| Package | Affected versions | Patched versions |
|---|---|---|
| libcgroup | = 0.1b= 0.1c= 0.2= 0.3= 0.31= 0.32= 0.32.1= 0.32.2= 0.33= 0.34= 0.35= 0.35.1= 0.36= 0.36.1= 0.36.2= 0.37≤ 0.37 |
Heap-based buffer overflow in the parse_cgroup_spec function in tools/tools-common.c in the Control Group Configuration Library (aka libcgroup or libcg) before 0.37.1 allows local users to gain privileges via a crafted controller list on the command line of an application. NOTE: it is not clear whether this issue crosses privilege boundaries.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free