Vulnerability in Libcap

CVE-2011-4099

The capsh program in libcap before 2.22 does not change the current working directory when the --chroot option is specified, which allows local users to bypass the chroot restrictions via unspecified vectors.

EPSS: 0.004 (30.5th percentile) — read the EPSS interpretation.

Affected products

  • Libcap — versions 2.00, 2.01, 2.02
  • N/a — versions n/a

Weakness classification (CWE)

References