Race Condition in Replaced Executable Detection Allows Arbitrary Code Execution as Root
CVE-2021-3899

Currently unrated

Key Information:

Status
Vendor
CVE Published:
3 June 2024

Summary

A race condition exists within Ubuntu's 'replaced executable' detection mechanism. This vulnerability allows attackers, under certain local configurations, to execute arbitrary code with root privileges. Proper configuration may increase the risk of exploitation, making it critical for system administrators to assess their systems and apply the latest security patches. Further details about the vulnerability can be referenced through official vendor advisories and issue tracking reports.

Affected Version(s)

Apport Linux 0 < 2.21.0

References

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Muqing Liu from Singurlar Security Lab
neoni
.