CVE Vulnerabilities

CVE-2011-1022

Published: Mar 22, 2011 | Modified: Sep 07, 2011
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
2.1 LOW
AV:L/AC:L/Au:N/C:N/I:P/A:N
RedHat/V2
RedHat/V3
Ubuntu

The cgre_receive_netlink_msg function in daemon/cgrulesengd.c in cgrulesengd in the Control Group Configuration Library (aka libcgroup or libcg) before 0.37.1 does not verify that netlink messages originated in the kernel, which allows local users to bypass intended resource restrictions via a crafted message.

Affected Software

Name Vendor Start Version End Version
Libcgroup Balbir_singh 0.32.2 0.32.2
Libcgroup Balbir_singh 0.36 0.36
Libcgroup Balbir_singh 0.1c 0.1c
Libcgroup Balbir_singh 0.31 0.31
Libcgroup Balbir_singh 0.3 0.3
Libcgroup Balbir_singh 0.33 0.33
Libcgroup Balbir_singh 0.37 0.37
Libcgroup Balbir_singh * 0.37
Libcgroup Balbir_singh 0.35 0.35
Libcgroup Balbir_singh 0.34 0.34
Libcgroup Balbir_singh 0.36.2 0.36.2
Libcgroup Balbir_singh 0.2 0.2
Libcgroup Balbir_singh 0.32 0.32
Libcgroup Balbir_singh 0.32.1 0.32.1
Libcgroup Balbir_singh 0.36.1 0.36.1
Libcgroup Balbir_singh 0.35.1 0.35.1
Libcgroup Balbir_singh 0.1b 0.1b

References