Vulnerability Details : CVE-2011-1159
Potential exploit
acpid.c in acpid before 2.0.9 does not properly handle a situation in which a process has connected to acpid.socket but is not reading any data, which allows local users to cause a denial of service (daemon hang) via a crafted application that performs a connect system call but no read system calls.
Vulnerability category: Denial of service
Products affected by CVE-2011-1159
- cpe:2.3:a:tedfelix:acpid:*:*:*:*:*:*:*:*
- cpe:2.3:a:tedfelix:acpid:2.0.3:*:*:*:*:*:*:*
- cpe:2.3:a:tedfelix:acpid:2.0.5:*:*:*:*:*:*:*
- cpe:2.3:a:tedfelix:acpid:2.06:*:*:*:*:*:*:*
- cpe:2.3:a:tedfelix:acpid:2.0.7:*:*:*:*:*:*:*
- cpe:2.3:a:tedfelix:acpid:1.0.8:*:*:*:*:*:*:*
- cpe:2.3:a:tedfelix:acpid:1.0.10:*:*:*:*:*:*:*
- cpe:2.3:a:tedfelix:acpid:2.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:tedfelix:acpid:2.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:tedfelix:acpid:2.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:tedfelix:acpid:2.0.4:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2011-1159
0.12%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 27 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2011-1159
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
---|---|---|---|---|---|---|
2.1
|
LOW | AV:L/AC:L/Au:N/C:N/I:N/A:P |
3.9
|
2.9
|
NIST |
CWE ids for CVE-2011-1159
-
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.Assigned by: nvd@nist.gov (Primary)
References for CVE-2011-1159
-
http://secunia.com/advisories/44621
Sign inVendor Advisory
-
http://www.openwall.com/lists/oss-security/2011/01/19/4
oss-security - 2 acpid flawsExploit;Patch
-
http://lists.fedoraproject.org/pipermail/package-announce/2011-May/060053.html
[SECURITY] Fedora 14 Update: acpid-2.0.9-1.fc14Patch
-
http://secunia.com/advisories/42947
Sign inVendor Advisory
-
https://bugzilla.redhat.com/show_bug.cgi?id=688698
688698 – (CVE-2011-1159) CVE-2011-1159 acpid: blocked writes can lead to acpid daemon hangPatch
-
http://www.openwall.com/lists/oss-security/2011/03/15/12
oss-security - Re: 2 acpid flawsExploit;Patch
-
http://lists.fedoraproject.org/pipermail/package-announce/2011-May/059880.html
[SECURITY] Fedora 15 Update: acpid-2.0.9-4.fc15Patch
-
http://www.securityfocus.com/bid/45915
acpid Multiple Local Denial of Service Vulnerabilities
-
http://www.openwall.com/lists/oss-security/2011/03/15/7
oss-security - Re: 2 acpid flawsExploit;Patch
Jump to