Vulnerability Bulletins |
Denegación de servicio en Acpid daemon |
|
Vulnerability classification |
|
| Property | Value |
| Confidence level | Oficial |
| Impact | Denegación de Servicio |
| Dificulty | Experto |
| Required attacker level | Acceso remoto con cuenta |
System information |
|
| Property | Value |
| Affected manufacturer | GNU/Linux |
| Affected software | Acpid daemon |
Description |
|
|
Se ha descubierto una vulnerabilidad en el demonio acpid. Un atacante remoto podría causar una denegación de servicio abriendo gran cantidad de sockets UNIX sin cerrarlos, lo que provoca un bucle infinto. |
|
Solution |
|
|
Actualización de software Debian (DSA-1786-1) Debian Linux 4.0 Source http://security.debian.org/pool/updates/main/a/acpid/acpid_1.0.4.orig.tar.gz http://security.debian.org/pool/updates/main/a/acpid/acpid_1.0.4-5etch1.dsc http://security.debian.org/pool/updates/main/a/acpid/acpid_1.0.4-5etch1.diff.gz amd64 (AMD x86_64 (AMD64)) http://security.debian.org/pool/updates/main/a/acpid/acpid_1.0.4-5etch1_amd64.deb i386 (Intel ia32) http://security.debian.org/pool/updates/main/a/acpid/acpid_1.0.4-5etch1_i386.deb ia64 (Intel ia64) http://security.debian.org/pool/updates/main/a/acpid/acpid_1.0.4-5etch1_ia64.deb Debian (DSA-1786-1) Debian Linux 5.0 Source http://security.debian.org/pool/updates/main/a/acpid/acpid_1.0.8-1lenny1.diff.gz http://security.debian.org/pool/updates/main/a/acpid/acpid_1.0.8-1lenny1.dsc http://security.debian.org/pool/updates/main/a/acpid/acpid_1.0.8.orig.tar.gz amd64 (AMD x86_64 (AMD64)) http://security.debian.org/pool/updates/main/a/acpid/acpid_1.0.8-1lenny1_amd64.deb i386 (Intel ia32) http://security.debian.org/pool/updates/main/a/acpid/acpid_1.0.8-1lenny1_i386.deb ia64 (Intel ia64) http://security.debian.org/pool/updates/main/a/acpid/acpid_1.0.8-1lenny1_ia64.deb Red Hat (RHSA-2009:0474-1) Red Hat Desktop (v. 3) Red Hat Desktop (v. 4) Red Hat Enterprise Linux (v. 5 servidor) Red Hat Enterprise Linux AS (v. 2.1) Red Hat Enterprise Linux AS (v. 3) Red Hat Enterprise Linux AS (v. 4) Red Hat Enterprise Linux Desktop (v. 5 cliente) Red Hat Enterprise Linux ES (v. 3) Red Hat Enterprise Linux ES (v. 4) Red Hat Enterprise Linux WS (v. 3) Red Hat Enterprise Linux WS (v. 4) Red Hat Linux Advanced Workstation 2.1 para Itanium Processor https://rhn.redhat.com/ |
|
Standar resources |
|
| Property | Value |
| CVE | CVE-2009-0798 |
| BID | 34692 |
Other resources |
|
|
Debian Security Advisory (DSA-1786-1) http://lists.debian.org/debian-security-announce/2009/msg00097.html Red Hat Security Advisory (RHSA-2009:0474-1) https://rhn.redhat.com/errata/RHSA-2009-0474.html |
|
Version history |
||
| Version | Comments | Date |
| 1.0 | Aviso emitido | 2009-05-06 |
| 1.1 | Aviso emitido por Red Hat (RHSA-2009:0474-1) | 2009-05-08 |