CVE-2009-0798

Publication date 24 April 2009

Last updated 24 July 2024


Ubuntu priority

Description

ACPI Event Daemon (acpid) before 1.0.10 allows remote attackers to cause a denial of service (CPU consumption and connectivity loss) by opening a large number of UNIX sockets without closing them, which triggers an infinite loop.

Read the notes from the security team

Status

Package Ubuntu Release Status
acpid 9.04 jaunty
Fixed in 1.0.6-9ubuntu4.9.04.2
8.10 intrepid
Fixed in 1.0.6-9ubuntu4.8.10.2
8.04 LTS hardy
Fixed in 1.0.4-5ubuntu9.3
7.10 gutsy Ignored end of life, was needed
6.06 LTS dapper
Fixed in 1.0.4-1ubuntu11.2

Notes


jdstrand

fixes for 9.04 were merged into 9.10 in 1.0.6-9ubuntu5

References

Related Ubuntu Security Notices (USN)

    • USN-766-1
    • acpid vulnerability
    • 27 April 2009

Other references


Access our resources on patching vulnerabilities