CVE-2011-1159

acpid.c in acpid before 2.0.9 does not properly handle a situation in which a process has connected to acpid.socket but is not reading any data, which allows local users to cause a denial of service (daemon hang) via a crafted application that performs a connect system call but no read system calls.

• How can I get the fixes?
• What do statuses mean?

References

• MITRE
• NVD
• Launchpad
• Debian

Related Ubuntu Security Notices (USN)

• USN-1234-1
• acpid vulnerability
• 20 October 2011

Other references

• http://www.openwall.com/lists/oss-security/2011/01/19/4
• https://www.cve.org/CVERecord?id=CVE-2011-1159