CVE-2011-4099 on Ubuntu 12.04 LTS (precise) - low.
Description:
The capsh program in libcap before 2.22 does not change the current working directory when the --chroot option is specified, which allows local users to bypass the chroot restrictions via unspecified vectors.