Wind River Support Network

HomeDefectsLIN6-5026
Fixed

LIN6-5026 : Security Advisory - acpid - CVE-2011-1159

Created: Oct 12, 2011    Updated: Dec 3, 2018
Resolved Date: Dec 9, 2013
Previous ID: LIN3-12040
Found In Version: 6.0
Fix Version: 6.0.0.1
Severity: Severe
Applicable for: Wind River Linux 6

Description

acpid.c in acpid before 2.0.9 does not properly handle a situation in which a process has connected to acpid.socket but is not reading any data, which allows local users to cause a denial of service (daemon hang) via a crafted application that performs a connect system call but no read system calls.

http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2011-1159

Steps to Reproduce

Unknown

Other Downloads


Live chat
Online