Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:26791
HistorySep 21, 2020 - 6:18 a.m.

Privilege Escalation

2020-09-2106:18:12
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
9

0.0004 Low

EPSS

Percentile

5.1%

Debian tmpreaper is vulnerable to privilege escalation. A race condition when doing a (bind) mount via rename() occurs when mounting via rename(). A file would potentially be placed elsewhere on the filesystem hierarchy if the directory being cleaned up was on the same physical filesystem. This allows an attacker to obtain higher privileges on the system.