NVD

Id
8010  
Name
CVE-2011-1022  
Description
The cgre_receive_netlink_msg function in daemon/cgrulesengd.c in cgrulesengd in the Control Group Configuration Library (aka libcgroup or libcg) before 0.37.1 does not verify that netlink messages originated in the kernel, which allows local users to bypass intended resource restrictions via a crafted message.  
Reject
 
CVSS Version
2  
CVSS Score
2.1  
Severity
Low  
CVSS Base Score
2.1  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-07  
Published
2011-03-22  
Modified Date
2011-09-06  
Seq
2011-1022  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
45602 8010 CVE-2011-1022 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=615987  View
45603 8010 CVE-2011-1022 FEDORA-2011-2631  View
45604 8010 CVE-2011-1022 FEDORA-2011-2638  View
45605 8010 CVE-2011-1022 openSUSE-SU-2011:0316  View
45606 8010 CVE-2011-1022 [oss-security] 20110225 Re: CVE request: libcgroup: Failure to verify netlink messages  View
45607 8010 CVE-2011-1022 [oss-security] 20110225 Re: CVE request: libcgroup: Failure to verify netlink messages  View
45608 8010 CVE-2011-1022 [oss-security] 20110225 Re: CVE request: libcgroup: Failure to verify netlink messages  View
45609 8010 CVE-2011-1022 [oss-security] 20110224 CVE request: libcgroup: Failure to verify netlink messages  View
45610 8010 CVE-2011-1022 [oss-security] 20110225 Re: CVE request: libcgroup: Failure to verify netlink messages  View
45611 8010 CVE-2011-1022 [libcg-devel] 20101115 Fwd: libcgroup netlink  View
45612 8010 CVE-2011-1022 [libcg-devel] 20110218 [PATCH 2/2] cgrulesengd: Ignore netlink messages that don"t come from the kernel.  View
45613 8010 CVE-2011-1022 http://sourceforge.net/projects/libcg/files/libcgroup/v0.37.1/libcgroup-0.37.1.tar.bz2/download  View
45614 8010 CVE-2011-1022 DSA-2193  View
45615 8010 CVE-2011-1022 RHSA-2011:0320  View
45616 8010 CVE-2011-1022 46578  View
45617 8010 CVE-2011-1022 1025157  View
45618 8010 CVE-2011-1022 ADV-2011-0679  View
45619 8010 CVE-2011-1022 ADV-2011-0774  View
45620 8010 CVE-2011-1022 https://bugzilla.redhat.com/show_bug.cgi?id=680409  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
31116 JVNDB-2011-001355 Control Group Configuration Library の cgre_receive_netlink_msg 関数におけるリソース制限を回避される脆弱性 Control Group Configuration Library の cgrulesengd 内にある daemon/cgrulesengd.c の cgre_receive_netlink_msg 関数には、netlink メッセージが kernel から送信されたことを検証しない不備があるため、リソース制限を回避される脆弱性が存在します。 CVE-2011-1022 48929 CVE-2011-1022 8010 2.1 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-001355.html 2011-03-03 2011-04-05 View