CVE-2011-1022

Published: Mar 22, 2011Modified: Apr 29, 2026

2.1

Vector

AV:L/AC:L/Au:N/C:N/I:P/A:N

Exploitability: 3.9 / Impact: 2.9

Source: NVD

Description

The cgre_receive_netlink_msg function in daemon/cgrulesengd.c in cgrulesengd in the Control Group Configuration Library (aka libcgroup or libcg) before 0.37.1 does not verify that netlink messages originated in the kernel, which allows local users to bypass intended resource restrictions via a crafted message.

Affected (17)

Products: Balbir Singh: Libcgroup

1 product

Configuration A

17 vulnerable

Vulnerable Software	Affected Versions
Balbir Singh Libcgroup	Up to 0.37
Balbir Singh Libcgroup	Version 0.1b
Balbir Singh Libcgroup	Version 0.1c
Balbir Singh Libcgroup	Version 0.2
Balbir Singh Libcgroup	Version 0.31
Balbir Singh Libcgroup	Version 0.32.1
Balbir Singh Libcgroup	Version 0.32.2
Balbir Singh Libcgroup	Version 0.32
Balbir Singh Libcgroup	Version 0.33
Balbir Singh Libcgroup	Version 0.34
Balbir Singh Libcgroup	Version 0.35.1
Balbir Singh Libcgroup	Version 0.35
Balbir Singh Libcgroup	Version 0.36.1
Balbir Singh Libcgroup	Version 0.36.2
Balbir Singh Libcgroup	Version 0.36
Balbir Singh Libcgroup	Version 0.37 rc1
Balbir Singh Libcgroup	Version 0.3

Related CWEs

References (46)

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=615987

Source: secalert@redhat.com

Patch

http://lists.fedoraproject.org/pipermail/package-announce/2011-March/056683.html

Source: secalert@redhat.com

http://lists.fedoraproject.org/pipermail/package-announce/2011-March/056734.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-updates/2011-04/msg00027.html

Source: secalert@redhat.com

http://openwall.com/lists/oss-security/2011/02/25/11

Source: secalert@redhat.com

Patch

http://openwall.com/lists/oss-security/2011/02/25/12

Source: secalert@redhat.com

Patch

http://openwall.com/lists/oss-security/2011/02/25/14

Source: secalert@redhat.com

http://openwall.com/lists/oss-security/2011/02/25/6

Source: secalert@redhat.com

Patch

http://openwall.com/lists/oss-security/2011/02/25/9

Source: secalert@redhat.com

Patch

http://secunia.com/advisories/43611

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/43758

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/43891

Source: secalert@redhat.com

http://secunia.com/advisories/44093

Source: secalert@redhat.com

http://sourceforge.net/mailarchive/message.php?msg_id=26598749

Source: secalert@redhat.com

Patch

http://sourceforge.net/mailarchive/message.php?msg_id=27102603

Source: secalert@redhat.com

Patch

http://sourceforge.net/projects/libcg/files/libcgroup/v0.37.1/libcgroup-0.37.1.tar.bz2/download

Source: secalert@redhat.com

Patch

http://www.debian.org/security/2011/dsa-2193

Source: secalert@redhat.com

http://www.redhat.com/support/errata/RHSA-2011-0320.html

Source: secalert@redhat.com

http://www.securityfocus.com/bid/46578

Source: secalert@redhat.com

http://www.securitytracker.com/id?1025157

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2011/0679

Source: secalert@redhat.com

Vendor Advisory

http://www.vupen.com/english/advisories/2011/0774

Source: secalert@redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=680409

Source: secalert@redhat.com

Patch

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=615987

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://lists.fedoraproject.org/pipermail/package-announce/2011-March/056683.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.fedoraproject.org/pipermail/package-announce/2011-March/056734.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-updates/2011-04/msg00027.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://openwall.com/lists/oss-security/2011/02/25/11

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://openwall.com/lists/oss-security/2011/02/25/12

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://openwall.com/lists/oss-security/2011/02/25/14

Source: af854a3a-2127-422b-91ae-364da2661108

http://openwall.com/lists/oss-security/2011/02/25/6

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://openwall.com/lists/oss-security/2011/02/25/9

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://secunia.com/advisories/43611

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/43758

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/43891

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/44093

Source: af854a3a-2127-422b-91ae-364da2661108

http://sourceforge.net/mailarchive/message.php?msg_id=26598749

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://sourceforge.net/mailarchive/message.php?msg_id=27102603

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://sourceforge.net/projects/libcg/files/libcgroup/v0.37.1/libcgroup-0.37.1.tar.bz2/download

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://www.debian.org/security/2011/dsa-2193

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.redhat.com/support/errata/RHSA-2011-0320.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/46578

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securitytracker.com/id?1025157

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2011/0679

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.vupen.com/english/advisories/2011/0774

Source: af854a3a-2127-422b-91ae-364da2661108

https://bugzilla.redhat.com/show_bug.cgi?id=680409

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

Timeline

No history available yet.