PT-2011-1009 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 3.1 Description: The issue allows local users to obtain sensitive I/O statistics, potentially revealing confidential information such as the length of another user's password. This is achieved by sending tasksta...

Linux Kernel 2.6.283.0 (DEC Alpha Linux) - Local Privilege Escalation

Linux Kernel 2.6.283.0 DEC Alpha Linux - Local Privilege Escalation / DEC Alpha Linux include include include include include include include include include include define SYSosfwait4 7 define SOCKOFFSET 552 / Offset of skdestruct fptr in sock struct, change for your kernel / define PAGESIZE 819...

CVE-2011-1823

The vold volume manager daemon on Android 3.0 and 2.x before 2.3.4 trusts messages that are received from a PFNETLINK socket, which allows local users to execute arbitrary code and gain root privileges via a negative index that bypasses a maximum-only signed integer check in the...

Debian Security Advisory DSA 2193-1 (libcgroup)

The remote host is missing an update to libcgroup announced via advisory DSA 2193-1. OpenVAS Vulnerability Test $Id: deb21931.nasl 6613 2017-07-07 12:08:40Z cfischer $ Description: Auto-generated from advisory DSA 2193-1 libcgroup Authors: Thomas Reinke Copyright: Copyright c 2011 E-Soft Inc...

openSUSE Security Update : dhcpcd (openSUSE-SU-2011:0342-1)

This update fixes the following security issue : A rogue DHCP server could instruct clients to use a host name that contains shell meta characters. Since many scripts in the system do not expect unusal characters in the system's host name the DHCP client needs to sanitize the host name offered by...

openSUSE Security Update : libcgroup-devel (openSUSE-SU-2011:0316-1)

libcgroup suffered from a heap based buffer overflow CVE-2011-1006. The cgrulesengd daemon did not verify the origin of netlink messages, allowing local users to spoof events CVE-2011-1022. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin...

SuSE 11.1 Security Update : libcgroup (SAT Patch Number 4081)

The following bugs have been fixed : - libcgroup suffered from a heap-based buffer overflow. CVE-2011-1006 - The cgrulesengd daemon did not verify the origin of netlink messages, allowing local users to spoof events. CVE-2011-1022 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descripti...

DEBIAN-CVE-2011-1022

The cgrereceivenetlinkmsg function in daemon/cgrulesengd.c in cgrulesengd in the Control Group Configuration Library aka libcgroup or libcg before 0.37.1 does not verify that netlink messages originated in the kernel, which allows local users to bypass intended resource restrictions via a crafted...

CVE-2011-1022

The cgrereceivenetlinkmsg function in daemon/cgrulesengd.c in cgrulesengd in the Control Group Configuration Library aka libcgroup or libcg before 0.37.1 does not verify that netlink messages originated in the kernel, which allows local users to bypass intended resource restrictions via a crafted...

CVE-2011-1022

The cgrereceivenetlinkmsg function in daemon/cgrulesengd.c in cgrulesengd in the Control Group Configuration Library aka libcgroup or libcg before 0.37.1 does not verify that netlink messages originated in the kernel, which allows local users to bypass intended resource restrictions via a crafted...

CVE-2011-1022

The cgrereceivenetlinkmsg function in daemon/cgrulesengd.c in cgrulesengd in the Control Group Configuration Library aka libcgroup or libcg before 0.37.1 does not verify that netlink messages originated in the kernel, which allows local users to bypass intended resource restrictions via a crafted...

UBUNTU-CVE-2011-1022

The cgrereceivenetlinkmsg function in daemon/cgrulesengd.c in cgrulesengd in the Control Group Configuration Library aka libcgroup or libcg before 0.37.1 does not verify that netlink messages originated in the kernel, which allows local users to bypass intended resource restrictions via a crafted...

CVE-2011-1022

CVE-2011-1022 affects the libcgroup (libcg) cgrulesengd component. It arises from the cgrulesengd.c function cgre_receive_netlink_msg not validating that Netlink messages originate from the kernel, allowing a local attacker to bypass resource restrictions via a crafted Netlink message. Public det...

Debian DSA-2193-1 : libcgroup - several vulnerabilities

Several issues have been discovered in libcgroup, a library to control and monitor control groups : - CVE-2011-1006 Heap-based buffer overflow by converting list of controllers for given task into an array of strings could lead to privilege escalation by a local attacker. - CVE-2011-1022 libcgrou...

[SECURITY] [DSA 2193-1] libcgroup security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2193-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst March 16, 2011 http://www.debian.org/security/faq -...

DSA-2193-1 libcgroup - several

Bulletin has no description...

RHEL 6 : libcgroup (RHSA-2011:0320)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2011:0320 advisory. The libcgroup packages provide tools and libraries to control and monitor control groups. A heap-based buffer overflow flaw was found in the...

Important: Red Hat Security Advisory: libcgroup security update

Updated libcgroup packages that fix two security issues are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...

libcgroup: Uncheck origin of NETLINK messages

The cgrereceivenetlinkmsg function in daemon/cgrulesengd.c in cgrulesengd in the Control Group Configuration Library aka libcgroup or libcg before 0.37.1 does not verify that netlink messages originated in the kernel, which allows local users to bypass intended resource restrictions via a crafted...

PT-2011-1039

Name of the Vulnerable Software and Affected Versions libcgroup versions prior to 0.37.1 libcgroup-pam version 0.36.1 libcgroup-devel version 0.36.1 libcgroup-debuginfo version 0.36.1 Description The issue concerns multiple vulnerabilities in the libcgroup package, which can lead to breaches of...