ByteOS Network

Vulnerability Details :

CVE-2011-1022

Assigner-redhat

Assigner Org ID-53f830b8-0a3f-465b-8143-3b8a9948e749

Published At-22 Mar, 2011 | 17:00

Updated At-06 Aug, 2024 | 22:14

The cgre_receive_netlink_msg function in daemon/cgrulesengd.c in cgrulesengd in the Control Group Configuration Library (aka libcgroup or libcg) before 0.37.1 does not verify that netlink messages originated in the kernel, which allows local users to bypass intended resource restrictions via a crafted message.

EPSS History

Score

Latest Score

N/A

Percentile

Latest Percentile

N/A

▼Common Vulnerabilities and Exposures (CVE)

cve.org

Assigner:redhat

Assigner Org ID:53f830b8-0a3f-465b-8143-3b8a9948e749

Published At:22 Mar, 2011 | 17:00

Updated At:06 Aug, 2024 | 22:14

▼CVE Numbering Authority (CNA)

Affected Products

Vendor

n/a

Product

n/a

Versions

Affected

Problem Types

Type	CWE ID	Description
text	N/A	n/a

Type: text

CWE ID: N/A

Description: n/a

References

Hyperlink	Resource
http://openwall.com/lists/oss-security/2011/02/25/11	mailing-list x_refsource_MLIST
http://secunia.com/advisories/43758	third-party-advisory x_refsource_SECUNIA
http://secunia.com/advisories/44093	third-party-advisory x_refsource_SECUNIA
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=615987	x_refsource_CONFIRM
http://www.securitytracker.com/id?1025157	vdb-entry x_refsource_SECTRACK
http://www.securityfocus.com/bid/46578	vdb-entry x_refsource_BID
http://sourceforge.net/projects/libcg/files/libcgroup/v0.37.1/libcgroup-0.37.1.tar.bz2/download	x_refsource_CONFIRM
http://secunia.com/advisories/43891	third-party-advisory x_refsource_SECUNIA
http://www.debian.org/security/2011/dsa-2193	vendor-advisory x_refsource_DEBIAN
http://lists.opensuse.org/opensuse-updates/2011-04/msg00027.html	vendor-advisory x_refsource_SUSE
http://lists.fedoraproject.org/pipermail/package-announce/2011-March/056683.html	vendor-advisory x_refsource_FEDORA
http://www.vupen.com/english/advisories/2011/0679	vdb-entry x_refsource_VUPEN
http://www.vupen.com/english/advisories/2011/0774	vdb-entry x_refsource_VUPEN
http://sourceforge.net/mailarchive/message.php?msg_id=26598749	mailing-list x_refsource_MLIST
http://openwall.com/lists/oss-security/2011/02/25/14	mailing-list x_refsource_MLIST
https://bugzilla.redhat.com/show_bug.cgi?id=680409	x_refsource_CONFIRM
http://www.redhat.com/support/errata/RHSA-2011-0320.html	vendor-advisory x_refsource_REDHAT
http://openwall.com/lists/oss-security/2011/02/25/12	mailing-list x_refsource_MLIST
http://secunia.com/advisories/43611	third-party-advisory x_refsource_SECUNIA
http://lists.fedoraproject.org/pipermail/package-announce/2011-March/056734.html	vendor-advisory x_refsource_FEDORA
http://openwall.com/lists/oss-security/2011/02/25/6	mailing-list x_refsource_MLIST
http://openwall.com/lists/oss-security/2011/02/25/9	mailing-list x_refsource_MLIST
http://sourceforge.net/mailarchive/message.php?msg_id=27102603	mailing-list x_refsource_MLIST

Hyperlink: http://openwall.com/lists/oss-security/2011/02/25/11

Resource:

mailing-list

x_refsource_MLIST

Hyperlink: http://secunia.com/advisories/43758

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://secunia.com/advisories/44093

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=615987

Resource:

x_refsource_CONFIRM

Hyperlink: http://www.securitytracker.com/id?1025157

Resource:

vdb-entry

x_refsource_SECTRACK

Hyperlink: http://www.securityfocus.com/bid/46578

Resource:

vdb-entry

x_refsource_BID

Hyperlink: http://sourceforge.net/projects/libcg/files/libcgroup/v0.37.1/libcgroup-0.37.1.tar.bz2/download

Resource:

x_refsource_CONFIRM

Hyperlink: http://secunia.com/advisories/43891

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://www.debian.org/security/2011/dsa-2193

Resource:

vendor-advisory

x_refsource_DEBIAN

Hyperlink: http://lists.opensuse.org/opensuse-updates/2011-04/msg00027.html

Resource:

vendor-advisory

x_refsource_SUSE

Hyperlink: http://lists.fedoraproject.org/pipermail/package-announce/2011-March/056683.html

Resource:

vendor-advisory

x_refsource_FEDORA

Hyperlink: http://www.vupen.com/english/advisories/2011/0679

Resource:

vdb-entry

x_refsource_VUPEN

Hyperlink: http://www.vupen.com/english/advisories/2011/0774

Resource:

vdb-entry

x_refsource_VUPEN

Hyperlink: http://sourceforge.net/mailarchive/message.php?msg_id=26598749

Resource:

mailing-list

x_refsource_MLIST

Hyperlink: http://openwall.com/lists/oss-security/2011/02/25/14

Resource:

mailing-list

x_refsource_MLIST

Hyperlink: https://bugzilla.redhat.com/show_bug.cgi?id=680409

Resource:

x_refsource_CONFIRM

Hyperlink: http://www.redhat.com/support/errata/RHSA-2011-0320.html

Resource:

vendor-advisory

x_refsource_REDHAT

Hyperlink: http://openwall.com/lists/oss-security/2011/02/25/12

Resource:

mailing-list

x_refsource_MLIST

Hyperlink: http://secunia.com/advisories/43611

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://lists.fedoraproject.org/pipermail/package-announce/2011-March/056734.html

Resource:

vendor-advisory

x_refsource_FEDORA

Hyperlink: http://openwall.com/lists/oss-security/2011/02/25/6

Resource:

mailing-list

x_refsource_MLIST

Hyperlink: http://openwall.com/lists/oss-security/2011/02/25/9

Resource:

mailing-list

x_refsource_MLIST

Hyperlink: http://sourceforge.net/mailarchive/message.php?msg_id=27102603

Resource:

mailing-list

x_refsource_MLIST

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
http://openwall.com/lists/oss-security/2011/02/25/11	mailing-list x_refsource_MLIST x_transferred
http://secunia.com/advisories/43758	third-party-advisory x_refsource_SECUNIA x_transferred
http://secunia.com/advisories/44093	third-party-advisory x_refsource_SECUNIA x_transferred
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=615987	x_refsource_CONFIRM x_transferred
http://www.securitytracker.com/id?1025157	vdb-entry x_refsource_SECTRACK x_transferred
http://www.securityfocus.com/bid/46578	vdb-entry x_refsource_BID x_transferred
http://sourceforge.net/projects/libcg/files/libcgroup/v0.37.1/libcgroup-0.37.1.tar.bz2/download	x_refsource_CONFIRM x_transferred
http://secunia.com/advisories/43891	third-party-advisory x_refsource_SECUNIA x_transferred
http://www.debian.org/security/2011/dsa-2193	vendor-advisory x_refsource_DEBIAN x_transferred
http://lists.opensuse.org/opensuse-updates/2011-04/msg00027.html	vendor-advisory x_refsource_SUSE x_transferred
http://lists.fedoraproject.org/pipermail/package-announce/2011-March/056683.html	vendor-advisory x_refsource_FEDORA x_transferred
http://www.vupen.com/english/advisories/2011/0679	vdb-entry x_refsource_VUPEN x_transferred
http://www.vupen.com/english/advisories/2011/0774	vdb-entry x_refsource_VUPEN x_transferred
http://sourceforge.net/mailarchive/message.php?msg_id=26598749	mailing-list x_refsource_MLIST x_transferred
http://openwall.com/lists/oss-security/2011/02/25/14	mailing-list x_refsource_MLIST x_transferred
https://bugzilla.redhat.com/show_bug.cgi?id=680409	x_refsource_CONFIRM x_transferred
http://www.redhat.com/support/errata/RHSA-2011-0320.html	vendor-advisory x_refsource_REDHAT x_transferred
http://openwall.com/lists/oss-security/2011/02/25/12	mailing-list x_refsource_MLIST x_transferred
http://secunia.com/advisories/43611	third-party-advisory x_refsource_SECUNIA x_transferred
http://lists.fedoraproject.org/pipermail/package-announce/2011-March/056734.html	vendor-advisory x_refsource_FEDORA x_transferred
http://openwall.com/lists/oss-security/2011/02/25/6	mailing-list x_refsource_MLIST x_transferred
http://openwall.com/lists/oss-security/2011/02/25/9	mailing-list x_refsource_MLIST x_transferred
http://sourceforge.net/mailarchive/message.php?msg_id=27102603	mailing-list x_refsource_MLIST x_transferred

Hyperlink: http://openwall.com/lists/oss-security/2011/02/25/11

Resource:

mailing-list

x_refsource_MLIST

x_transferred

Hyperlink: http://secunia.com/advisories/43758

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

Hyperlink: http://secunia.com/advisories/44093

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

Hyperlink: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=615987

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: http://www.securitytracker.com/id?1025157

Resource:

vdb-entry

x_refsource_SECTRACK

x_transferred

Hyperlink: http://www.securityfocus.com/bid/46578

Resource:

vdb-entry

x_refsource_BID

x_transferred

Hyperlink: http://sourceforge.net/projects/libcg/files/libcgroup/v0.37.1/libcgroup-0.37.1.tar.bz2/download

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: http://secunia.com/advisories/43891

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

Hyperlink: http://www.debian.org/security/2011/dsa-2193

Resource:

vendor-advisory

x_refsource_DEBIAN

x_transferred

Hyperlink: http://lists.opensuse.org/opensuse-updates/2011-04/msg00027.html

Resource:

vendor-advisory

x_refsource_SUSE

x_transferred

Hyperlink: http://lists.fedoraproject.org/pipermail/package-announce/2011-March/056683.html

Resource:

vendor-advisory

x_refsource_FEDORA

x_transferred

Hyperlink: http://www.vupen.com/english/advisories/2011/0679

Resource:

vdb-entry

x_refsource_VUPEN

x_transferred

Hyperlink: http://www.vupen.com/english/advisories/2011/0774

Resource:

vdb-entry

x_refsource_VUPEN

x_transferred

Hyperlink: http://sourceforge.net/mailarchive/message.php?msg_id=26598749

Resource:

mailing-list

x_refsource_MLIST

x_transferred

Hyperlink: http://openwall.com/lists/oss-security/2011/02/25/14

Resource:

mailing-list

x_refsource_MLIST

x_transferred

Hyperlink: https://bugzilla.redhat.com/show_bug.cgi?id=680409

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: http://www.redhat.com/support/errata/RHSA-2011-0320.html

Resource:

vendor-advisory

x_refsource_REDHAT

x_transferred

Hyperlink: http://openwall.com/lists/oss-security/2011/02/25/12

Resource:

mailing-list

x_refsource_MLIST

x_transferred

Hyperlink: http://secunia.com/advisories/43611

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

Hyperlink: http://lists.fedoraproject.org/pipermail/package-announce/2011-March/056734.html

Resource:

vendor-advisory

x_refsource_FEDORA

x_transferred

Hyperlink: http://openwall.com/lists/oss-security/2011/02/25/6

Resource:

mailing-list

x_refsource_MLIST

x_transferred

Hyperlink: http://openwall.com/lists/oss-security/2011/02/25/9

Resource:

mailing-list

x_refsource_MLIST

x_transferred

Hyperlink: http://sourceforge.net/mailarchive/message.php?msg_id=27102603

Resource:

mailing-list

x_refsource_MLIST

x_transferred

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:secalert@redhat.com

Published At:22 Mar, 2011 | 17:55

Updated At:11 Apr, 2025 | 00:51

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	2.0	2.1	LOW	AV:L/AC:L/Au:N/C:N/I:P/A:N

Type: Primary

Version: 2.0

Base score: 2.1

Base severity: LOW

Vector:

AV:L/AC:L/Au:N/C:N/I:P/A:N

CPE Matches

balbir_singh>>libcgroup>>Versions up to 0.37(inclusive)

cpe:2.3:a:balbir_singh:libcgroup:*:*:*:*:*:*:*:*

balbir_singh>>libcgroup>>0.1b

cpe:2.3:a:balbir_singh:libcgroup:0.1b:*:*:*:*:*:*:*

balbir_singh>>libcgroup>>0.1c

cpe:2.3:a:balbir_singh:libcgroup:0.1c:*:*:*:*:*:*:*

balbir_singh>>libcgroup>>0.2

cpe:2.3:a:balbir_singh:libcgroup:0.2:*:*:*:*:*:*:*

balbir_singh>>libcgroup>>0.3

cpe:2.3:a:balbir_singh:libcgroup:0.3:*:*:*:*:*:*:*

balbir_singh>>libcgroup>>0.31

cpe:2.3:a:balbir_singh:libcgroup:0.31:*:*:*:*:*:*:*

balbir_singh>>libcgroup>>0.32

cpe:2.3:a:balbir_singh:libcgroup:0.32:*:*:*:*:*:*:*

balbir_singh>>libcgroup>>0.32.1

cpe:2.3:a:balbir_singh:libcgroup:0.32.1:*:*:*:*:*:*:*

balbir_singh>>libcgroup>>0.32.2

cpe:2.3:a:balbir_singh:libcgroup:0.32.2:*:*:*:*:*:*:*

balbir_singh>>libcgroup>>0.33

cpe:2.3:a:balbir_singh:libcgroup:0.33:*:*:*:*:*:*:*

balbir_singh>>libcgroup>>0.34

cpe:2.3:a:balbir_singh:libcgroup:0.34:*:*:*:*:*:*:*

balbir_singh>>libcgroup>>0.35

cpe:2.3:a:balbir_singh:libcgroup:0.35:*:*:*:*:*:*:*

balbir_singh>>libcgroup>>0.35.1

cpe:2.3:a:balbir_singh:libcgroup:0.35.1:*:*:*:*:*:*:*

balbir_singh>>libcgroup>>0.36

cpe:2.3:a:balbir_singh:libcgroup:0.36:*:*:*:*:*:*:*

balbir_singh>>libcgroup>>0.36.1

cpe:2.3:a:balbir_singh:libcgroup:0.36.1:*:*:*:*:*:*:*

balbir_singh>>libcgroup>>0.36.2

cpe:2.3:a:balbir_singh:libcgroup:0.36.2:*:*:*:*:*:*:*

balbir_singh>>libcgroup>>0.37

cpe:2.3:a:balbir_singh:libcgroup:0.37:rc1:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-264	Primary	nvd@nist.gov

CWE ID: CWE-264

Type: Primary

Source: nvd@nist.gov