{"action":"Upgrade tmpreaper to 1.6.14 or later.","affected":[{"fixed":"1.6.14","introduced":"0"}],"component":"tmpreaper","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:14","exploited":false,"fixed_versions":["1.6.14"],"id":"tcs_01M5NE5TS48E2J3N4EN5CD329N","modified_at":"2026-09-21T07:01:24.331170556Z","published_at":"2019-02-04T18:29:00.247Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2019-3461","https://security-tracker.debian.org/tracker/CVE-2019-3461"],"severity":{"label":"high","score":7},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2019-3461#Debian:14/tmpreaper","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2019-3461"}],"summary":"Debian tmpreaper version 1.6.13+nmu1 has a race condition when doing a (bind) mount via rename() which could result in local privilege escalation. Mounting via rename() could potentially lead to a fil"}