CVE-2011-1006
N/A
Published: March 22, 2011 at 05:00 PM UTC
Updated: June 16, 2026 at 11:28 PM UTC
1 product affected across 1 vendorLibcgroup
Using N/A by N/A?
Get instant alerts when new vulnerabilities affect N/A - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 0.4%
Description
Heap-based buffer overflow in the parse_cgroup_spec function in tools/tools-common.c in the Control Group Configuration Library (aka libcgroup or libcg) before 0.37.1 allows local users to gain privileges via a crafted controller list on the command line of an application. NOTE: it is not clear whether this issue crosses privilege boundaries.
Remediation
No guide yetNo remediation guidance has been written for this CVE yet. What the record does show:
Patch and advisory references
References (16)
Vendor Advisoryx_refsource_FEDORA
Source: [email protected]
http://lists.fedoraproject.org/pipermail/package-announce/2011-March/056683.htmlVendor Advisoryx_refsource_FEDORA
Source: [email protected]
http://lists.fedoraproject.org/pipermail/package-announce/2011-March/056734.htmlVendor Advisoryx_refsource_SUSE
Source: [email protected]
http://lists.opensuse.org/opensuse-updates/2011-04/msg00027.htmlThird Party Advisoryx_refsource_SECUNIAVendor Advisory
Source: [email protected]
http://secunia.com/advisories/43611Third Party Advisoryx_refsource_SECUNIAVendor Advisory
Source: [email protected]
http://secunia.com/advisories/43758Quick Info
StatusMODIFIED
CWE
CWE-119
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card