Wind River Support Network

HomeDefectsLIN5-14130
Fixed

LIN5-14130 : Security Advisory - acpid - CVE-2011-1159

Created: Oct 12, 2011    Updated: Dec 19, 2017
Resolved Date: Dec 7, 2013
Previous ID: LIN3-12036
Found In Version: 5.0
Fix Version: 5.0.1.10
Severity: Severe
Applicable for: Wind River Linux 5
Component/s: Userspace

Description

acpid.c in acpid before 2.0.9 does not properly handle a situation in which a process has connected to acpid.socket but is not reading any data, which allows local users to cause a denial of service (daemon hang) via a crafted application that performs a connect system call but no read system calls.

http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2011-1159

Steps to Reproduce

Unknown

Other Downloads


Live chat
Online