Main Vulnerability Database Vulnerabilities #VU45179

Heap-based buffer overflow in libcgroup - CVE-2011-1006

Published: March 22, 2011 / Updated: August 11, 2020

Vulnerability identifier: #VU45179

CSH Severity: High

CVSS v4: 8.6 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2011-1006

CWE-ID: CWE-122

Exploitation vector: Local access

Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to a boundary error in Heap-based buffer overflow in the parse_cgroup_spec function in tools/tools-common.c in the Control Group Configuration Library (aka libcgroup or libcg) before 0.37.1. A remote attacker can use a crafted controller list on the command line of an application. NOTE to trigger heap-based buffer overflow and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

Affected software

libcgroup

How to mitigate CVE-2011-1006

Cybersecurity Help is currently unaware of any official solution to address this vulnerability.

External References

Related Security Bulletins