CVE-2019-3461

CVE-2019-3461 affects Debian tmpreaper 1.6.13+nmu1, due to a race condition during a (bind) mount via rename(). If the directory being cleaned is on the same filesystem, a mount could cause a file to land elsewhere in the hierarchy (e.g., /etc/cron.d/), enabling local privilege elevation. The iss...