Vulnerabilities (CVE)

Filtered by vendor Tim Hockin Subscribe
Filtered by product Acpid
Total 3 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2009-0798 1 Tim Hockin 1 Acpid 2024-02-28 5.0 MEDIUM N/A
ACPI Event Daemon (acpid) before 1.0.10 allows remote attackers to cause a denial of service (CPU consumption and connectivity loss) by opening a large number of UNIX sockets without closing them, which triggers an infinite loop.
CVE-2009-4033 1 Tim Hockin 1 Acpid 2024-02-28 6.9 MEDIUM N/A
A certain Red Hat patch for acpid 1.0.4 effectively triggers a call to the open function with insufficient arguments, which might allow local users to leverage weak permissions on /var/log/acpid, and obtain sensitive information by reading this file, cause a denial of service by overwriting this file, or gain privileges by executing this file.
CVE-2009-4235 1 Tim Hockin 1 Acpid 2024-02-28 6.9 MEDIUM N/A
acpid 1.0.4 sets an unrestrictive umask, which might allow local users to leverage weak permissions on /var/log/acpid, and obtain sensitive information by reading this file or cause a denial of service by overwriting this file, a different vulnerability than CVE-2009-4033.