CVE-2011-1006

CVE-2011-1006 describes a heap-based buffer overflow in the parse_cgroup_spec function within the Control Group Configuration Library (libcgroup) versions prior to 0.37.1. This vulnerability allows local users to potentially gain privileges by providing a specially crafted controller list to applications utilizing the library. With a CVSS score of 7.2, it is considered high severity, indicating a local attack vector with low complexity and high impact on confidentiality, integrity, and availability, though it's unclear if it crosses privilege boundaries. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this decade-old vulnerability.