Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

d-bus project vulnerabilities and exploits

(subscribe to this query)
2.1
CVSSv2
CVE-2010-4352
Stack consumption vulnerability in D-Bus (aka DBus) prior to 1.4.1 allows local users to cause a denial of service (daemon crash) via a message containing many nested variants.
D-bus Project D-bus
1.9
CVSSv2
CVE-2014-3636
D-Bus 1.3.0 up to and including 1.6.x prior to 1.6.24 and 1.8.x prior to 1.8.8 allows local users to (1) cause a denial of service (prevention of new connections and connection drop) by queuing the maximum number of file descriptors or (2) cause a denial of service (disconnect) v...
D-bus Project D-busFreedesktop Dbus 1.8.0Freedesktop Dbus 1.8.6Freedesktop Dbus 1.8.4Freedesktop Dbus 1.8.2Opensuse Opensuse 12.3
4.6
CVSSv2
CVE-2011-2200
The _dbus_header_byteswap function in dbus-marshal-header.c in D-Bus (aka DBus) 1.2.x prior to 1.2.28, 1.4.x prior to 1.4.12, and 1.5.x prior to 1.5.4 does not properly handle a non-native byte order, which allows local users to cause a denial of service (connection loss), obtain...
Freedesktop Dbus 1.5.0Freedesktop Dbus 1.5.2Freedesktop Dbus 1.4.6Freedesktop Dbus 1.4.8Freedesktop Dbus 1.4.1Freedesktop Dbus 1.4.0Freedesktop Dbus 1.4.10Freedesktop Dbus 1.4.4D-bus Project D-bus 1.2.4.2D-bus Project D-bus 1.2.4.4Freedesktop Dbus 1.2.26Freedesktop Dbus 1.2.20Freedesktop Dbus 1.2.4Freedesktop Dbus 1.2.1Freedesktop Dbus 1.2.10Freedesktop Dbus 1.2.6Freedesktop Dbus 1.2.24Freedesktop Dbus 1.2.22Freedesktop Dbus 1.2.18Freedesktop Dbus 1.2.8Freedesktop Dbus 1.2.16D-bus Project D-bus 1.2.4.6
2.1
CVSSv2
CVE-2014-3477
The dbus-daemon in D-Bus 1.2.x up to and including 1.4.x, 1.6.x prior to 1.6.20, and 1.8.x prior to 1.8.4, sends an AccessDenied error to the service instead of a client when the client is prohibited from accessing the service, which allows local users to cause a denial of servic...
Freedesktop Dbus 1.2.26Freedesktop Dbus 1.2.20Freedesktop Dbus 1.2.4Freedesktop Dbus 1.2.1Freedesktop Dbus 1.2.10Freedesktop Dbus 1.2.6Freedesktop Dbus 1.2.24Freedesktop Dbus 1.2.22D-bus Project D-bus 1.2.4.6Freedesktop Dbus 1.2.18Freedesktop Dbus 1.2.8D-bus Project D-bus 1.2.4.2Freedesktop Dbus 1.2.16Freedesktop Dbus 1.2.12Freedesktop Dbus 1.2.3Freedesktop Dbus 1.2.14D-bus Project D-bus 1.2.4.4Freedesktop Dbus 1.6.4Freedesktop Dbus 1.4.18Freedesktop Dbus 1.6.0Freedesktop Dbus 1.4.22Freedesktop Dbus 1.2.30
4.4
CVSSv2
CVE-2014-3635
Off-by-one error in D-Bus 1.3.0 up to and including 1.6.x prior to 1.6.24 and 1.8.x prior to 1.8.8, when running on a 64-bit system and the max_message_unix_fds limit is set to an odd number, allows local users to cause a denial of service (dbus-daemon crash) or possibly execute ...
D-bus Project D-busFreedesktop Dbus 1.6.4Freedesktop Dbus 1.6.0Freedesktop Dbus 1.8.0Freedesktop Dbus 1.6.20Freedesktop Dbus 1.6.10Freedesktop Dbus 1.6.12Freedesktop Dbus 1.6.16Freedesktop Dbus 1.6.8Freedesktop Dbus 1.6.14Freedesktop Dbus 1.6.6Freedesktop Dbus 1.8.6Freedesktop Dbus 1.6.18Freedesktop Dbus 1.8.4Freedesktop Dbus 1.8.2Freedesktop Dbus 1.6.2Opensuse Opensuse 12.3
2.1
CVSSv2
CVE-2014-3638
The bus_connections_check_reply function in config-parser.c in D-Bus prior to 1.6.24 and 1.8.x prior to 1.8.8 allows local users to cause a denial of service (CPU consumption) via a large number of method calls.
D-bus Project D-busFreedesktop Dbus 1.6.4Freedesktop Dbus 1.6.0Freedesktop Dbus 1.8.0Freedesktop Dbus 1.6.20Freedesktop Dbus 1.6.10Freedesktop Dbus 1.6.12Freedesktop Dbus 1.6.16Freedesktop Dbus 1.6.8Freedesktop Dbus 1.6.14Freedesktop Dbus 1.6.6Freedesktop Dbus 1.8.6Freedesktop Dbus 1.6.18Freedesktop Dbus 1.8.4Freedesktop Dbus 1.8.2Freedesktop Dbus 1.6.2Opensuse Opensuse 12.3
2.1
CVSSv2
CVE-2014-3639
The dbus-daemon in D-Bus prior to 1.6.24 and 1.8.x prior to 1.8.8 does not properly close old connections, which allows local users to cause a denial of service (incomplete connection consumption and prevention of new connections) via a large number of incomplete connections.
Opensuse Opensuse 12.3D-bus Project D-busFreedesktop Dbus 1.6.4Freedesktop Dbus 1.6.0Freedesktop Dbus 1.8.0Freedesktop Dbus 1.6.20Freedesktop Dbus 1.6.10Freedesktop Dbus 1.6.12Freedesktop Dbus 1.6.16Freedesktop Dbus 1.6.8Freedesktop Dbus 1.6.14Freedesktop Dbus 1.6.6Freedesktop Dbus 1.8.6Freedesktop Dbus 1.6.18Freedesktop Dbus 1.8.4Freedesktop Dbus 1.8.2Freedesktop Dbus 1.6.2
7.2
CVSSv2
CVE-2015-8612
The EnableNetwork method in the Network class in plugins/mechanism/Network.py in Blueman prior to 2.0.3 allows local users to gain privileges via the dhcp_handler argument.
Blueman Project Blueman
5
CVSSv2
CVE-2020-35450
Gobby 0.4.11 allows a NULL pointer dereference in the D-Bus handler for certain set_language calls.
Gobby Project Gobby 0.4.11
4.4
CVSSv2
CVE-2019-25058
An issue exists in USBGuard prior to 1.1.0. On systems with the usbguard-dbus daemon running, an unprivileged user could make USBGuard allow all USB devices to be connected in the future.
Usbguard Project UsbguardFedoraproject Fedora 34Fedoraproject Fedora 35Fedoraproject Fedora 36Debian Debian Linux 9.0
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
injectionCVE-2024-30983CVE-2023-4235CVE-2024-21338privilegeencryptionCVE-2023-4232CVE-2024-31497CVE-2024-32341
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook