CVE-2008-3834

dbus denial of service

Published Oct 7, 2008 CVSS 2.0 · 2.1 Low EPSS 4.6% KEV · Not listed
Description
The dbus_signature_validate function in the D-bus library (libdbus) before 1.2.4 allows remote attackers to cause a denial of service (application abort) via a message containing a malformed signature, which triggers a failed assertion error.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DSA Debian DSA DSA-1658-1 New dbus packages fix denial of service
EUVD EUVD EUVD-2008-3820 The dbus_signature_validate function in the D-bus library (libdbus) before 1.2.4 allows remote attackers to cause a denial of service (application abort) via a message containing a malformed signature, which triggers a failed assertion error.
Ubuntu USN Ubuntu USN USN-653-1 D-Bus vulnerabilities
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
redhat
Published
Updated
Aug 7, 2024, 9:53 AM
Reserved
Aug 27, 2008, 12:00 AM
Status
Modified
Published
Oct 7, 2008, 9:01 PM
Modified
Jun 16, 2026, 10:56 PM
Severity
Moderate
Public date
Sep 27, 2008, 12:00 AM