Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2010-1172

dbus-glib: property access not validated

DBus-GLib 0.73 disregards the access flag of exported GObject properties, which allows local users to bypass intended access restrictions and possibly cause a denial of service by modifying properties, as demonstrated by properties of the (1) DeviceKit-Power, (2) NetworkManager, and (3) ModemManager services.

CVSS 2.0 · 3.6 Low EPSS < 1% KEV · Not listed
Vendors
Freedesktop Redhat
Products
Dbus-glib Enterprise Linux
CVE-2013-0292

dbus-glib: Local privilege escalation due improper filtering of message sender when NameOwnerChanged signal received

The dbus_g_proxy_manager_filter function in dbus-gproxy in Dbus-glib before 0.100.1 does not properly verify the sender of NameOwnerChanged signals, which allows local users to gain privileges via a spoofed signal.

CVSS 2.0 · 7.2 High EPSS 1.1% KEV · Not listed
Vendors
Freedesktop Redhat
Products
Dbus-glib Enterprise Linux