RHEL 6 : libcgroup (RHSA-2011:0320)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2011:0320 advisory. The libcgroup packages provide tools and libraries to control and monitor control groups. A heap-based buffer overflow flaw was found in the...

Important: Red Hat Security Advisory: libcgroup security update

Updated libcgroup packages that fix two security issues are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...

libcgroup: Uncheck origin of NETLINK messages

The cgrereceivenetlinkmsg function in daemon/cgrulesengd.c in cgrulesengd in the Control Group Configuration Library aka libcgroup or libcg before 0.37.1 does not verify that netlink messages originated in the kernel, which allows local users to bypass intended resource restrictions via a crafted...

libcgroup: Heap-based buffer overflow by converting list of controllers for given task into an array of strings

Heap-based buffer overflow in the parsecgroupspec function in tools/tools-common.c in the Control Group Configuration Library aka libcgroup or libcg before 0.37.1 allows local users to gain privileges via a crafted controller list on the command line of an application. NOTE: it is not clear wheth...

Security fix for the ALT Linux 6 package libcgroup version 0.37.1-alt1

March 3, 2011 Alexey Shabalin 0.37.1-alt1 - 0.37.1 - Fix buffer overflow when processing list of controllers from command line CVE-2011-1006...

PT-2011-1038 · Linux +1 · Libcgroup-Debuginfo +4

Name of the Vulnerable Software and Affected Versions: libcgroup versions prior to 0.37.1 libcgroup-pam version 0.36.1 libcgroup-devel version 0.36.1 libcgroup-debuginfo version 0.36.1 Description: The issue concerns multiple vulnerabilities in the libcgroup package, which can lead to a breach of...