CVE-2011-1022 | BDVDB-2026-45563 Detail
Description#
The cgre_receive_netlink_msg function in daemon/cgrulesengd.c in cgrulesengd in the Control Group Configuration Library (aka libcgroup or libcg) before 0.37.1 does not verify that netlink messages originated in the kernel, which allows local users to bypass intended resource restrictions via a crafted message.
Impact#
No impact statement in the source data.
Weaknesses#
No weakness recorded in the source data.
References#
- http://openwall.com/lists/oss-security/2011/02/25/11
- http://secunia.com/advisories/43758
- http://secunia.com/advisories/44093
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=615987
- http://www.securitytracker.com/id?1025157
- http://www.securityfocus.com/bid/46578
- http://sourceforge.net/projects/libcg/files/libcgroup/v0.37.1/libcgroup-0.37.1.tar.bz2/download
- http://secunia.com/advisories/43891
- http://www.debian.org/security/2011/dsa-2193
- http://lists.opensuse.org/opensuse-updates/2011-04/msg00027.html
- http://lists.fedoraproject.org/pipermail/package-announce/2011-March/056683.html
- http://www.vupen.com/english/advisories/2011/0679
- http://www.vupen.com/english/advisories/2011/0774
- http://sourceforge.net/mailarchive/message.php?msg_id=26598749
- http://openwall.com/lists/oss-security/2011/02/25/14
Show all 23
- https://bugzilla.redhat.com/show_bug.cgi?id=680409
- http://www.redhat.com/support/errata/RHSA-2011-0320.html
- http://openwall.com/lists/oss-security/2011/02/25/12
- http://secunia.com/advisories/43611
- http://lists.fedoraproject.org/pipermail/package-announce/2011-March/056734.html
- http://openwall.com/lists/oss-security/2011/02/25/6
- http://openwall.com/lists/oss-security/2011/02/25/9
- http://sourceforge.net/mailarchive/message.php?msg_id=27102603
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.