CVE-2011-1022

State: Published
Severity: Not scored
Published: Mar 22, 2011
Updated: Aug 6, 2024
Reserved: Feb 14, 2011

Description

The cgre_receive_netlink_msg function in daemon/cgrulesengd.c in cgrulesengd in the Control Group Configuration Library (aka libcgroup or libcg) before 0.37.1 does not verify that netlink messages originated in the kernel, which allows local users to bypass intended resource restrictions via a crafted message.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
n/an/a	n/aAffected

References

[oss-security] 20110225 Re: CVE request: libcgroup: Failure to verify netlink messagesmailing-list
43758third-party-advisory
44093third-party-advisory
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=615987
1025157vdb-entry
46578vdb-entry
http://sourceforge.net/projects/libcg/files/libcgroup/v0.37.1/libcgroup-0.37.1.tar.bz2/download
43891third-party-advisory
DSA-2193vendor-advisory
openSUSE-SU-2011:0316vendor-advisory
FEDORA-2011-2631vendor-advisory
ADV-2011-0679vdb-entry
ADV-2011-0774vdb-entry
[libcg-devel] 20101115 Fwd: libcgroup netlinkmailing-list
[oss-security] 20110225 Re: CVE request: libcgroup: Failure to verify netlink messagesmailing-list
https://bugzilla.redhat.com/show_bug.cgi?id=680409
RHSA-2011:0320vendor-advisory
[oss-security] 20110225 Re: CVE request: libcgroup: Failure to verify netlink messagesmailing-list
43611third-party-advisory
FEDORA-2011-2638vendor-advisory
[oss-security] 20110224 CVE request: libcgroup: Failure to verify netlink messagesmailing-list
[oss-security] 20110225 Re: CVE request: libcgroup: Failure to verify netlink messagesmailing-list
[libcg-devel] 20110218 [PATCH 2/2] cgrulesengd: Ignore netlink messages that don't come from the kernel.mailing-list

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.