CVE-2014-1425

CVE-2014-1425 concerns cgmanager 0.32, where improper nesting when modifying cgroup properties allows a local attacker within a privileged container to set cgroup values for all cgroups. The Ubuntu security notice USN-2451-1 documents the fix, updating cgmanager to versions 0.32-4ubuntu1.1 (14.10...

USN-2451-1 cgmanager vulnerability

Serge Hallyn discovered that cgmanager did not consistently enforce proper nesting when modifying cgroup properties. A local attacker in a privileged container could use this to set cgroup values for all cgroups...