CVE-2011-1006

CVE-2011-1006 refers to a heap-based buffer overflow in libcgroup/libcg, specifically in parse_cgroup_spec() within tools/tools-common.c. The flaw arises when parsing a crafted list of controllers on the command line, which could allow local users to gain privileges. The vulnerability is linked t...

CVE-2011-1022

CVE-2011-1022 affects the libcgroup (libcg) cgrulesengd component. It arises from the cgrulesengd.c function cgre_receive_netlink_msg not validating that Netlink messages originate from the kernel, allowing a local attacker to bypass resource restrictions via a crafted Netlink message. Public det...

CVE-2011-1006: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in the parsecgroupspec function in tools/tools-common.c in the Control Group Configuration Library aka libcgroup or libcg before 0.37.1 allows local users to gain privileges via a crafted controller list on the command line of an application. NOTE: it is not clear wheth...