https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 01 Oct 2026 20:44:53 +0000 https://db.gcve.eu/vuln/cve-2019-3461 <p><strong>Affected:</strong> Debian GNU/Linux tmpreaper</p> <p>Debian tmpreaper version 1.6.13+nmu1 has a race condition when doing a (bind) mount via rename() which could result in local privilege escalation. Mounting via rename() could potentially lead to a file being placed elsewhereon the filesystem hierarchy (e.g. /etc/cron.d/) if the directory being cleaned up was on the same physical filesystem. Fixed versions include 1.6.13+nmu1+deb9u1 and 1.6.14.</p> <p><strong>Affected:</strong> Debian GNU/Linux tmpreaper</p> <p>Debian tmpreaper version 1.6.13+nmu1 has a race condition when doing a (bind) mount via rename() which could result in local privilege escalation. Mounting via rename() could potentially lead to a file being placed elsewhereon the filesystem hierarchy (e.g. /etc/cron.d/) if the directory being cleaned up was on the same physical filesystem. Fixed versions include 1.6.13+nmu1+deb9u1 and 1.6.14.</p> https://db.gcve.eu/vuln/cve-2019-3461 https://db.gcve.eu/vuln/usn-4077-1 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: tmpreaper, Ubuntu:18.04:LTS: tmpreaper</p> <p>It was discovered that tmpreaper incorrectly handled certain mount operations. A local attacker could possibly use this issue to create arbitrary files, leading to privilege escalation.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: tmpreaper, Ubuntu:18.04:LTS: tmpreaper</p> <p>It was discovered that tmpreaper incorrectly handled certain mount operations. A local attacker could possibly use this issue to create arbitrary files, leading to privilege escalation.</p> https://db.gcve.eu/vuln/usn-4077-1