Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
5.9

Ubuntu SELinux script can let attacker create empty files anywhere

CVE-2011-3151 · published 7 years ago
Summary

The SELinux startup script in Ubuntu versions before 1:0.10 creates a lock file in a directory that anyone can write to. On systems without kernel protection against malicious links, an attacker could force the creation of zero‑byte files on any writable storage. Update the script to version 1:0.10 or later to stop this behavior.

What to do
  • Update canonical selinux to version 1\:0.10 or later.
Affected software
VendorProductAffected versions
canonical selinux < 1\:0.10
cpe:2.3:a:canonical:selinux:*:*:*:*:*:*:*:*
Original advisory text
The Ubuntu SELinux initscript before version 1:0.10 used touch to create a lockfile in a world-writable directory. If the OS kernel does not have symlink protections then an attacker can cause a ze...
The Ubuntu SELinux initscript before version 1:0.10 used touch to create a lockfile in a world-writable directory. If the OS kernel does not have symlink protections then an attacker can cause a zero byte file to be allocated on any writable filesystem.
References
Fix within
Internet-facing 14 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically (estimated)
  • Gives an attacker partial control (estimated)
Severity
5.9 Medium
Exploitation
<1% chance of attack within 30 days
Type
CWE-693Protection Mechanism Failure
Timeline
Published22 Apr 2019
Updated4 Nov 2026
First seen29 Sep 2026
Sources
CVE-2011-3151 · NVD
Track software like this
Free during beta