CVE-2009-0798

Publication date 24 April 2009

Last updated 24 July 2024

Ubuntu priority

Low

Why this priority?

ACPI Event Daemon (acpid) before 1.0.10 allows remote attackers to cause a denial of service (CPU consumption and connectivity loss) by opening a large number of UNIX sockets without closing them, which triggers an infinite loop.

Read the notes from the security team

Status

No maintained releases are affected by this CVE.

Package Ubuntu Release Status
acpid 9.04 jaunty
Fixed 1.0.6-9ubuntu4.9.04.2
8.10 intrepid
Fixed 1.0.6-9ubuntu4.8.10.2
8.04 LTS hardy
Fixed 1.0.4-5ubuntu9.3
7.10 gutsy Ignored end of life, was needed
6.06 LTS dapper
Fixed 1.0.4-1ubuntu11.2

Notes

jdstrand

fixes for 9.04 were merged into 9.10 in 1.0.6-9ubuntu5

References

Related Ubuntu Security Notices (USN)

    • USN-766-1
    • acpid vulnerability
    • 27 April 2009

Other references