CVE-2013-2168

dbus: Crash of system services that use libdbus (DoS) due to non-portable use of va_list in UNIX format string wrapper

Published Jul 3, 2013 CVSS 2.0 · 1.9 Low EPSS < 1% KEV · Not listed
Description
The _dbus_printf_string_upper_bound function in dbus/dbus-sysdeps-unix.c in D-Bus (aka DBus) 1.4.x before 1.4.26, 1.6.x before 1.6.12, and 1.7.x before 1.7.4 allows local users to cause a denial of service (service crash) via a crafted message.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DSA Debian DSA DSA-2707-1 dbus security update
Ubuntu USN Ubuntu USN USN-1874-1 DBus vulnerability
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
redhat
Published
Updated
Aug 6, 2024, 3:27 PM
Reserved
Feb 19, 2013, 12:00 AM
Status
Modified
Published
Jul 3, 2013, 6:55 PM
Modified
Jun 16, 2026, 11:52 PM
Severity
Moderate
Public date
Jun 13, 2013, 12:00 AM