Back to search
CVE-2011-1006
Published: Mar 22, 2011
Modified: Aug 6, 2024
PUBLISHED
Description
Heap-based buffer overflow in the parse_cgroup_spec function in tools/tools-common.c in the Control Group Configuration Library (aka libcgroup or libcg) before 0.37.1 allows local users to gain privileges via a crafted controller list on the command line of an application. NOTE: it is not clear whether this issue crosses privilege boundaries.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
43758
third-party-advisory
x_refsource_SECUNIA
https://bugzilla.redhat.com/show_bug.cgi?id=678107
x_refsource_CONFIRM
44093
third-party-advisory
x_refsource_SECUNIA
46729
vdb-entry
x_refsource_BID
43891
third-party-advisory
x_refsource_SECUNIA
DSA-2193
vendor-advisory
x_refsource_DEBIAN
openSUSE-SU-2011:0316
vendor-advisory
x_refsource_SUSE
FEDORA-2011-2631
vendor-advisory
x_refsource_FEDORA
ADV-2011-0679
vdb-entry
x_refsource_VUPEN
ADV-2011-0774
vdb-entry
x_refsource_VUPEN
RHSA-2011:0320
vendor-advisory
x_refsource_REDHAT
43611
third-party-advisory
x_refsource_SECUNIA
FEDORA-2011-2638
vendor-advisory
x_refsource_FEDORA
1025158
vdb-entry
x_refsource_SECTRACK
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now