CVE-2011-1006 Heap-based buffer overflow in the parse_cgroup_spec function in tools/tools-common.c in the Control Group Configuration Library (aka libcgroup or libcg) before 0.37.1 allows local users to gain privil...
HighCVSS 7.2
EPSS 0.42%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Heap-based buffer overflow in the parse_cgroup_spec function in tools/tools-common.c in the Control Group Configuration Library (aka libcgroup or libcg) before 0.37.1 allows local users to gain privileges via a crafted controller list on the command line of an application. NOTE: it is not clear whether this issue crosses privilege boundaries.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| balbir singh libcgroup | <= 0.37 | No fix listed |
| balbir singh libcgroup | = 0.1b | No fix listed |
| balbir singh libcgroup | = 0.1c | No fix listed |
| balbir singh libcgroup | = 0.2 | No fix listed |
| balbir singh libcgroup | = 0.3 | No fix listed |
| balbir singh libcgroup | = 0.31 | No fix listed |
| balbir singh libcgroup | = 0.32 | No fix listed |
| balbir singh libcgroup | = 0.32.1 | No fix listed |
| balbir singh libcgroup | = 0.32.2 | No fix listed |
| balbir singh libcgroup | = 0.33 | No fix listed |
| balbir singh libcgroup | = 0.34 | No fix listed |
| balbir singh libcgroup | = 0.35 | No fix listed |
| balbir singh libcgroup | = 0.35.1 | No fix listed |
| balbir singh libcgroup | = 0.36 | No fix listed |
| balbir singh libcgroup | = 0.36.1 | No fix listed |
| balbir singh libcgroup | = 0.36.2 | No fix listed |
| balbir singh libcgroup | = 0.37-rc1 | No fix listed |
| debian/libcgroup(Debian:12) | < 0.37.1-1 | 0.37.1-1 |
| debian/libcgroup(Debian:13) | < 0.37.1-1 | 0.37.1-1 |
| debian/libcgroup(Debian:14) | < 0.37.1-1 | 0.37.1-1 |
References
- libcg.git.sourceforge.net
- FEDORA-2011-2631 vendor-advisory
- FEDORA-2011-2638 vendor-advisory
- openSUSE-SU-2011:0316 vendor-advisory
- 43611 third-party-advisory vendor-advisory
- 43758 third-party-advisory vendor-advisory
- 43891 third-party-advisory
- 44093 third-party-advisory
- sourceforge.net patch
- DSA-2193 vendor-advisory
- RHSA-2011:0320 vendor-advisory
- 46729 vdb-entry
- 1025158 vdb-entry
- ADV-2011-0679 vdb-entry vendor-advisory
- ADV-2011-0774 vdb-entry
- bugzilla.redhat.com patch
- Debian Security Tracker CVE-2011-1006 vendor-advisory