CVE-2009-0798 ACPI Event Daemon (acpid) before 1.0.10 allows remote attackers to cause a denial of service (CPU consumption and connectivity loss) by opening a large number of UNIX sockets without closing them, whi...
MediumCVSS 5.0
EPSS 2.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
ACPI Event Daemon (acpid) before 1.0.10 allows remote attackers to cause a denial of service (CPU consumption and connectivity loss) by opening a large number of UNIX sockets without closing them, which triggers an infinite loop.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| tim hockin acpid | <= 1.0.8 | No fix listed |
| tim hockin acpid | = 0.99.0 | No fix listed |
| tim hockin acpid | = 0.99.1 | No fix listed |
| tim hockin acpid | = 0.99.4 | No fix listed |
| tim hockin acpid | = 1.0.0 | No fix listed |
| tim hockin acpid | = 1.0.1 | No fix listed |
| tim hockin acpid | = 1.0.2 | No fix listed |
| tim hockin acpid | = 1.0.3 | No fix listed |
| tim hockin acpid | = 1.0.4 | No fix listed |
| tim hockin acpid | = 1.0.6 | No fix listed |
| tim hockin acpid | = 20010510 | No fix listed |
| debian/acpid(Debian:12) | < 1.0.10-1 | 1.0.10-1 |
| debian/acpid(Debian:13) | < 1.0.10-1 | 1.0.10-1 |
| debian/acpid(Debian:14) | < 1.0.10-1 | 1.0.10-1 |
References
- 34838 third-party-advisory vendor-advisory
- 34914 third-party-advisory
- 34918 third-party-advisory
- 35010 third-party-advisory
- 35209 third-party-advisory
- 35231 third-party-advisory
- DSA-1786 vendor-advisory
- GLSA-200905-06 vendor-advisory
- MDVSA-2009:107 vendor-advisory
- RHSA-2009:0474 vendor-advisory
- 34692 vdb-entry
- 1022182 vdb-entry
- USN-766-1 vendor-advisory
- bugzilla.redhat.com patch
- bugzilla.redhat.com
- acpid-socket-dos(50060) vdb-entry
- oval:org.mitre.oval:def:7560 signature vdb-entry
- oval:org.mitre.oval:def:9955 signature vdb-entry
- FEDORA-2009-5578 vendor-advisory
- FEDORA-2009-5608 vendor-advisory
- Debian Security Tracker CVE-2009-0798 vendor-advisory