QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2011-1022

Back to search

CVE-2011-1022

Published: Mar 22, 2011

Modified: Aug 6, 2024

PUBLISHED

Description

The cgre_receive_netlink_msg function in daemon/cgrulesengd.c in cgrulesengd in the Control Group Configuration Library (aka libcgroup or libcg) before 0.37.1 does not verify that netlink messages originated in the kernel, which allows local users to bypass intended resource restrictions via a crafted message.

VendorProductVersions

n/a

n/a

affected
n/a

References

43758
third-party-advisory
x_refsource_SECUNIA
44093
third-party-advisory
x_refsource_SECUNIA
1025157
vdb-entry
x_refsource_SECTRACK
46578
vdb-entry
x_refsource_BID
43891
third-party-advisory
x_refsource_SECUNIA
DSA-2193
vendor-advisory
x_refsource_DEBIAN
openSUSE-SU-2011:0316
vendor-advisory
x_refsource_SUSE
FEDORA-2011-2631
vendor-advisory
x_refsource_FEDORA
ADV-2011-0679
vdb-entry
x_refsource_VUPEN
ADV-2011-0774
vdb-entry
x_refsource_VUPEN
RHSA-2011:0320
vendor-advisory
x_refsource_REDHAT
43611
third-party-advisory
x_refsource_SECUNIA
FEDORA-2011-2638
vendor-advisory
x_refsource_FEDORA

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now