CVE-2011-4099: Libcap

Medium severity, CVSS 4.6. EPSS: 0.4% chance of exploitation in the next 30 days.

The capsh program in libcap before 2.22 does not change the current working directory when the --chroot option is specified, which allows local users to bypass the chroot restrictions via unspecified vectors.

Affected products

• Libcap Libcap: up to and including 2.21; version 2.00 only; version 2.01 only; version 2.02 only; version 2.03 only; version 2.04 only; …

Published 2014-02-08. Last modified 2026-06-16.