dbus: dbus-daemon: assertion failure when a monitor is active and a message from the driver cannot be delivered
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| n/a | n/a | affected |
|
Configuration 1 [-]
|
Configuration 2 [-]
|
Configuration 3 [-]
|
| Package | CPE | Advisory | Released Date |
|---|---|---|---|
| Red Hat Enterprise Linux 8 | |||
| dbus-1:1.12.8-24.el8_8.1 | cpe:/a:redhat:enterprise_linux:8 | RHSA-2023:4498 | 2023-08-07T00:00:00Z |
| dbus-1:1.12.8-24.el8_8.1 | cpe:/o:redhat:enterprise_linux:8 | RHSA-2023:4498 | 2023-08-07T00:00:00Z |
| Red Hat Enterprise Linux 8.6 Extended Update Support | |||
| dbus-1:1.12.8-18.el8_6.3 | cpe:/a:redhat:rhel_eus:8.6 | RHSA-2023:5193 | 2023-09-18T00:00:00Z |
| Red Hat Enterprise Linux 9 | |||
| dbus-1:1.12.20-7.el9_2.1 | cpe:/a:redhat:enterprise_linux:9 | RHSA-2023:4569 | 2023-08-08T00:00:00Z |
| dbus-1:1.12.20-7.el9_2.1 | cpe:/o:redhat:enterprise_linux:9 | RHSA-2023:4569 | 2023-08-08T00:00:00Z |
No data available yet.
| Source | ID | Title |
|---|---|---|
Debian DLA |
DLA-3628-1 | dbus security update |
EUVD |
EUVD-2023-39008 | D-Bus before 1.15.6 sometimes allows unprivileged users to crash dbus-daemon. If a privileged user with control over the dbus-daemon is using the org.freedesktop.DBus.Monitoring interface to monitor message bus traffic, then an unprivileged user with the ability to connect to the same dbus-daemon can cause a dbus-daemon crash under some circumstances via an unreplyable message. When done on the well-known system bus, this is a denial-of-service vulnerability. The fixed versions are 1.12.28, 1.14.8, and 1.15.6. |
Ubuntu USN |
USN-6372-1 | DBus vulnerability |
No CVSS v4.0
No CVSS v3.0
No CVSS v2
This CVE is not in the KEV list.
Exploit prediction score: 1.3% (1.333% probability within 30 days)
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
| Type | Values Removed | Values Added |
|---|---|---|
| Weaknesses | CWE-404 | |
| Metrics |
ssvc
|