acpid.c in acpid before 2.0.9 does not properly handle a situation in which a process has connected to acpid.socket but is not reading any data, which allows local users to cause a denial of service (daemon hang) via a crafted application that performs a connect system call but no read system calls.
References
Configurations
Configuration 1 (hide)
|
Information
Published : 2011-10-04 19:56
Updated : 2012-05-13 21:00
NVD link : CVE-2011-1159
Mitre link : CVE-2011-1159
JSON object : View
CWE
CWE-20
Improper Input Validation
Products Affected
tedfelix
- acpid