CVE-2011-1159
acpid.c in acpid before 2.0.9 does not properly handle a situation in which a process has...
acpid.c in acpid before 2.0.9 does not properly handle a situation in which a process has connected to acpid.socket but is not reading any data, which allows local users to cause a denial of service (daemon hang) via a crafted application that performs a connect system call but no read system calls.
Exploit likelihood
What each source reports
NVD Score used
acpid.c in acpid before 2.0.9 does not properly handle a situation in which a process has connected to acpid.socket but is not reading any data, which allows local users to cause a denial of service (daemon hang) via a crafted application that performs a connect system call but no read system calls.
- Record
CVE-2011-1159- CVSS 2.0
- 2.1 Low
AV:L/AC:L/Au:N/C:N/I:N/A:P - Weakness
- CWE-20
- Updated
- 2026-11-02
CVE List No score
acpid.c in acpid before 2.0.9 does not properly handle a situation in which a process has connected to acpid.socket but is not reading any data, which allows local users to cause a denial of service (daemon hang) via a crafted application that performs a connect system call but no read system calls.
- Record
CVE-2011-1159- Updated
- 2026-11-02
EUVDEUVD-2011-1169 No score
acpid.c in acpid before 2.0.9 does not properly handle a situation in which a process has connected to acpid.socket but is not reading any data, which allows local users to cause a denial of service (daemon hang) via a crafted application that performs a connect system call but no read system calls.
- Record
EUVD-2011-1169- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-vp73-h36r-mx65 No score
acpid.c in acpid before 2.0.9 does not properly handle a situation in which a process has...
acpid.c in acpid before 2.0.9 does not properly handle a situation in which a process has connected to acpid.socket but is not reading any data, which allows local users to cause a denial of service (daemon hang) via a crafted application that performs a connect system call but no read system calls.
- Record
GHSA-vp73-h36r-mx65- Weakness
- CWE-20
- Updated
- 2026-11-02
OSV No score
acpid.c in acpid before 2.0.9 does not properly handle a situation in which a process has connected to acpid.socket but is not reading any data, which allows local users to cause a denial of service (daemon hang) via a crafted application that performs a connect system call but no read system calls.
- Record
CVE-2011-1159- Updated
- 2026-11-02
OSVDEBIAN-CVE-2011-1159 No score
acpid.c in acpid before 2.0.9 does not properly handle a situation in which a process has connected to acpid.socket but is not reading any data, which allows local users to cause a denial of service (daemon hang) via a crafted application that performs a connect system call but no read system calls.
- Record
DEBIAN-CVE-2011-1159- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
acpidDebian:12 |
before 1:2.0.9-1 | 1:2.0.9-1 |
acpidDebian:13 |
before 1:2.0.9-1 | 1:2.0.9-1 |
acpidDebian:14 |
before 1:2.0.9-1 | 1:2.0.9-1 |
acpidDebian:5.0 |
before 1.0.8-1lenny4, plus listed versions 1.0.8-11.0.8-1lenny11.0.8-1lenny21.0.8-1lenny3 |
1.0.8-1lenny4 |
acpidDebian:6.0 |
before 1:2.0.7-1squeeze3, plus listed versions 1:2.0.7-1 |
1:2.0.7-1squeeze3 |
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | acpid 1.0.x - Multiple Local Denial of Service Vulnerabilities | 2011-01-19 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2011-1159 is a low vulnerability (CVSS 2.1) in Tedfelix Acpid, published October 5, 2011. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 1.09%, the 65th percentile. Fixed in acpid 1:2.0.9-1.
References
securityfocus.com/bid/45915
lists.fedoraproject.org/pipermail/package-announce/2011-May/059880.html
secunia.com/advisories/44621
openwall.com/lists/oss-security/2011/03/15/7
bugzilla.redhat.com/show_bug.cgi?id=688698