Race Condition in Replaced Executable Detection Allows Arbitrary Code Execution as Root
CVE-2021-3899
Currently unrated
Summary
A race condition exists within Ubuntu's 'replaced executable' detection mechanism. This vulnerability allows attackers, under certain local configurations, to execute arbitrary code with root privileges. Proper configuration may increase the risk of exploitation, making it critical for system administrators to assess their systems and apply the latest security patches. Further details about the vulnerability can be referenced through official vendor advisories and issue tracking reports.
Affected Version(s)
Apport Linux 0 < 2.21.0
References
Timeline
Vulnerability published
Vulnerability Reserved
Credit
Muqing Liu from Singurlar Security Lab
neoni