CVEvulnerability

CVE-2011-1006

7.2 HIGH Published 2011-03-22 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2011-03-22
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-119

Description

Heap-based buffer overflow in the parse_cgroup_spec function in tools/tools-common.c in the Control Group Configuration Library (aka libcgroup or libcg) before 0.37.1 allows local users to gain privileges via a crafted controller list on the command line of an application. NOTE: it is not clear whether this issue crosses privilege boundaries.

Affected configurations

• balbir singh libcgroup (<= 0.37) • balbir singh libcgroup 0.1b • balbir singh libcgroup 0.1c • balbir singh libcgroup 0.2 • balbir singh libcgroup 0.3 • balbir singh libcgroup 0.31 • balbir singh libcgroup 0.32 • balbir singh libcgroup 0.32.1 • balbir singh libcgroup 0.32.2 • balbir singh libcgroup 0.33 • balbir singh libcgroup 0.34 • balbir singh libcgroup 0.35 • balbir singh libcgroup 0.35.1 • balbir singh libcgroup 0.36 • balbir singh libcgroup 0.36.1 • balbir singh libcgroup 0.36.2 • balbir singh libcgroup 0.37

Related

Weakness · CWE (1)

  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness

References