CVE-2011-1006

CVE-2011-1006 refers to a heap-based buffer overflow in libcgroup/libcg, specifically in parse_cgroup_spec() within tools/tools-common.c. The flaw arises when parsing a crafted list of controllers on the command line, which could allow local users to gain privileges. The vulnerability is linked t...

CVE-2011-1006: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in the parsecgroupspec function in tools/tools-common.c in the Control Group Configuration Library aka libcgroup or libcg before 0.37.1 allows local users to gain privileges via a crafted controller list on the command line of an application. NOTE: it is not clear wheth...