CVE-2011-1006: Balbir Singh Libcgroup

High severity, CVSS 7.2. EPSS: 0.4% chance of exploitation in the next 30 days.

Heap-based buffer overflow in the parse_cgroup_spec function in tools/tools-common.c in the Control Group Configuration Library (aka libcgroup or libcg) before 0.37.1 allows local users to gain privileges via a crafted controller list on the command line of an application. NOTE: it is not clear whether this issue crosses privilege boundaries.

Affected products

• Balbir Singh Libcgroup: up to and including 0.37; version 0.1b only; version 0.1c only; version 0.2 only; version 0.3 only; version 0.31 only; …

Published 2011-03-22. Last modified 2026-06-16.