CVE-2009-0798
ACPI Event Daemon (acpid) before 1.0.10 allows remote attackers to cause a denial of service (CPU...
ACPI Event Daemon (acpid) before 1.0.10 allows remote attackers to cause a denial of service (CPU consumption and connectivity loss) by opening a large number of UNIX sockets without closing them, which triggers an infinite loop.
Exploit likelihood
What each source reports
NVD Score used
5.0
ACPI Event Daemon (acpid) before 1.0.10 allows remote attackers to cause a denial of service (CPU consumption and connectivity loss) by opening a large number of UNIX sockets without closing them, which triggers an infinite loop.
- Record
CVE-2009-0798- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Weakness
- CWE-399
- Updated
- 2026-11-02
CVE List No score
ACPI Event Daemon (acpid) before 1.0.10 allows remote attackers to cause a denial of service (CPU consumption and connectivity loss) by opening a large number of UNIX sockets without closing them, which triggers an infinite loop.
- Record
CVE-2009-0798- Updated
- 2026-11-02
EUVDEUVD-2009-0796 No score
ACPI Event Daemon (acpid) before 1.0.10 allows remote attackers to cause a denial of service (CPU consumption and connectivity loss) by opening a large number of UNIX sockets without closing them, which triggers an infinite loop.
- Record
EUVD-2009-0796- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-6hf5-95q4-x9mh No score
ACPI Event Daemon (acpid) before 1.0.10 allows remote attackers to cause a denial of service (CPU...
ACPI Event Daemon (acpid) before 1.0.10 allows remote attackers to cause a denial of service (CPU consumption and connectivity loss) by opening a large number of UNIX sockets without closing them, which triggers an infinite loop.
- Record
GHSA-6hf5-95q4-x9mh- Updated
- 2026-11-02
OSV No score
ACPI Event Daemon (acpid) before 1.0.10 allows remote attackers to cause a denial of service (CPU consumption and connectivity loss) by opening a large number of UNIX sockets without closing them, which triggers an infinite loop.
- Record
CVE-2009-0798- Updated
- 2026-11-02
OSVDEBIAN-CVE-2009-0798 No score
ACPI Event Daemon (acpid) before 1.0.10 allows remote attackers to cause a denial of service (CPU consumption and connectivity loss) by opening a large number of UNIX sockets without closing them, which triggers an infinite loop.
- Record
DEBIAN-CVE-2009-0798- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
acpidDebian:12 |
before 1.0.10-1 | 1.0.10-1 |
acpidDebian:13 |
before 1.0.10-1 | 1.0.10-1 |
acpidDebian:14 |
before 1.0.10-1 | 1.0.10-1 |
acpidDebian:4.0 |
before 1.0.4-5etch1, plus listed versions 1.0.4-5 |
1.0.4-5etch1 |
acpidDebian:5.0 |
before 1.0.8-1lenny1, plus listed versions 1.0.8-1 |
1.0.8-1lenny1 |
acpidRed Hat:enterprise_linux:2.1::as |
before 0:1.0.1-3 | 0:1.0.1-3 |
acpidRed Hat:enterprise_linux:2.1::aw |
before 0:1.0.1-3 | 0:1.0.1-3 |
acpidRed Hat:enterprise_linux:3::as |
before 0:1.0.2-4 | 0:1.0.2-4 |
acpid-debuginfoRed Hat:enterprise_linux:3::as |
before 0:1.0.2-4 | 0:1.0.2-4 |
acpidRed Hat:enterprise_linux:3::desktop |
before 0:1.0.2-4 | 0:1.0.2-4 |
Show 17 moreShow less
| Package | Affected | Fixed |
|---|---|---|
acpid-debuginfoRed Hat:enterprise_linux:3::desktop |
before 0:1.0.2-4 | 0:1.0.2-4 |
acpidRed Hat:enterprise_linux:3::es |
before 0:1.0.2-4 | 0:1.0.2-4 |
acpid-debuginfoRed Hat:enterprise_linux:3::es |
before 0:1.0.2-4 | 0:1.0.2-4 |
acpidRed Hat:enterprise_linux:3::ws |
before 0:1.0.2-4 | 0:1.0.2-4 |
acpid-debuginfoRed Hat:enterprise_linux:3::ws |
before 0:1.0.2-4 | 0:1.0.2-4 |
acpidRed Hat:enterprise_linux:4::as |
before 0:1.0.3-2.el4_7.1 | 0:1.0.3-2.el4_7.1 |
acpid-debuginfoRed Hat:enterprise_linux:4::as |
before 0:1.0.3-2.el4_7.1 | 0:1.0.3-2.el4_7.1 |
acpidRed Hat:enterprise_linux:4::desktop |
before 0:1.0.3-2.el4_7.1 | 0:1.0.3-2.el4_7.1 |
acpid-debuginfoRed Hat:enterprise_linux:4::desktop |
before 0:1.0.3-2.el4_7.1 | 0:1.0.3-2.el4_7.1 |
acpidRed Hat:enterprise_linux:4::es |
before 0:1.0.3-2.el4_7.1 | 0:1.0.3-2.el4_7.1 |
acpid-debuginfoRed Hat:enterprise_linux:4::es |
before 0:1.0.3-2.el4_7.1 | 0:1.0.3-2.el4_7.1 |
acpidRed Hat:enterprise_linux:4::ws |
before 0:1.0.3-2.el4_7.1 | 0:1.0.3-2.el4_7.1 |
acpid-debuginfoRed Hat:enterprise_linux:4::ws |
before 0:1.0.3-2.el4_7.1 | 0:1.0.3-2.el4_7.1 |
acpidRed Hat:enterprise_linux:5::client |
before 0:1.0.4-7.el5_3.1 | 0:1.0.4-7.el5_3.1 |
acpid-debuginfoRed Hat:enterprise_linux:5::client |
before 0:1.0.4-7.el5_3.1 | 0:1.0.4-7.el5_3.1 |
acpidRed Hat:enterprise_linux:5::server |
before 0:1.0.4-7.el5_3.1 | 0:1.0.4-7.el5_3.1 |
acpid-debuginfoRed Hat:enterprise_linux:5::server |
before 0:1.0.4-7.el5_3.1 | 0:1.0.4-7.el5_3.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2009-0798 is a medium vulnerability (CVSS 5.0) in Tim Hockin Acpid, published April 24, 2009. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.31%, the 83rd percentile. Fixed in acpid 1.0.10-1.
References
ubuntu.com/usn/USN-766-1
exchange.xforce.ibmcloud.com/vulnerabilities/50060
redhat.com/support/errata/RHSA-2009-0474.html
secunia.com/advisories/34838
securitytracker.com/id?1022182
bugzilla.redhat.com/show_bug.cgi?id=494443
Show 22 moreShow less
gentoo.org/security/en/glsa/glsa-200905-06.xml
secunia.com/advisories/34918
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7560
secunia.com/advisories/34914
secunia.com/advisories/35209
redhat.com/archives/fedora-package-announce/2009-May/msg01365.html
securityfocus.com/bid/34692
debian.org/security/2009/dsa-1786
mandriva.com/security/advisories?name=MDVSA-2009:107
bugzilla.redhat.com/show_bug.cgi?id=502583
secunia.com/advisories/35231
secunia.com/advisories/35010
redhat.com/archives/fedora-package-announce/2009-May/msg01342.html
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9955
nvd.nist.gov/vuln/detail/CVE-2009-0798
github.com/advisories/GHSA-6hf5-95q4-x9mh
security-tracker.debian.org/tracker/CVE-2009-0798
access.redhat.com/errata/RHSA-2009:0474
access.redhat.com/security/updates/classification
security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_0474.json
access.redhat.com/security/cve/CVE-2009-0798
cve.org/CVERecord?id=CVE-2009-0798