Search vulnerabilities

Results 2

Export CSV
CVE-2022-31213

dbus-broker: null pointer reference when supplying a malformed XML config file

An issue was discovered in dbus-broker before 31. Multiple NULL pointer dereferences can be found when supplying a malformed XML config file.

CVSS 3.1 · 7.5 High EPSS 2.3% KEV · Not listed
CVE-2022-31212

dbus-broker: a stack buffer over-read if a malicious Exec line is supplied

An issue was discovered in dbus-broker before 31. It depends on c-uitl/c-shquote to parse the DBus service's Exec line. c-shquote contains a stack-based buffer over-read if a malicious Exec line is supplied.

CVSS 3.1 · 7.5 High EPSS 2.3% KEV · Not listed