Wind River Support Network


LIN5-14130 : Security Advisory - acpid - CVE-2011-1159

Created: Oct 12, 2011    Updated: Dec 19, 2017
Resolved Date: Dec 7, 2013
Previous ID: LIN3-12036
Found In Version: 5.0
Fix Version:
Severity: Severe
Applicable for: Wind River Linux 5
Component/s: Userspace


acpid.c in acpid before 2.0.9 does not properly handle a situation in which a process has connected to acpid.socket but is not reading any data, which allows local users to cause a denial of service (daemon hang) via a crafted application that performs a connect system call but no read system calls.

Steps to Reproduce


Other Downloads

Live chat