Unscored USN-4845-1 1 CVE

libcgroup vulnerability

Published Mar 15, 2021 · Updated Jun 29, 2026

Ecosystem: Ubuntu

Summary

It was discovered that libcgroup incorrectly handled log file permissions.
An attacker could possibly use this issue to obtain sensitive information.

Fixed packages 3

Release	Package	Fixed in
Ubuntu · Pro 14.04 LTS Pro:14.04:LTS	libcgroup	0.38-1ubuntu2+esm1
Ubuntu · Pro 16.04 LTS Pro:16.04:LTS	libcgroup	0.41-7ubuntu1+esm1
Ubuntu · Pro 18.04 LTS Pro:18.04:LTS	libcgroup	0.41-8ubuntu2+esm1

Vulnerabilities 1

Unscored —

CVE-2018-14348

libcgroup up to and including 0.41 creates /var/log/cgred with mode 0666 regardless of the configured umask, leading to…

libcgroup libcgroup libcgroup Debian Ubuntu Azure Linux

Aug 14, 2018

References

report
https://ubuntu.com/security/CVE-2018-14348