TI-2011-02781 Aliases CVE-2011-3151 GHSA-3wp7-vqr4-g72h

SELinux initscript misuse of touch

LOW 27CWE-693Published 2019-04-22 · Updated 2024-09-16

Key facts

Attack vector: Network
Privileges required: None
User interaction: None
Attack complexity: High
Impact type: Security bypass
Confidentiality · integrity · availability: None · High · None
Fix status: No fix listed

Attack profile from CVSS 3.0 · NVD. Fix status from CNA. Impact type from CWE-693.

Summary

The Ubuntu SELinux initscript before version 1:0.10 used touch to create a lockfile in a world-writable directory. If the OS kernel does not have symlink protections then an attacker can cause a zero byte file to be allocated on any writable filesystem.

Why it matters now

EPSS 0.00601 49th percentileScored 2026-11-07

Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
—	—	all versions	—	No fix listed	CNA

— Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 1

CPE	Versions	Role	Vendor
cpe:2.3:a:canonical:selinux::::::::	before 1\:0.10	Vulnerable	Canonical

cpe:2.3:a:canonical:selinux:*:*:*:*:*:*:*:* Versions before 1\:0.10 Vulnerable ·Canonical

Remediation

No fixed version listed by the sources yet.

Timeline

2026-10-02 Threatist record created from CVE-2011-3151
2026-10-03 Alias added: GHSA-3wp7-vqr4-g72h

References

Patch 1

https://launchpadlibrarian.net/88098106/selinux_0.10~10.04.1.debdiff

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences