Approved changes feed: RSS · Atom

cpe:2.3:a:balbir_singh:libcgroup:0.34:*:*:*:*:*:*:*

part: a version: 0.34 update: *

VendorBalbir Singh (ae45fd2d-2696-564a-916d-ed9970b50d5f)
ProductLibcgroup (f78493ef-561b-5a8a-8922-adfb4d1018c3)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2011-1022 vulnerable 2026-06-08 04:56:40.915702 Details available
The cgre_receive_netlink_msg function in daemon/cgrulesengd.c in cgrulesengd in the Control Group Configuration Library (aka libcgroup or libcg) before 0.37.1 does not verify that netlink messages originated in the kernel, which allows local users to bypass intended resource restrictions via a crafted message.
Published: 2011-03-22T17:00:00.000Z
Updated: 2024-08-06T22:14:27.029Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-1006 vulnerable 2026-06-08 04:56:40.701629 Details available
Heap-based buffer overflow in the parse_cgroup_spec function in tools/tools-common.c in the Control Group Configuration Library (aka libcgroup or libcg) before 0.37.1 allows local users to gain privileges via a crafted controller list on the command line of an application. NOTE: it is not clear whether this issue crosses privilege boundaries.
Published: 2011-03-22T17:00:00.000Z
Updated: 2024-08-06T22:14:27.009Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.