Executive Summary

Titletmpreaper security update
NameDSA-4365First vendor Publication2019-01-10
VendorDebianLast vendor Modification2019-01-10
Severity (Vendor) N/ARevision1

Security-Database Scoring CVSS v2

Cvss vector :
Cvss Base ScoreN/AAttack RangeN/A
Cvss Impact ScoreN/AAttack ComplexityN/A
Cvss Expoit ScoreN/AAuthenticationN/A
Calculate full CVSS 2.0 Vectors scores


Stephen Roettger discovered a race condition in tmpreaper, a program that cleans up files in directories based on their age, which could result in local privilege escalation.

For the stable distribution (stretch), this problem has been fixed in version 1.6.13+nmu1+deb9u1.

We recommend that you upgrade your tmpreaper packages.

For the detailed security status of tmpreaper please refer to its security tracker page at: https://security-tracker.debian.org/tracker/tmpreaper

Original Source

Url : http://www.debian.org/security/2019/dsa-4365

Alert History

If you want to see full details history, please login or register.
2019-01-11 00:18:18
  • First insertion