| 0 |
| url |
VCID-36cy-r7r4-wkhm |
| vulnerability_id |
VCID-36cy-r7r4-wkhm |
| summary |
A use-after-free flaw was found in D-Bus Development branch <= 1.13.16, dbus-1.12.x stable branch <= 1.12.18, and dbus-1.10.x and older branches <= 1.10.30 when a system has multiple usernames sharing the same UID. When a set of policy rules references these usernames, D-Bus may free some memory in the heap, which is still used by data structures necessary for the other usernames sharing the UID, possibly leading to a crash or other undefined behaviors |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2020-35512
|
| risk_score |
3.1 |
| exploitability |
0.5 |
| weighted_severity |
6.3 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-36cy-r7r4-wkhm |
|
| 1 |
| url |
VCID-9fwx-nsd6-q7dk |
| vulnerability_id |
VCID-9fwx-nsd6-q7dk |
| summary |
The dbus-daemon in D-Bus before 1.6.24 and 1.8.x before 1.8.8 does not properly close old connections, which allows local users to cause a denial of service (incomplete connection consumption and prevention of new connections) via a large number of incomplete connections. |
| references |
|
| fixed_packages |
| 0 |
| url |
pkg:deb/debian/dbus@1.6.8-1%2Bdeb7u6 |
| purl |
pkg:deb/debian/dbus@1.6.8-1%2Bdeb7u6 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-36cy-r7r4-wkhm |
|
| 1 |
| vulnerability |
VCID-9fwx-nsd6-q7dk |
|
| 2 |
| vulnerability |
VCID-be5q-4qsm-j7fv |
|
| 3 |
| vulnerability |
VCID-dbck-8yft-hfcv |
|
| 4 |
| vulnerability |
VCID-fa4x-mag7-7yd3 |
|
| 5 |
| vulnerability |
VCID-faxp-g9wk-gud1 |
|
| 6 |
| vulnerability |
VCID-fw8a-ea75-wfc2 |
|
| 7 |
| vulnerability |
VCID-gz93-46e4-buh9 |
|
| 8 |
| vulnerability |
VCID-mma8-s29r-4qg4 |
|
| 9 |
| vulnerability |
VCID-q69r-s5rq-b7h5 |
|
| 10 |
| vulnerability |
VCID-qhe4-26mq-bfhn |
|
| 11 |
| vulnerability |
VCID-rex4-wk91-dqam |
|
| 12 |
| vulnerability |
VCID-sb4y-sjrz-hbfy |
|
| 13 |
| vulnerability |
VCID-sm1d-3abg-x7es |
|
| 14 |
| vulnerability |
VCID-su2j-hppa-kfc6 |
|
| 15 |
| vulnerability |
VCID-t59z-41wj-5fes |
|
| 16 |
| vulnerability |
VCID-t8xu-6ncf-que3 |
|
| 17 |
| vulnerability |
VCID-tgwz-nsd4-qbd1 |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:deb/debian/dbus@1.6.8-1%252Bdeb7u6 |
|
| 1 |
|
|
| aliases |
CVE-2014-3639
|
| risk_score |
null |
| exploitability |
0.5 |
| weighted_severity |
0.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-9fwx-nsd6-q7dk |
|
| 2 |
| url |
VCID-be5q-4qsm-j7fv |
| vulnerability_id |
VCID-be5q-4qsm-j7fv |
| summary |
D-Bus 1.3.0 through 1.6.x before 1.6.24 and 1.8.x before 1.8.8 does not properly close connections for processes that have terminated, which allows local users to cause a denial of service via a D-bus message containing a D-Bus connection file descriptor. |
| references |
|
| fixed_packages |
| 0 |
| url |
pkg:deb/debian/dbus@1.6.8-1%2Bdeb7u6 |
| purl |
pkg:deb/debian/dbus@1.6.8-1%2Bdeb7u6 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-36cy-r7r4-wkhm |
|
| 1 |
| vulnerability |
VCID-9fwx-nsd6-q7dk |
|
| 2 |
| vulnerability |
VCID-be5q-4qsm-j7fv |
|
| 3 |
| vulnerability |
VCID-dbck-8yft-hfcv |
|
| 4 |
| vulnerability |
VCID-fa4x-mag7-7yd3 |
|
| 5 |
| vulnerability |
VCID-faxp-g9wk-gud1 |
|
| 6 |
| vulnerability |
VCID-fw8a-ea75-wfc2 |
|
| 7 |
| vulnerability |
VCID-gz93-46e4-buh9 |
|
| 8 |
| vulnerability |
VCID-mma8-s29r-4qg4 |
|
| 9 |
| vulnerability |
VCID-q69r-s5rq-b7h5 |
|
| 10 |
| vulnerability |
VCID-qhe4-26mq-bfhn |
|
| 11 |
| vulnerability |
VCID-rex4-wk91-dqam |
|
| 12 |
| vulnerability |
VCID-sb4y-sjrz-hbfy |
|
| 13 |
| vulnerability |
VCID-sm1d-3abg-x7es |
|
| 14 |
| vulnerability |
VCID-su2j-hppa-kfc6 |
|
| 15 |
| vulnerability |
VCID-t59z-41wj-5fes |
|
| 16 |
| vulnerability |
VCID-t8xu-6ncf-que3 |
|
| 17 |
| vulnerability |
VCID-tgwz-nsd4-qbd1 |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:deb/debian/dbus@1.6.8-1%252Bdeb7u6 |
|
| 1 |
|
|
| aliases |
CVE-2014-3637
|
| risk_score |
null |
| exploitability |
0.5 |
| weighted_severity |
0.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-be5q-4qsm-j7fv |
|
| 3 |
| url |
VCID-dbck-8yft-hfcv |
| vulnerability_id |
VCID-dbck-8yft-hfcv |
| summary |
An issue was discovered in dbus >= 1.3.0 before 1.12.18. The DBusServer in libdbus, as used in dbus-daemon, leaks file descriptors when a message exceeds the per-message file descriptor limit. A local attacker with access to the D-Bus system bus or another system service's private AF_UNIX socket could use this to make the system service reach its file descriptor limit, denying service to subsequent D-Bus clients. |
| references |
| 0 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
| 10 |
|
| 11 |
|
| 12 |
|
| 13 |
|
|
| fixed_packages |
|
| aliases |
CVE-2020-12049
|
| risk_score |
3.0 |
| exploitability |
0.5 |
| weighted_severity |
5.9 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-dbck-8yft-hfcv |
|
| 4 |
| url |
VCID-ds8h-cht5-qycy |
| vulnerability_id |
VCID-ds8h-cht5-qycy |
| summary |
The configure script in D-Bus (aka DBus) 1.2.x before 1.2.28 allows local users to overwrite arbitrary files via a symlink attack on an unspecified file in /tmp/. |
| references |
|
| fixed_packages |
| 0 |
| url |
pkg:deb/debian/dbus@1.6.8-1%2Bdeb7u6 |
| purl |
pkg:deb/debian/dbus@1.6.8-1%2Bdeb7u6 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-36cy-r7r4-wkhm |
|
| 1 |
| vulnerability |
VCID-9fwx-nsd6-q7dk |
|
| 2 |
| vulnerability |
VCID-be5q-4qsm-j7fv |
|
| 3 |
| vulnerability |
VCID-dbck-8yft-hfcv |
|
| 4 |
| vulnerability |
VCID-fa4x-mag7-7yd3 |
|
| 5 |
| vulnerability |
VCID-faxp-g9wk-gud1 |
|
| 6 |
| vulnerability |
VCID-fw8a-ea75-wfc2 |
|
| 7 |
| vulnerability |
VCID-gz93-46e4-buh9 |
|
| 8 |
| vulnerability |
VCID-mma8-s29r-4qg4 |
|
| 9 |
| vulnerability |
VCID-q69r-s5rq-b7h5 |
|
| 10 |
| vulnerability |
VCID-qhe4-26mq-bfhn |
|
| 11 |
| vulnerability |
VCID-rex4-wk91-dqam |
|
| 12 |
| vulnerability |
VCID-sb4y-sjrz-hbfy |
|
| 13 |
| vulnerability |
VCID-sm1d-3abg-x7es |
|
| 14 |
| vulnerability |
VCID-su2j-hppa-kfc6 |
|
| 15 |
| vulnerability |
VCID-t59z-41wj-5fes |
|
| 16 |
| vulnerability |
VCID-t8xu-6ncf-que3 |
|
| 17 |
| vulnerability |
VCID-tgwz-nsd4-qbd1 |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:deb/debian/dbus@1.6.8-1%252Bdeb7u6 |
|
|
| aliases |
CVE-2011-2533
|
| risk_score |
null |
| exploitability |
null |
| weighted_severity |
null |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-ds8h-cht5-qycy |
|
| 5 |
|
| 6 |
| url |
VCID-faxp-g9wk-gud1 |
| vulnerability_id |
VCID-faxp-g9wk-gud1 |
| summary |
D-Bus before 1.15.6 sometimes allows unprivileged users to crash dbus-daemon. If a privileged user with control over the dbus-daemon is using the org.freedesktop.DBus.Monitoring interface to monitor message bus traffic, then an unprivileged user with the ability to connect to the same dbus-daemon can cause a dbus-daemon crash under some circumstances via an unreplyable message. When done on the well-known system bus, this is a denial-of-service vulnerability. The fixed versions are 1.12.28, 1.14.8, and 1.15.6. |
| references |
| 0 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
| 10 |
|
| 11 |
|
| 12 |
|
| 13 |
|
|
| fixed_packages |
|
| aliases |
CVE-2023-34969
|
| risk_score |
2.8 |
| exploitability |
0.5 |
| weighted_severity |
5.6 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-faxp-g9wk-gud1 |
|
| 7 |
| url |
VCID-fw8a-ea75-wfc2 |
| vulnerability_id |
VCID-fw8a-ea75-wfc2 |
| summary |
D-Bus 1.4.x through 1.6.x before 1.6.30, 1.8.x before 1.8.16, and 1.9.x before 1.9.10 does not validate the source of ActivationFailure signals, which allows local users to cause a denial of service (activation failure error returned) by leveraging a race condition involving sending an ActivationFailure signal before systemd responds. |
| references |
|
| fixed_packages |
| 0 |
| url |
pkg:deb/debian/dbus@1.6.8-1%2Bdeb7u6 |
| purl |
pkg:deb/debian/dbus@1.6.8-1%2Bdeb7u6 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-36cy-r7r4-wkhm |
|
| 1 |
| vulnerability |
VCID-9fwx-nsd6-q7dk |
|
| 2 |
| vulnerability |
VCID-be5q-4qsm-j7fv |
|
| 3 |
| vulnerability |
VCID-dbck-8yft-hfcv |
|
| 4 |
| vulnerability |
VCID-fa4x-mag7-7yd3 |
|
| 5 |
| vulnerability |
VCID-faxp-g9wk-gud1 |
|
| 6 |
| vulnerability |
VCID-fw8a-ea75-wfc2 |
|
| 7 |
| vulnerability |
VCID-gz93-46e4-buh9 |
|
| 8 |
| vulnerability |
VCID-mma8-s29r-4qg4 |
|
| 9 |
| vulnerability |
VCID-q69r-s5rq-b7h5 |
|
| 10 |
| vulnerability |
VCID-qhe4-26mq-bfhn |
|
| 11 |
| vulnerability |
VCID-rex4-wk91-dqam |
|
| 12 |
| vulnerability |
VCID-sb4y-sjrz-hbfy |
|
| 13 |
| vulnerability |
VCID-sm1d-3abg-x7es |
|
| 14 |
| vulnerability |
VCID-su2j-hppa-kfc6 |
|
| 15 |
| vulnerability |
VCID-t59z-41wj-5fes |
|
| 16 |
| vulnerability |
VCID-t8xu-6ncf-que3 |
|
| 17 |
| vulnerability |
VCID-tgwz-nsd4-qbd1 |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:deb/debian/dbus@1.6.8-1%252Bdeb7u6 |
|
| 1 |
|
|
| aliases |
CVE-2015-0245
|
| risk_score |
null |
| exploitability |
0.5 |
| weighted_severity |
0.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-fw8a-ea75-wfc2 |
|
| 8 |
| url |
VCID-gz93-46e4-buh9 |
| vulnerability_id |
VCID-gz93-46e4-buh9 |
| summary |
D-Bus 1.3.0 through 1.6.x before 1.6.24 and 1.8.x before 1.8.8 allows local users to (1) cause a denial of service (prevention of new connections and connection drop) by queuing the maximum number of file descriptors or (2) cause a denial of service (disconnect) via multiple messages that combine to have more than the allowed number of file descriptors for a single sendmsg call. |
| references |
| 0 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
| 10 |
|
| 11 |
|
| 12 |
|
| 13 |
|
| 14 |
|
| 15 |
|
| 16 |
|
| 17 |
|
| 18 |
|
|
| fixed_packages |
| 0 |
| url |
pkg:deb/debian/dbus@1.6.8-1%2Bdeb7u6 |
| purl |
pkg:deb/debian/dbus@1.6.8-1%2Bdeb7u6 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-36cy-r7r4-wkhm |
|
| 1 |
| vulnerability |
VCID-9fwx-nsd6-q7dk |
|
| 2 |
| vulnerability |
VCID-be5q-4qsm-j7fv |
|
| 3 |
| vulnerability |
VCID-dbck-8yft-hfcv |
|
| 4 |
| vulnerability |
VCID-fa4x-mag7-7yd3 |
|
| 5 |
| vulnerability |
VCID-faxp-g9wk-gud1 |
|
| 6 |
| vulnerability |
VCID-fw8a-ea75-wfc2 |
|
| 7 |
| vulnerability |
VCID-gz93-46e4-buh9 |
|
| 8 |
| vulnerability |
VCID-mma8-s29r-4qg4 |
|
| 9 |
| vulnerability |
VCID-q69r-s5rq-b7h5 |
|
| 10 |
| vulnerability |
VCID-qhe4-26mq-bfhn |
|
| 11 |
| vulnerability |
VCID-rex4-wk91-dqam |
|
| 12 |
| vulnerability |
VCID-sb4y-sjrz-hbfy |
|
| 13 |
| vulnerability |
VCID-sm1d-3abg-x7es |
|
| 14 |
| vulnerability |
VCID-su2j-hppa-kfc6 |
|
| 15 |
| vulnerability |
VCID-t59z-41wj-5fes |
|
| 16 |
| vulnerability |
VCID-t8xu-6ncf-que3 |
|
| 17 |
| vulnerability |
VCID-tgwz-nsd4-qbd1 |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:deb/debian/dbus@1.6.8-1%252Bdeb7u6 |
|
| 1 |
|
|
| aliases |
CVE-2014-3636
|
| risk_score |
null |
| exploitability |
0.5 |
| weighted_severity |
0.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-gz93-46e4-buh9 |
|
| 9 |
| url |
VCID-mkkj-84n6-73fn |
| vulnerability_id |
VCID-mkkj-84n6-73fn |
| summary |
The _dbus_header_byteswap function in dbus-marshal-header.c in D-Bus (aka DBus) 1.2.x before 1.2.28, 1.4.x before 1.4.12, and 1.5.x before 1.5.4 does not properly handle a non-native byte order, which allows local users to cause a denial of service (connection loss), obtain potentially sensitive information, or conduct unspecified state-modification attacks via crafted messages. |
| references |
|
| fixed_packages |
| 0 |
| url |
pkg:deb/debian/dbus@1.6.8-1%2Bdeb7u6 |
| purl |
pkg:deb/debian/dbus@1.6.8-1%2Bdeb7u6 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-36cy-r7r4-wkhm |
|
| 1 |
| vulnerability |
VCID-9fwx-nsd6-q7dk |
|
| 2 |
| vulnerability |
VCID-be5q-4qsm-j7fv |
|
| 3 |
| vulnerability |
VCID-dbck-8yft-hfcv |
|
| 4 |
| vulnerability |
VCID-fa4x-mag7-7yd3 |
|
| 5 |
| vulnerability |
VCID-faxp-g9wk-gud1 |
|
| 6 |
| vulnerability |
VCID-fw8a-ea75-wfc2 |
|
| 7 |
| vulnerability |
VCID-gz93-46e4-buh9 |
|
| 8 |
| vulnerability |
VCID-mma8-s29r-4qg4 |
|
| 9 |
| vulnerability |
VCID-q69r-s5rq-b7h5 |
|
| 10 |
| vulnerability |
VCID-qhe4-26mq-bfhn |
|
| 11 |
| vulnerability |
VCID-rex4-wk91-dqam |
|
| 12 |
| vulnerability |
VCID-sb4y-sjrz-hbfy |
|
| 13 |
| vulnerability |
VCID-sm1d-3abg-x7es |
|
| 14 |
| vulnerability |
VCID-su2j-hppa-kfc6 |
|
| 15 |
| vulnerability |
VCID-t59z-41wj-5fes |
|
| 16 |
| vulnerability |
VCID-t8xu-6ncf-que3 |
|
| 17 |
| vulnerability |
VCID-tgwz-nsd4-qbd1 |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:deb/debian/dbus@1.6.8-1%252Bdeb7u6 |
|
|
| aliases |
CVE-2011-2200
|
| risk_score |
null |
| exploitability |
0.5 |
| weighted_severity |
0.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-mkkj-84n6-73fn |
|
| 10 |
| url |
VCID-mma8-s29r-4qg4 |
| vulnerability_id |
VCID-mma8-s29r-4qg4 |
| summary |
The dbus-daemon in D-Bus 1.2.x through 1.4.x, 1.6.x before 1.6.20, and 1.8.x before 1.8.4, sends an AccessDenied error to the service instead of a client when the client is prohibited from accessing the service, which allows local users to cause a denial of service (initialization failure and exit) or possibly conduct a side-channel attack via a D-Bus message to an inactive service. |
| references |
| 0 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
| 10 |
|
| 11 |
|
| 12 |
|
| 13 |
|
| 14 |
|
| 15 |
|
| 16 |
|
| 17 |
|
| 18 |
|
| 19 |
|
| 20 |
|
|
| fixed_packages |
| 0 |
| url |
pkg:deb/debian/dbus@1.6.8-1%2Bdeb7u6 |
| purl |
pkg:deb/debian/dbus@1.6.8-1%2Bdeb7u6 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-36cy-r7r4-wkhm |
|
| 1 |
| vulnerability |
VCID-9fwx-nsd6-q7dk |
|
| 2 |
| vulnerability |
VCID-be5q-4qsm-j7fv |
|
| 3 |
| vulnerability |
VCID-dbck-8yft-hfcv |
|
| 4 |
| vulnerability |
VCID-fa4x-mag7-7yd3 |
|
| 5 |
| vulnerability |
VCID-faxp-g9wk-gud1 |
|
| 6 |
| vulnerability |
VCID-fw8a-ea75-wfc2 |
|
| 7 |
| vulnerability |
VCID-gz93-46e4-buh9 |
|
| 8 |
| vulnerability |
VCID-mma8-s29r-4qg4 |
|
| 9 |
| vulnerability |
VCID-q69r-s5rq-b7h5 |
|
| 10 |
| vulnerability |
VCID-qhe4-26mq-bfhn |
|
| 11 |
| vulnerability |
VCID-rex4-wk91-dqam |
|
| 12 |
| vulnerability |
VCID-sb4y-sjrz-hbfy |
|
| 13 |
| vulnerability |
VCID-sm1d-3abg-x7es |
|
| 14 |
| vulnerability |
VCID-su2j-hppa-kfc6 |
|
| 15 |
| vulnerability |
VCID-t59z-41wj-5fes |
|
| 16 |
| vulnerability |
VCID-t8xu-6ncf-que3 |
|
| 17 |
| vulnerability |
VCID-tgwz-nsd4-qbd1 |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:deb/debian/dbus@1.6.8-1%252Bdeb7u6 |
|
| 1 |
|
|
| aliases |
CVE-2014-3477
|
| risk_score |
null |
| exploitability |
0.5 |
| weighted_severity |
0.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-mma8-s29r-4qg4 |
|
| 11 |
| url |
VCID-q69r-s5rq-b7h5 |
| vulnerability_id |
VCID-q69r-s5rq-b7h5 |
| summary |
Off-by-one error in D-Bus 1.3.0 through 1.6.x before 1.6.24 and 1.8.x before 1.8.8, when running on a 64-bit system and the max_message_unix_fds limit is set to an odd number, allows local users to cause a denial of service (dbus-daemon crash) or possibly execute arbitrary code by sending one more file descriptor than the limit, which triggers a heap-based buffer overflow or an assertion failure. |
| references |
|
| fixed_packages |
| 0 |
| url |
pkg:deb/debian/dbus@1.6.8-1%2Bdeb7u6 |
| purl |
pkg:deb/debian/dbus@1.6.8-1%2Bdeb7u6 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-36cy-r7r4-wkhm |
|
| 1 |
| vulnerability |
VCID-9fwx-nsd6-q7dk |
|
| 2 |
| vulnerability |
VCID-be5q-4qsm-j7fv |
|
| 3 |
| vulnerability |
VCID-dbck-8yft-hfcv |
|
| 4 |
| vulnerability |
VCID-fa4x-mag7-7yd3 |
|
| 5 |
| vulnerability |
VCID-faxp-g9wk-gud1 |
|
| 6 |
| vulnerability |
VCID-fw8a-ea75-wfc2 |
|
| 7 |
| vulnerability |
VCID-gz93-46e4-buh9 |
|
| 8 |
| vulnerability |
VCID-mma8-s29r-4qg4 |
|
| 9 |
| vulnerability |
VCID-q69r-s5rq-b7h5 |
|
| 10 |
| vulnerability |
VCID-qhe4-26mq-bfhn |
|
| 11 |
| vulnerability |
VCID-rex4-wk91-dqam |
|
| 12 |
| vulnerability |
VCID-sb4y-sjrz-hbfy |
|
| 13 |
| vulnerability |
VCID-sm1d-3abg-x7es |
|
| 14 |
| vulnerability |
VCID-su2j-hppa-kfc6 |
|
| 15 |
| vulnerability |
VCID-t59z-41wj-5fes |
|
| 16 |
| vulnerability |
VCID-t8xu-6ncf-que3 |
|
| 17 |
| vulnerability |
VCID-tgwz-nsd4-qbd1 |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:deb/debian/dbus@1.6.8-1%252Bdeb7u6 |
|
| 1 |
|
|
| aliases |
CVE-2014-3635
|
| risk_score |
null |
| exploitability |
0.5 |
| weighted_severity |
0.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-q69r-s5rq-b7h5 |
|
| 12 |
| url |
VCID-qhe4-26mq-bfhn |
| vulnerability_id |
VCID-qhe4-26mq-bfhn |
| summary |
The _dbus_printf_string_upper_bound function in dbus/dbus-sysdeps-unix.c in D-Bus (aka DBus) 1.4.x before 1.4.26, 1.6.x before 1.6.12, and 1.7.x before 1.7.4 allows local users to cause a denial of service (service crash) via a crafted message. |
| references |
|
| fixed_packages |
| 0 |
| url |
pkg:deb/debian/dbus@1.6.8-1%2Bdeb7u6 |
| purl |
pkg:deb/debian/dbus@1.6.8-1%2Bdeb7u6 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-36cy-r7r4-wkhm |
|
| 1 |
| vulnerability |
VCID-9fwx-nsd6-q7dk |
|
| 2 |
| vulnerability |
VCID-be5q-4qsm-j7fv |
|
| 3 |
| vulnerability |
VCID-dbck-8yft-hfcv |
|
| 4 |
| vulnerability |
VCID-fa4x-mag7-7yd3 |
|
| 5 |
| vulnerability |
VCID-faxp-g9wk-gud1 |
|
| 6 |
| vulnerability |
VCID-fw8a-ea75-wfc2 |
|
| 7 |
| vulnerability |
VCID-gz93-46e4-buh9 |
|
| 8 |
| vulnerability |
VCID-mma8-s29r-4qg4 |
|
| 9 |
| vulnerability |
VCID-q69r-s5rq-b7h5 |
|
| 10 |
| vulnerability |
VCID-qhe4-26mq-bfhn |
|
| 11 |
| vulnerability |
VCID-rex4-wk91-dqam |
|
| 12 |
| vulnerability |
VCID-sb4y-sjrz-hbfy |
|
| 13 |
| vulnerability |
VCID-sm1d-3abg-x7es |
|
| 14 |
| vulnerability |
VCID-su2j-hppa-kfc6 |
|
| 15 |
| vulnerability |
VCID-t59z-41wj-5fes |
|
| 16 |
| vulnerability |
VCID-t8xu-6ncf-que3 |
|
| 17 |
| vulnerability |
VCID-tgwz-nsd4-qbd1 |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:deb/debian/dbus@1.6.8-1%252Bdeb7u6 |
|
| 1 |
|
|
| aliases |
CVE-2013-2168
|
| risk_score |
null |
| exploitability |
0.5 |
| weighted_severity |
0.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-qhe4-26mq-bfhn |
|
| 13 |
|
| 14 |
| url |
VCID-sb4y-sjrz-hbfy |
| vulnerability_id |
VCID-sb4y-sjrz-hbfy |
| summary |
The bus_connections_check_reply function in config-parser.c in D-Bus before 1.6.24 and 1.8.x before 1.8.8 allows local users to cause a denial of service (CPU consumption) via a large number of method calls. |
| references |
|
| fixed_packages |
| 0 |
| url |
pkg:deb/debian/dbus@1.6.8-1%2Bdeb7u6 |
| purl |
pkg:deb/debian/dbus@1.6.8-1%2Bdeb7u6 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-36cy-r7r4-wkhm |
|
| 1 |
| vulnerability |
VCID-9fwx-nsd6-q7dk |
|
| 2 |
| vulnerability |
VCID-be5q-4qsm-j7fv |
|
| 3 |
| vulnerability |
VCID-dbck-8yft-hfcv |
|
| 4 |
| vulnerability |
VCID-fa4x-mag7-7yd3 |
|
| 5 |
| vulnerability |
VCID-faxp-g9wk-gud1 |
|
| 6 |
| vulnerability |
VCID-fw8a-ea75-wfc2 |
|
| 7 |
| vulnerability |
VCID-gz93-46e4-buh9 |
|
| 8 |
| vulnerability |
VCID-mma8-s29r-4qg4 |
|
| 9 |
| vulnerability |
VCID-q69r-s5rq-b7h5 |
|
| 10 |
| vulnerability |
VCID-qhe4-26mq-bfhn |
|
| 11 |
| vulnerability |
VCID-rex4-wk91-dqam |
|
| 12 |
| vulnerability |
VCID-sb4y-sjrz-hbfy |
|
| 13 |
| vulnerability |
VCID-sm1d-3abg-x7es |
|
| 14 |
| vulnerability |
VCID-su2j-hppa-kfc6 |
|
| 15 |
| vulnerability |
VCID-t59z-41wj-5fes |
|
| 16 |
| vulnerability |
VCID-t8xu-6ncf-que3 |
|
| 17 |
| vulnerability |
VCID-tgwz-nsd4-qbd1 |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:deb/debian/dbus@1.6.8-1%252Bdeb7u6 |
|
| 1 |
|
|
| aliases |
CVE-2014-3638
|
| risk_score |
null |
| exploitability |
0.5 |
| weighted_severity |
0.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-sb4y-sjrz-hbfy |
|
| 15 |
| url |
VCID-sm1d-3abg-x7es |
| vulnerability_id |
VCID-sm1d-3abg-x7es |
| summary |
dbus 1.3.0 before 1.6.22 and 1.8.x before 1.8.6 allows local users to cause a denial of service (disconnect) via a certain sequence of crafted messages that cause the dbus-daemon to forward a message containing an invalid file descriptor. |
| references |
|
| fixed_packages |
| 0 |
| url |
pkg:deb/debian/dbus@1.6.8-1%2Bdeb7u6 |
| purl |
pkg:deb/debian/dbus@1.6.8-1%2Bdeb7u6 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-36cy-r7r4-wkhm |
|
| 1 |
| vulnerability |
VCID-9fwx-nsd6-q7dk |
|
| 2 |
| vulnerability |
VCID-be5q-4qsm-j7fv |
|
| 3 |
| vulnerability |
VCID-dbck-8yft-hfcv |
|
| 4 |
| vulnerability |
VCID-fa4x-mag7-7yd3 |
|
| 5 |
| vulnerability |
VCID-faxp-g9wk-gud1 |
|
| 6 |
| vulnerability |
VCID-fw8a-ea75-wfc2 |
|
| 7 |
| vulnerability |
VCID-gz93-46e4-buh9 |
|
| 8 |
| vulnerability |
VCID-mma8-s29r-4qg4 |
|
| 9 |
| vulnerability |
VCID-q69r-s5rq-b7h5 |
|
| 10 |
| vulnerability |
VCID-qhe4-26mq-bfhn |
|
| 11 |
| vulnerability |
VCID-rex4-wk91-dqam |
|
| 12 |
| vulnerability |
VCID-sb4y-sjrz-hbfy |
|
| 13 |
| vulnerability |
VCID-sm1d-3abg-x7es |
|
| 14 |
| vulnerability |
VCID-su2j-hppa-kfc6 |
|
| 15 |
| vulnerability |
VCID-t59z-41wj-5fes |
|
| 16 |
| vulnerability |
VCID-t8xu-6ncf-que3 |
|
| 17 |
| vulnerability |
VCID-tgwz-nsd4-qbd1 |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:deb/debian/dbus@1.6.8-1%252Bdeb7u6 |
|
| 1 |
|
|
| aliases |
CVE-2014-3533
|
| risk_score |
null |
| exploitability |
0.5 |
| weighted_severity |
0.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-sm1d-3abg-x7es |
|
| 16 |
| url |
VCID-su2j-hppa-kfc6 |
| vulnerability_id |
VCID-su2j-hppa-kfc6 |
| summary |
D-Bus 1.3.0 through 1.6.x before 1.6.26, 1.8.x before 1.8.10, and 1.9.x before 1.9.2 allows local users to cause a denial of service (prevention of new connections and connection drop) by queuing the maximum number of file descriptors. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-3636.1. |
| references |
|
| fixed_packages |
| 0 |
| url |
pkg:deb/debian/dbus@1.6.8-1%2Bdeb7u6 |
| purl |
pkg:deb/debian/dbus@1.6.8-1%2Bdeb7u6 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-36cy-r7r4-wkhm |
|
| 1 |
| vulnerability |
VCID-9fwx-nsd6-q7dk |
|
| 2 |
| vulnerability |
VCID-be5q-4qsm-j7fv |
|
| 3 |
| vulnerability |
VCID-dbck-8yft-hfcv |
|
| 4 |
| vulnerability |
VCID-fa4x-mag7-7yd3 |
|
| 5 |
| vulnerability |
VCID-faxp-g9wk-gud1 |
|
| 6 |
| vulnerability |
VCID-fw8a-ea75-wfc2 |
|
| 7 |
| vulnerability |
VCID-gz93-46e4-buh9 |
|
| 8 |
| vulnerability |
VCID-mma8-s29r-4qg4 |
|
| 9 |
| vulnerability |
VCID-q69r-s5rq-b7h5 |
|
| 10 |
| vulnerability |
VCID-qhe4-26mq-bfhn |
|
| 11 |
| vulnerability |
VCID-rex4-wk91-dqam |
|
| 12 |
| vulnerability |
VCID-sb4y-sjrz-hbfy |
|
| 13 |
| vulnerability |
VCID-sm1d-3abg-x7es |
|
| 14 |
| vulnerability |
VCID-su2j-hppa-kfc6 |
|
| 15 |
| vulnerability |
VCID-t59z-41wj-5fes |
|
| 16 |
| vulnerability |
VCID-t8xu-6ncf-que3 |
|
| 17 |
| vulnerability |
VCID-tgwz-nsd4-qbd1 |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:deb/debian/dbus@1.6.8-1%252Bdeb7u6 |
|
| 1 |
|
|
| aliases |
CVE-2014-7824
|
| risk_score |
null |
| exploitability |
0.5 |
| weighted_severity |
0.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-su2j-hppa-kfc6 |
|
| 17 |
|
| 18 |
| url |
VCID-t8xu-6ncf-que3 |
| vulnerability_id |
VCID-t8xu-6ncf-que3 |
| summary |
dbus 1.3.0 before 1.6.22 and 1.8.x before 1.8.6, when running on Linux 2.6.37-rc4 or later, allows local users to cause a denial of service (system-bus disconnect of other services or applications) by sending a message containing a file descriptor, then exceeding the maximum recursion depth before the initial message is forwarded. |
| references |
|
| fixed_packages |
| 0 |
| url |
pkg:deb/debian/dbus@1.6.8-1%2Bdeb7u6 |
| purl |
pkg:deb/debian/dbus@1.6.8-1%2Bdeb7u6 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-36cy-r7r4-wkhm |
|
| 1 |
| vulnerability |
VCID-9fwx-nsd6-q7dk |
|
| 2 |
| vulnerability |
VCID-be5q-4qsm-j7fv |
|
| 3 |
| vulnerability |
VCID-dbck-8yft-hfcv |
|
| 4 |
| vulnerability |
VCID-fa4x-mag7-7yd3 |
|
| 5 |
| vulnerability |
VCID-faxp-g9wk-gud1 |
|
| 6 |
| vulnerability |
VCID-fw8a-ea75-wfc2 |
|
| 7 |
| vulnerability |
VCID-gz93-46e4-buh9 |
|
| 8 |
| vulnerability |
VCID-mma8-s29r-4qg4 |
|
| 9 |
| vulnerability |
VCID-q69r-s5rq-b7h5 |
|
| 10 |
| vulnerability |
VCID-qhe4-26mq-bfhn |
|
| 11 |
| vulnerability |
VCID-rex4-wk91-dqam |
|
| 12 |
| vulnerability |
VCID-sb4y-sjrz-hbfy |
|
| 13 |
| vulnerability |
VCID-sm1d-3abg-x7es |
|
| 14 |
| vulnerability |
VCID-su2j-hppa-kfc6 |
|
| 15 |
| vulnerability |
VCID-t59z-41wj-5fes |
|
| 16 |
| vulnerability |
VCID-t8xu-6ncf-que3 |
|
| 17 |
| vulnerability |
VCID-tgwz-nsd4-qbd1 |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:deb/debian/dbus@1.6.8-1%252Bdeb7u6 |
|
| 1 |
|
|
| aliases |
CVE-2014-3532
|
| risk_score |
null |
| exploitability |
0.5 |
| weighted_severity |
0.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-t8xu-6ncf-que3 |
|
| 19 |
|
| 20 |
| url |
VCID-xygf-djgv-67fm |
| vulnerability_id |
VCID-xygf-djgv-67fm |
| summary |
libdbus 1.5.x and earlier, when used in setuid or other privileged programs in X.org and possibly other products, allows local users to gain privileges and execute arbitrary code via the DBUS_SYSTEM_BUS_ADDRESS environment variable. NOTE: libdbus maintainers state that this is a vulnerability in the applications that do not cleanse environment variables, not in libdbus itself: "we do not support use of libdbus in setuid binaries that do not sanitize their environment before their first call into libdbus." |
| references |
|
| fixed_packages |
| 0 |
| url |
pkg:deb/debian/dbus@1.6.8-1%2Bdeb7u6 |
| purl |
pkg:deb/debian/dbus@1.6.8-1%2Bdeb7u6 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-36cy-r7r4-wkhm |
|
| 1 |
| vulnerability |
VCID-9fwx-nsd6-q7dk |
|
| 2 |
| vulnerability |
VCID-be5q-4qsm-j7fv |
|
| 3 |
| vulnerability |
VCID-dbck-8yft-hfcv |
|
| 4 |
| vulnerability |
VCID-fa4x-mag7-7yd3 |
|
| 5 |
| vulnerability |
VCID-faxp-g9wk-gud1 |
|
| 6 |
| vulnerability |
VCID-fw8a-ea75-wfc2 |
|
| 7 |
| vulnerability |
VCID-gz93-46e4-buh9 |
|
| 8 |
| vulnerability |
VCID-mma8-s29r-4qg4 |
|
| 9 |
| vulnerability |
VCID-q69r-s5rq-b7h5 |
|
| 10 |
| vulnerability |
VCID-qhe4-26mq-bfhn |
|
| 11 |
| vulnerability |
VCID-rex4-wk91-dqam |
|
| 12 |
| vulnerability |
VCID-sb4y-sjrz-hbfy |
|
| 13 |
| vulnerability |
VCID-sm1d-3abg-x7es |
|
| 14 |
| vulnerability |
VCID-su2j-hppa-kfc6 |
|
| 15 |
| vulnerability |
VCID-t59z-41wj-5fes |
|
| 16 |
| vulnerability |
VCID-t8xu-6ncf-que3 |
|
| 17 |
| vulnerability |
VCID-tgwz-nsd4-qbd1 |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:deb/debian/dbus@1.6.8-1%252Bdeb7u6 |
|
|
| aliases |
CVE-2012-3524
|
| risk_score |
0.6 |
| exploitability |
2.0 |
| weighted_severity |
0.3 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-xygf-djgv-67fm |
|