CVE-2019-3461

Debian tmpreaper version 1.6.13+nmu1 has a race condition when doing a (bind) mount via rename() which could result in local privilege escalation. Mounting via rename() could potentially lead to a file being placed elsewhereon the filesystem hierarchy (e.g. /etc/cron.d/) if the directory being cleaned up was on the same physical filesystem. Fixed versions include 1.6.13+nmu1+deb9u1 and 1.6.14.

• CWE-362

• https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=918956Mailing List, Vendor Advisory
• https://lists.debian.org/debian-lts-announce/2019/01/msg00017.htmlVendor Advisory
• https://lists.debian.org/debian-security-announce/2019/msg00003.htmlMailing List, Vendor Advisory
• https://usn.ubuntu.com/4077-1/
• https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=918956Mailing List, Vendor Advisory
• https://lists.debian.org/debian-lts-announce/2019/01/msg00017.htmlVendor Advisory
• https://lists.debian.org/debian-security-announce/2019/msg00003.htmlMailing List, Vendor Advisory
• https://usn.ubuntu.com/4077-1/

Published

Feb 4, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-3428The version V6.01.03.01 of ZTE ZXCDN IAMWEB product is impac…6.5
• CVE-2019-3429All versions up to V4.01.01.02 of ZTE ZXCLOUD GoldenData VAP…5.3
• CVE-2019-3430All versions up to V4.01.01.02 of ZTE ZXCLOUD GoldenData VAP…4.9
• CVE-2019-3431All versions up to V4.01.01.02 of ZTE ZXCLOUD GoldenData VAP…9.8
• CVE-2019-3459A heap address information leak while using L2CAP_GET_CONF_O…6.5
• CVE-2019-3460A heap data infoleak in multiple locations including L2CAP_P…6.5
• CVE-2019-3462Incorrect sanitation of the 302 redirect field in HTTP trans…8.1
• CVE-2019-3463Insufficient sanitization of arguments passed to rsync can b…9.8
• CVE-2019-3464Insufficient sanitization of environment variables passed to…9.8
• CVE-2019-3465Rob Richards XmlSecLibs, all versions prior to v3.0.3, as us…8.8
• CVE-2019-3466The pg_ctlcluster script in postgresql-common in versions pr…7.8
• CVE-2019-3467Debian-edu-config all versions < 2.11.10, a set of configura…7.8