PT-2018-2638 · Debian+1 · Tmpreaper+1

Stephen Roettger · Publicado 2018-10-23 · Atualizado 2019-07-29 · CVE-2019-3461

Positive Technologies (AI Summary)

CVSS v3.1

7.0

Alta

Vetor base

AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions tmpreaper versions prior to 1.6.13+nmu1+deb9u1 tmpreaper versions prior to 1.6.14

Description The issue is related to a race condition when performing a mount via rename() in tmpreaper, potentially allowing an attacker to escalate privileges or place files in arbitrary locations within the file system hierarchy. This could include sensitive areas such as /etc/cron.d/ if the directory being cleaned up is on the same physical filesystem.

Recommendations For tmpreaper versions prior to 1.6.13+nmu1+deb9u1, update to version 1.6.13+nmu1+deb9u1 or later. For tmpreaper versions prior to 1.6.14, update to version 1.6.14 or later.

Correção

LPE

Race Condition

Enumeração de Fraquezas

CWE-362

Identificadores relacionados

BDU:2019-01255

CVE-2019-3461

DLA-1640-1

DSA-4365-1

USN-4077-1

Produtos afetados

Ubuntu

Tmpreaper

Referências · 16

• https://lists.debian.org/debian-lts-announce/2019/01/msg00017.html · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2019-3461 · Aviso do Fabricante
• https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=918956 · Aviso do Fabricante
• https://osv.dev/vulnerability/DEBIAN-CVE-2019-3461 · Aviso do Fabricante
• https://usn.ubuntu.com/4077-1 · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/CVE-2019-3461 · Aviso do Fabricante
• https://ubuntu.com/security/notices/USN-4077-1 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-3461 · Nota de Segurança
• https://osv.dev/vulnerability/USN-4077-1 · Aviso do Fabricante
• https://cve.org/CVERecord?id=CVE-2019-3461 · Nota de Segurança
• https://lists.debian.org/debian-security-announce/2019/msg00003.html · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2019-01255 · Nota de Segurança
• https://osv.dev/vulnerability/DSA-4365-1 · Aviso do Fabricante
• https://osv.dev/vulnerability/UBUNTU-CVE-2019-3461 · Aviso do Fabricante
• https://osv.dev/vulnerability/DLA-1640-1 · Aviso do Fabricante