CVE-2011-1022

The cgre_receive_netlink_msg function in daemon/cgrulesengd.c in cgrulesengd in the Control Group Configuration Library (aka libcgroup or libcg) before 0.37.1…

published March 22, 2011

CVSS
—
EPSS
0%
Percentile
31.2
In the wild
Unconfirmed
What it is

The cgre_receive_netlink_msg function in daemon/cgrulesengd.c in cgrulesengd in the Control Group Configuration Library (aka libcgroup or libcg) before 0.37.1 does not verify that netlink messages originated in the kernel, which allows local users to bypass intended resource restrictions via a crafted message.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00386 · 31.2th percentile
Published
2011-03-22T17:00Z
EPSS history
Timeline
  • 22 MAR 17:00Z
    The cgre_receive_netlink_msg function in daemon/cgrulesengd.c in cgrulesengd in the Control Group Configuration Library (aka libcgroup or libcg) before 0.37.1…
    cvelistv5