Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

freedesktop dbus 1.6.20 vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2015-0245
D-Bus 1.4.x up to and including 1.6.x prior to 1.6.30, 1.8.x prior to 1.8.16, and 1.9.x prior to 1.9.10 does not validate the source of ActivationFailure signals, which allows local users to cause a denial of service (activation failure error returned) by leveraging a race condit...
Freedesktop Dbus 1.6.4Freedesktop Dbus 1.4.18Freedesktop Dbus 1.6.0Freedesktop Dbus 1.5.6Freedesktop Dbus 1.6.24Freedesktop Dbus 1.8.0Freedesktop Dbus 1.5.8Freedesktop Dbus 1.5.4Freedesktop Dbus 1.5.10Freedesktop Dbus 1.9.0Freedesktop Dbus 1.4.24Freedesktop Dbus 1.4.12Freedesktop Dbus 1.6.20Freedesktop Dbus 1.6.10Freedesktop Dbus 1.5.0Freedesktop Dbus 1.6.12Freedesktop Dbus 1.6.16Freedesktop Dbus 1.4.6Freedesktop Dbus 1.6.8Freedesktop Dbus 1.4.16Freedesktop Dbus 1.5.2Freedesktop Dbus 1.6.26
NA
CVE-2014-7824
D-Bus 1.3.0 up to and including 1.6.x prior to 1.6.26, 1.8.x prior to 1.8.10, and 1.9.x prior to 1.9.2 allows local users to cause a denial of service (prevention of new connections and connection drop) by queuing the maximum number of file descriptors. NOTE: this vulnerability e...
Freedesktop Dbus 1.6.4Freedesktop Dbus 1.6.0Freedesktop Dbus 1.6.24Freedesktop Dbus 1.8.0Freedesktop Dbus 1.9.0Freedesktop Dbus 1.6.20Freedesktop Dbus 1.6.10Freedesktop Dbus 1.6.12Freedesktop Dbus 1.6.16Freedesktop Dbus 1.6.8Freedesktop Dbus 1.6.14Freedesktop Dbus 1.6.6Freedesktop Dbus 1.6.22Freedesktop Dbus 1.8.6Freedesktop Dbus 1.6.18Freedesktop Dbus 1.8.8Freedesktop Dbus 1.8.4Freedesktop Dbus 1.8.2Freedesktop Dbus 1.6.2Debian Debian Linux 8.0Debian Debian Linux 7.0Mageia Project Mageia 4
NA
CVE-2014-3637
D-Bus 1.3.0 up to and including 1.6.x prior to 1.6.24 and 1.8.x prior to 1.8.8 does not properly close connections for processes that have terminated, which allows local users to cause a denial of service via a D-bus message containing a D-Bus connection file descriptor.
Freedesktop Dbus 1.6.4Freedesktop Dbus 1.4.18Freedesktop Dbus 1.6.0Freedesktop Dbus 1.4.22Freedesktop Dbus 1.5.6Freedesktop Dbus 1.8.0Freedesktop Dbus 1.5.8Freedesktop Dbus 1.5.4Freedesktop Dbus 1.5.10Freedesktop Dbus 1.4.24Freedesktop Dbus 1.4.12Freedesktop Dbus 1.6.20Freedesktop Dbus 1.6.10Freedesktop Dbus 1.5.0Freedesktop Dbus 1.6.12Freedesktop Dbus 1.6.16Freedesktop Dbus 1.4.6Freedesktop Dbus 1.6.8Freedesktop Dbus 1.4.16Freedesktop Dbus 1.5.2Freedesktop Dbus 1.3.0Freedesktop Dbus 1.4.8
NA
CVE-2014-3638
The bus_connections_check_reply function in config-parser.c in D-Bus prior to 1.6.24 and 1.8.x prior to 1.8.8 allows local users to cause a denial of service (CPU consumption) via a large number of method calls.
D-bus Project D-busFreedesktop Dbus 1.6.4Freedesktop Dbus 1.6.0Freedesktop Dbus 1.8.0Freedesktop Dbus 1.6.20Freedesktop Dbus 1.6.10Freedesktop Dbus 1.6.12Freedesktop Dbus 1.6.16Freedesktop Dbus 1.6.8Freedesktop Dbus 1.6.14Freedesktop Dbus 1.6.6Freedesktop Dbus 1.8.6Freedesktop Dbus 1.6.18Freedesktop Dbus 1.8.4Freedesktop Dbus 1.8.2Freedesktop Dbus 1.6.2Opensuse Opensuse 12.3
NA
CVE-2014-3639
The dbus-daemon in D-Bus prior to 1.6.24 and 1.8.x prior to 1.8.8 does not properly close old connections, which allows local users to cause a denial of service (incomplete connection consumption and prevention of new connections) via a large number of incomplete connections.
Opensuse Opensuse 12.3D-bus Project D-busFreedesktop Dbus 1.6.4Freedesktop Dbus 1.6.0Freedesktop Dbus 1.8.0Freedesktop Dbus 1.6.20Freedesktop Dbus 1.6.10Freedesktop Dbus 1.6.12Freedesktop Dbus 1.6.16Freedesktop Dbus 1.6.8Freedesktop Dbus 1.6.14Freedesktop Dbus 1.6.6Freedesktop Dbus 1.8.6Freedesktop Dbus 1.6.18Freedesktop Dbus 1.8.4Freedesktop Dbus 1.8.2Freedesktop Dbus 1.6.2
NA
CVE-2014-3635
Off-by-one error in D-Bus 1.3.0 up to and including 1.6.x prior to 1.6.24 and 1.8.x prior to 1.8.8, when running on a 64-bit system and the max_message_unix_fds limit is set to an odd number, allows local users to cause a denial of service (dbus-daemon crash) or possibly execute ...
D-bus Project D-busFreedesktop Dbus 1.6.4Freedesktop Dbus 1.6.0Freedesktop Dbus 1.8.0Freedesktop Dbus 1.6.20Freedesktop Dbus 1.6.10Freedesktop Dbus 1.6.12Freedesktop Dbus 1.6.16Freedesktop Dbus 1.6.8Freedesktop Dbus 1.6.14Freedesktop Dbus 1.6.6Freedesktop Dbus 1.8.6Freedesktop Dbus 1.6.18Freedesktop Dbus 1.8.4Freedesktop Dbus 1.8.2Freedesktop Dbus 1.6.2Opensuse Opensuse 12.3
NA
CVE-2014-3533
dbus 1.3.0 prior to 1.6.22 and 1.8.x prior to 1.8.6 allows local users to cause a denial of service (disconnect) via a certain sequence of crafted messages that cause the dbus-daemon to forward a message containing an invalid file descriptor.
Debian Debian Linux 7.0Freedesktop Dbus 1.4.18Freedesktop Dbus 1.6.0Freedesktop Dbus 1.4.22Freedesktop Dbus 1.5.6Freedesktop Dbus 1.8.0Freedesktop Dbus 1.5.8Freedesktop Dbus 1.5.4Freedesktop Dbus 1.5.10Freedesktop Dbus 1.4.24Freedesktop Dbus 1.4.12Freedesktop Dbus 1.6.20Freedesktop Dbus 1.6.10Freedesktop Dbus 1.5.0Freedesktop Dbus 1.6.12Freedesktop Dbus 1.6.16Freedesktop Dbus 1.4.6Freedesktop Dbus 1.4.16Freedesktop Dbus 1.5.2Freedesktop Dbus 1.3.0Freedesktop Dbus 1.4.8Freedesktop Dbus 1.3.1
NA
CVE-2014-3477
The dbus-daemon in D-Bus 1.2.x up to and including 1.4.x, 1.6.x prior to 1.6.20, and 1.8.x prior to 1.8.4, sends an AccessDenied error to the service instead of a client when the client is prohibited from accessing the service, which allows local users to cause a denial of servic...
Freedesktop Dbus 1.2.26Freedesktop Dbus 1.2.20Freedesktop Dbus 1.2.4Freedesktop Dbus 1.2.1Freedesktop Dbus 1.2.10Freedesktop Dbus 1.2.6Freedesktop Dbus 1.2.24Freedesktop Dbus 1.2.22D-bus Project D-bus 1.2.4.6Freedesktop Dbus 1.2.18Freedesktop Dbus 1.2.8D-bus Project D-bus 1.2.4.2Freedesktop Dbus 1.2.16Freedesktop Dbus 1.2.12Freedesktop Dbus 1.2.3Freedesktop Dbus 1.2.14D-bus Project D-bus 1.2.4.4Freedesktop Dbus 1.6.4Freedesktop Dbus 1.4.18Freedesktop Dbus 1.6.0Freedesktop Dbus 1.4.22Freedesktop Dbus 1.2.30
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
race conditionCVE-2024-4249CVE-2024-4244CVE-2023-20198TCPCVE-2022-48648CVE-2022-48636CVE-2024-21345SQL
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook