[ GLSA 200905-06 ] acpid: Denial of Service

[GLSA]

Gentoo Linux Security Advisory

Title: acpid: Denial of Service (GLSA 200905-06)
Severity: normal
Exploitable: remote
Date: May 24, 2009
Bug(s): #268079
ID: 200905-06

Synopsis

An error in acpid might allow remote attackers to cause a Denial of Service.

Background

acpid is a daemon for the Advanced Configuration and Power Interface (ACPI).

Affected Packages

Package: sys-power/acpid
Vulnerable: < 1.0.10
Unaffected: >= 1.0.10
Architectures: All supported architectures


Description

The acpid daemon allows opening a large number of UNIX sockets without closing them, triggering an infinite loop.

Impact

Remote attackers can cause a Denial of Service (CPU consumption and connectivity loss).

Workaround

There is no known workaround at this time.

Resolution

All acpid users should upgrade to the latest version: