Critical Security Update for acpid: Addressing CVE-2009-0798
Summary
RHSA-2009:0474: Red Hat Security Advisory: acpid security update. Affects acpid versions < 0:1.0.1-3. Fixed in 0:1.0.1-3. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The acpid package is a daemon that listens for Advanced Configuration and Power Interface (ACPI) events and executes scripts based on those events. It is essential for managing power-related tasks on Linux systems. This package is widely used in various Red Hat Enterprise Linux distributions, making its security crucial for system stability and integrity. The vulnerability identified as CVE-2009-0798 affects multiple versions of acpid across different Red Hat ecosystems, potentially leading to unauthorized access or system compromise.
Vulnerability Detail
CVE-2009-0798 is a security vulnerability in the acpid package that allows local users to execute arbitrary code with elevated privileges. This vulnerability arises from improper handling of ACPI events, which can be exploited by an attacker with local access to the system. The ramifications of this vulnerability include the potential for unauthorized access to sensitive data, system instability, and the ability to execute malicious commands. It is critical to address this vulnerability promptly to mitigate risks associated with local privilege escalation.
How To Fix
Minimum fixed version
0:1.0.1-3
This is the first release that contains the fix.
sudo dnf update acpidTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
If immediate patching is not possible, consider disabling the acpid service temporarily until the update can be applied. This can be done with the following command:
sudo systemctl stop acpid
However, this may affect power management features, so it should only be a temporary measure.
Conclusion
The acpid package is critical for managing power events in Linux systems, and the identified vulnerability (CVE-2009-0798) poses significant risks if left unaddressed. It is essential to update the package to the latest patched version to mitigate these risks. Regular monitoring and updates are crucial for maintaining system security.
See every vulnerability recorded for acpid →
FAQ
CVE-2009-0798 is a security vulnerability in the acpid package that allows local users to execute arbitrary code with elevated privileges.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without requiring any signup.
Failing to address this vulnerability can lead to unauthorized access, data breaches, and system instability.
It is recommended to regularly check for updates and apply them promptly to ensure your system is secure.
Yes, Vulert can monitor and alert you in real-time for open-source vulnerabilities using just a manifest file like package-lock.json.
Related vulnerabilities
Recent vulnerabilities recorded for acpid.
