National Cyber Awareness System

Vulnerability Summary for CVE-2009-0798

Overview

ACPI Event Daemon (acpid) before 1.0.10 allows remote attackers to cause a denial of service (CPU consumption and connectivity loss) by opening a large number of UNIX sockets without closing them, which triggers an infinite loop.

Impact

CVSS Severity (version 2.0):

CVSS Version 2 Metrics:

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

External Source: CONFIRM

Name: https://bugzilla.redhat.com/show_bug.cgi?id=494443

Type: Patch Information

Hyperlink:https://bugzilla.redhat.com/show_bug.cgi?id=494443

External Source: FEDORA

Name: FEDORA-2009-5608

Hyperlink:https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01365.html

External Source: FEDORA

Name: FEDORA-2009-5578

Hyperlink:https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01342.html

External Source: CONFIRM

Name: https://bugzilla.redhat.com/show_bug.cgi?id=502583

Hyperlink:https://bugzilla.redhat.com/show_bug.cgi?id=502583

External Source: XF

Name: acpid-socket-dos(50060)

Hyperlink:http://xforce.iss.net/xforce/xfdb/50060

External Source: UBUNTU

Name: USN-766-1

Hyperlink:http://www.ubuntu.com/usn/USN-766-1

External Source: SECTRACK

Name: 1022182

Hyperlink:http://www.securitytracker.com/id?1022182

External Source: BID

Name: 34692

Hyperlink:http://www.securityfocus.com/bid/34692

External Source: REDHAT

Name: RHSA-2009:0474

Hyperlink:http://www.redhat.com/support/errata/RHSA-2009-0474.html

External Source: MANDRIVA

Name: MDVSA-2009:107

Hyperlink:http://www.mandriva.com/security/advisories?name=MDVSA-2009:107

External Source: GENTOO

Name: GLSA-200905-06

Hyperlink:http://www.gentoo.org/security/en/glsa/glsa-200905-06.xml

External Source: DEBIAN

Name: DSA-1786

Hyperlink:http://www.debian.org/security/2009/dsa-1786

External Source: SECUNIA

Name: 35231

Hyperlink:http://secunia.com/advisories/35231

External Source: SECUNIA

Name: 35209

Hyperlink:http://secunia.com/advisories/35209

External Source: SECUNIA

Name: 35010

Hyperlink:http://secunia.com/advisories/35010

External Source: SECUNIA

Name: 34918

Hyperlink:http://secunia.com/advisories/34918

External Source: SECUNIA

Name: 34914

Hyperlink:http://secunia.com/advisories/34914

External Source: SECUNIA

Name: 34838

Type: Advisory

Hyperlink:http://secunia.com/advisories/34838

External Source: OVAL

Name: oval:org.mitre.oval:def:9955

Hyperlink:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:9955

External Source: OVAL

Name: oval:org.mitre.oval:def:7560

Hyperlink:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:7560

References to Check Content

Identifier:oval:org.mitre.oval:def:7560

Check System:http://oval.mitre.org/XMLSchema/oval-definitions-5

Hyperlink:http://oval.mitre.org/repository/data/DownloadDefinition?id=oval:org.mitre.oval:def:7560

Identifier:oval:org.mitre.oval:def:9955

Check System:http://oval.mitre.org/XMLSchema/oval-definitions-5

Hyperlink:http://oval.mitre.org/repository/data/DownloadDefinition?id=oval:org.mitre.oval:def:9955