Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 26

Export CSV
CVE-2023-34969

dbus: dbus-daemon: assertion failure when a monitor is active and a message from the driver cannot be delivered

D-Bus before 1.15.6 sometimes allows unprivileged users to crash dbus-daemon. If a privileged user with control over the dbus-daemon is using the org.freedesktop.DBus.Monitoring interface to monitor message bus traffic, then an unprivileged user with the ability to connect to the same dbus-daemon can cause a dbus-daemon crash under some circumstances via an unreplyable message. When done on the well-known system bus, this is a denial-of-service vulnerability. The fixed versions are 1.12.28, 1.14.8, and 1.15.6.

CVSS 3.1 · 6.5 Medium EPSS 1.3% KEV · Not listed
Vendors
Debian Fedoraproject Freedesktop and 1 more
Products
Debian Linux Fedora Dbus and 2 more
CVE-2008-3834

dbus denial of service

The dbus_signature_validate function in the D-bus library (libdbus) before 1.2.4 allows remote attackers to cause a denial of service (application abort) via a message containing a malformed signature, which triggers a failed assertion error.

CVSS 2.0 · 2.1 Low EPSS 4.6% KEV · Not listed
Vendors
Freedesktop Redhat
Products
Dbus Dbus1.0 Dbus1.1.0 and 1 more
CVE-2008-4311

dbus: incorrect use of [send|receive]_requested_reply policy rule attribute in system.conf

The default configuration of system.conf in D-Bus (aka DBus) before 1.2.6 omits the send_type attribute in certain rules, which allows local users to bypass intended access restrictions by (1) sending messages, related to send_requested_reply; and possibly (2) receiving messages, related to receive_requested_reply.

CVSS 2.0 · 4.6 Medium EPSS < 1% KEV · Not listed
Vendors
Freedesktop
Products
Dbus
CVE-2009-1189

dbus: invalid fix for CVE-2008-3834

The _dbus_validate_signature_with_reason function (dbus-marshal-validate.c) in D-Bus (aka DBus) before 1.2.14 uses incorrect logic to validate a basic type, which allows remote attackers to spoof a signature via a crafted key. NOTE: this is due to an incorrect fix for CVE-2008-3834.

CVSS 2.0 · 3.6 Low EPSS 1.3% KEV · Not listed
Vendors
Freedesktop Redhat
Products
Dbus Enterprise Linux
CVE-2008-0595

dbus security policy circumvention

dbus-daemon in D-Bus before 1.0.3, and 1.1.x before 1.1.20, recognizes send_interface attributes in allow directives in the security policy only for fully qualified method calls, which allows local users to bypass intended access restrictions via a method call with a NULL interface.

CVSS 2.0 · 4.6 Medium EPSS < 1% KEV · Not listed
Vendors
Fedoraproject Freedesktop Mandrakesoft and 1 more
Products
Fedora Dbus Mandrake Linux and 1 more
CVE-2019-12749

dbus: DBusServer DBUS_COOKIE_SHA1 authentication bypass

dbus before 1.10.28, 1.12.x before 1.12.16, and 1.13.x before 1.13.12, as used in DBusServer in Canonical Upstart in Ubuntu 14.04 (and in some, less common, uses of dbus-daemon), allows cookie spoofing because of symlink mishandling in the reference implementation of DBUS_COOKIE_SHA1 in the libdbus library. (This only affects the DBUS_COOKIE_SHA1 authentication mechanism.) A malicious client with write access to its own home directory could manipulate a ~/.dbus-keyrings symlink to cause a DBusServer with a different uid to read and write in unintended locations. In the worst case, this could result in the DBusServer reusing a cookie that is known to the malicious client, and treating that cookie as evidence that a subsequent client connection came from an attacker-chosen uid, allowing authentication bypass.

CVSS 3.1 · 7.1 High EPSS < 1% KEV · Not listed
Vendors
Canonical Freedesktop Redhat
Products
Ubuntu Linux Dbus Enterprise Linux and 2 more
CVE-2022-42012

dbus: `_dbus_marshal_byteswap` doesn't process fds in messages with "foreign" endianness correctly

An issue was discovered in D-Bus before 1.12.24, 1.13.x and 1.14.x before 1.14.4, and 1.15.x before 1.15.2. An authenticated attacker can cause dbus-daemon and other programs that use libdbus to crash by sending a message with attached file descriptors in an unexpected format.

CVSS 3.1 · 6.5 Medium EPSS 1.8% KEV · Not listed
Vendors
Fedoraproject Freedesktop Redhat
Products
Fedora Dbus Enterprise Linux and 1 more
CVE-2022-42011

dbus: dbus-daemon can be crashed by messages with array length inconsistent with element type

An issue was discovered in D-Bus before 1.12.24, 1.13.x and 1.14.x before 1.14.4, and 1.15.x before 1.15.2. An authenticated attacker can cause dbus-daemon and other programs that use libdbus to crash when receiving a message where an array length is inconsistent with the size of the element type.

CVSS 3.1 · 6.5 Medium EPSS 1.8% KEV · Not listed
Vendors
Fedoraproject Freedesktop Redhat
Products
Fedora Dbus Enterprise Linux and 1 more
CVE-2022-42010

dbus: dbus-daemon crashes when receiving message with incorrectly nested parentheses and curly brackets

An issue was discovered in D-Bus before 1.12.24, 1.13.x and 1.14.x before 1.14.4, and 1.15.x before 1.15.2. An authenticated attacker can cause dbus-daemon and other programs that use libdbus to crash when receiving a message with certain invalid type signatures.

CVSS 3.1 · 6.5 Medium EPSS 1.1% KEV · Not listed
Vendors
Fedoraproject Freedesktop Redhat
Products
Fedora Dbus Enterprise Linux and 1 more
CVE-2014-3477

dbus: denial of service flaw in dbus-daemon

The dbus-daemon in D-Bus 1.2.x through 1.4.x, 1.6.x before 1.6.20, and 1.8.x before 1.8.4, sends an AccessDenied error to the service instead of a client when the client is prohibited from accessing the service, which allows local users to cause a denial of service (initialization failure and exit) or possibly conduct a side-channel attack via a D-Bus message to an inactive service.

CVSS 3.1 · 4 Medium EPSS < 1% KEV · Not listed
Vendors
D-bus Project Freedesktop
Products
D-bus Dbus
CVE-2014-3532

dbus: denial of service in file descriptor passing feature

dbus 1.3.0 before 1.6.22 and 1.8.x before 1.8.6, when running on Linux 2.6.37-rc4 or later, allows local users to cause a denial of service (system-bus disconnect of other services or applications) by sending a message containing a file descriptor, then exceeding the maximum recursion depth before the initial message is forwarded.

CVSS 2.0 · 2.1 Low EPSS < 1% KEV · Not listed
Vendors
Debian Freedesktop Linux and 3 more
Products
Debian Linux Dbus Linux Kernel and 3 more
CVE-2014-3533

dbus: denial of service when forwarding invalid file descriptors

dbus 1.3.0 before 1.6.22 and 1.8.x before 1.8.6 allows local users to cause a denial of service (disconnect) via a certain sequence of crafted messages that cause the dbus-daemon to forward a message containing an invalid file descriptor.

CVSS 2.0 · 2.1 Low EPSS < 1% KEV · Not listed
Vendors
Debian Freedesktop Mageia Project and 1 more
Products
Debian Linux Dbus Mageia and 1 more
CVE-2014-3635

dbus: heap-based buffer overflow flaw in file descriptor passing

Off-by-one error in D-Bus 1.3.0 through 1.6.x before 1.6.24 and 1.8.x before 1.8.8, when running on a 64-bit system and the max_message_unix_fds limit is set to an odd number, allows local users to cause a denial of service (dbus-daemon crash) or possibly execute arbitrary code by sending one more file descriptor than the limit, which triggers a heap-based buffer overflow or an assertion failure.

CVSS 2.0 · 4.4 Medium EPSS < 1% KEV · Not listed
Vendors
D-bus Project Freedesktop Opensuse
Products
D-bus Dbus Opensuse
CVE-2014-3636

dbus: denial of service by queuing or splitting file descriptors

D-Bus 1.3.0 through 1.6.x before 1.6.24 and 1.8.x before 1.8.8 allows local users to (1) cause a denial of service (prevention of new connections and connection drop) by queuing the maximum number of file descriptors or (2) cause a denial of service (disconnect) via multiple messages that combine to have more than the allowed number of file descriptors for a single sendmsg call.

CVSS 2.0 · 1.9 Low EPSS < 1% KEV · Not listed
Vendors
D-bus Project Freedesktop Opensuse
Products
D-bus Dbus Opensuse
CVE-2014-3637

dbus: denial of service by creating unkillable D-Bus connections

D-Bus 1.3.0 through 1.6.x before 1.6.24 and 1.8.x before 1.8.8 does not properly close connections for processes that have terminated, which allows local users to cause a denial of service via a D-bus message containing a D-Bus connection file descriptor.

CVSS 2.0 · 2.1 Low EPSS < 1% KEV · Not listed
Vendors
Freedesktop Opensuse
Products
Dbus Opensuse
CVE-2014-3638

dbus: denial of service in method call handling

The bus_connections_check_reply function in config-parser.c in D-Bus before 1.6.24 and 1.8.x before 1.8.8 allows local users to cause a denial of service (CPU consumption) via a large number of method calls.

CVSS 2.0 · 2.1 Low EPSS < 1% KEV · Not listed
Vendors
D-bus Project Freedesktop Opensuse
Products
D-bus Dbus Opensuse
CVE-2014-3639

dbus: denial of service flaw in incomplete connection handling

The dbus-daemon in D-Bus before 1.6.24 and 1.8.x before 1.8.8 does not properly close old connections, which allows local users to cause a denial of service (incomplete connection consumption and prevention of new connections) via a large number of incomplete connections.

CVSS 2.0 · 2.1 Low EPSS < 1% KEV · Not listed
Vendors
D-bus Project Freedesktop Opensuse
Products
D-bus Dbus Opensuse
CVE-2014-7824

dbus: local denial of service via incomplete fix for CVE-2014-3636

D-Bus 1.3.0 through 1.6.x before 1.6.26, 1.8.x before 1.8.10, and 1.9.x before 1.9.2 allows local users to cause a denial of service (prevention of new connections and connection drop) by queuing the maximum number of file descriptors. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-3636.1.

CVSS 2.0 · 2.1 Low EPSS < 1% KEV · Not listed
Vendors
Canonical Debian Freedesktop and 1 more
Products
Ubuntu Linux Debian Linux Dbus and 1 more
CVE-2015-0245

dbus: denial of service in dbus systemd activation

D-Bus 1.4.x through 1.6.x before 1.6.30, 1.8.x before 1.8.16, and 1.9.x before 1.9.10 does not validate the source of ActivationFailure signals, which allows local users to cause a denial of service (activation failure error returned) by leveraging a race condition involving sending an ActivationFailure signal before systemd responds.

CVSS 2.0 · 1.9 Low EPSS < 1% KEV · Not listed
Vendors
Freedesktop Opensuse
Products
Dbus Opensuse
CVE-2010-1172

dbus-glib: property access not validated

DBus-GLib 0.73 disregards the access flag of exported GObject properties, which allows local users to bypass intended access restrictions and possibly cause a denial of service by modifying properties, as demonstrated by properties of the (1) DeviceKit-Power, (2) NetworkManager, and (3) ModemManager services.

CVSS 2.0 · 3.6 Low EPSS < 1% KEV · Not listed
Vendors
Freedesktop Redhat
Products
Dbus-glib Enterprise Linux