ubuntu1 product
  • tmpreaperAll versions (No fix recorded) | < 1.6.13+nmu1+deb9u1build0.16.04.1 | < 1.6.13+nmu1+deb9u1build0.18.04.1

3 vendors · 5 products

References

8 links