CVE-2011-1159

LowCVSS 2.1/10Last modified Jun 16, 2026

Description

acpid.c in acpid before 2.0.9 does not properly handle a situation in which a process has connected to acpid.socket but is not reading any data, which allows local users to cause a denial of service (daemon hang) via a crafted application that performs a connect system call but no read system calls.

Metrics

CVSS 2.0 2.1/10AV:L/AC:L/Au:N/C:N/I:N/A:P

Weakness enumeration

CWE-20

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://lists.fedoraproject.org/pipermail/package-announce/2011-May/059880.htmlPatch
http://lists.fedoraproject.org/pipermail/package-announce/2011-May/060053.htmlPatch
http://secunia.com/advisories/42947Vendor Advisory
http://secunia.com/advisories/44621Vendor Advisory
http://www.openwall.com/lists/oss-security/2011/01/19/4Exploit, Patch
http://www.openwall.com/lists/oss-security/2011/03/15/12Exploit, Patch
http://www.openwall.com/lists/oss-security/2011/03/15/7Exploit, Patch
http://www.securityfocus.com/bid/45915
https://bugzilla.redhat.com/show_bug.cgi?id=688698Patch
http://lists.fedoraproject.org/pipermail/package-announce/2011-May/059880.htmlPatch
http://lists.fedoraproject.org/pipermail/package-announce/2011-May/060053.htmlPatch
http://secunia.com/advisories/42947Vendor Advisory
http://secunia.com/advisories/44621Vendor Advisory
http://www.openwall.com/lists/oss-security/2011/01/19/4Exploit, Patch
http://www.openwall.com/lists/oss-security/2011/03/15/12Exploit, Patch
http://www.openwall.com/lists/oss-security/2011/03/15/7Exploit, Patch
http://www.securityfocus.com/bid/45915
https://bugzilla.redhat.com/show_bug.cgi?id=688698Patch

Timeline

Published: Oct 5, 2011
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2011

CVE-2011-11602.1The tpm_open function in drivers/char/tpm/tpm.c in the Linux kernel before 2.6.39 does not initialize a certain buffer, which allows local u CVE-2011-11622.1The tpm_read function in the Linux kernel 2.6 does not properly clear memory, which might allow local users to read the results of the previ CVE-2011-11632.1The osf_partition function in fs/partitions/osf.c in the Linux kernel before 2.6.38 does not properly handle an invalid number of partitions CVE-2011-11644.6Vino before 2.99.4 can connect external networks contrary to the statement in the vino-preferences dialog box, which might make it easier fo CVE-2011-11655.1Vino, possibly before 3.2, does not properly document that it opens ports in UPnP routers when the "Configure network to automatically accep CVE-2011-11665.5Xen, possibly before 4.0.2, allows local 64-bit PV guests to cause a denial of service (host crash) by specifying user mode execution withou CVE-2011-11676.8Heap-based buffer overflow in the thunder (aka ThunderScan) decoder in tif_thunder.c in LibTIFF 3.9.4 and earlier allows remote attackers to CVE-2011-11684.3Cross-site scripting (XSS) vulnerability in the KHTMLPart::htmlError function in khtml/khtml_part.cpp in Konqueror in KDE SC 4.4.0 through 4 CVE-2011-11697.2Array index error in the asihpi_hpi_ioctl function in sound/pci/asihpi/hpioctl.c in the AudioScience HPI driver in the Linux kernel before 2 CVE-2011-11702.1net/ipv4/netfilter/arp_tables.c in the IPv4 implementation in the Linux kernel before 2.6.39 does not place the expected '\0' character at t CVE-2011-11712.1net/ipv4/netfilter/ip_tables.c in the IPv4 implementation in the Linux kernel before 2.6.39 does not place the expected '\0' character at th CVE-2011-11722.1net/ipv6/netfilter/ip6_tables.c in the IPv6 implementation in the Linux kernel before 2.6.39 does not place the expected '\0' character at t