PT-2009-1063 · Acpid+1 · Acpid+1

Tomas Hoger

·

Published

2009-04-24

·

Updated

2017-09-29

·

CVE-2009-0798

CVSS v2.0

5.0

Medium

VectorAV:N/AC:L/Au:N/C:N/I:N/A:P
Name of the Vulnerable Software and Affected Versions acpid versions prior to 1.0.10
Description The issue allows remote attackers to cause a denial of service, leading to CPU consumption and connectivity loss, by opening a large number of UNIX sockets without closing them, which triggers an infinite loop. This can be exploited remotely.
Recommendations For versions prior to 1.0.10, update to version 1.0.10 or later to resolve the issue. As a temporary workaround, consider restricting access to the acpid service to minimize the risk of exploitation.

Fix

DoS

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-399

Related Identifiers

BDU:2015-06966
BDU:2015-06967
BDU:2015-06968
BDU:2015-08499
BDU:2015-08500
BDU:2015-08501
BDU:2015-09388
CVE-2009-0798
DSA-1786-1
RHSA-2009:0474
RHSA-2009_0474

Affected Products

Red Hat
Acpid