Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

freedesktop dbus vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2023-34969
D-Bus prior to 1.15.6 sometimes allows unprivileged users to crash dbus-daemon. If a privileged user with control over the dbus-daemon is using the org.freedesktop.DBus.Monitoring interface to monitor message bus traffic, then an unprivileged user with the ability to connect to t...
Freedesktop DbusFedoraproject Fedora 38Debian Debian Linux 10.0
NA
CVE-2022-42010
An issue exists in D-Bus prior to 1.12.24, 1.13.x and 1.14.x prior to 1.14.4, and 1.15.x prior to 1.15.2. An authenticated attacker can cause dbus-daemon and other programs that use libdbus to crash when receiving a message with certain invalid type signatures.
Freedesktop DbusFedoraproject Fedora 35Fedoraproject Fedora 36Fedoraproject Fedora 37
NA
CVE-2022-42011
An issue exists in D-Bus prior to 1.12.24, 1.13.x and 1.14.x prior to 1.14.4, and 1.15.x prior to 1.15.2. An authenticated attacker can cause dbus-daemon and other programs that use libdbus to crash when receiving a message where an array length is inconsistent with the size of t...
Freedesktop DbusFedoraproject Fedora 35Fedoraproject Fedora 36Fedoraproject Fedora 37
NA
CVE-2022-42012
An issue exists in D-Bus prior to 1.12.24, 1.13.x and 1.14.x prior to 1.14.4, and 1.15.x prior to 1.15.2. An authenticated attacker can cause dbus-daemon and other programs that use libdbus to crash by sending a message with attached file descriptors in an unexpected format.
Freedesktop DbusFedoraproject Fedora 35Fedoraproject Fedora 36Fedoraproject Fedora 37
7.2
CVSSv2
CVE-2020-35512
A use-after-free flaw was found in D-Bus Development branch <= 1.13.16, dbus-1.12.x stable branch <= 1.12.18, and dbus-1.10.x and older branches <= 1.10.30 when a system has multiple usernames sharing the same UID. When a set of policy rules references these usernames, D...
Freedesktop Dbus 1.12.20
4.9
CVSSv2
CVE-2020-12049
An issue exists in dbus >= 1.3.0 prior to 1.12.18. The DBusServer in libdbus, as used in dbus-daemon, leaks file descriptors when a message exceeds the per-message file descriptor limit. A local attacker with access to the D-Bus system bus or another system service's priv...
Freedesktop DbusCanonical Ubuntu Linux 16.04Canonical Ubuntu Linux 18.04Canonical Ubuntu Linux 14.04Canonical Ubuntu Linux 19.10Canonical Ubuntu Linux 20.04Canonical Ubuntu Linux 12.04
3.6
CVSSv2
CVE-2019-12749
dbus prior to 1.10.28, 1.12.x prior to 1.12.16, and 1.13.x prior to 1.13.12, as used in DBusServer in Canonical Upstart in Ubuntu 14.04 (and in some, less common, uses of dbus-daemon), allows cookie spoofing because of symlink mishandling in the reference implementation of DBUS_C...
Freedesktop DbusCanonical Ubuntu Linux 16.04Canonical Ubuntu Linux 18.04Canonical Ubuntu Linux 18.10Canonical Ubuntu Linux 19.04
1.9
CVSSv2
CVE-2015-0245
D-Bus 1.4.x up to and including 1.6.x prior to 1.6.30, 1.8.x prior to 1.8.16, and 1.9.x prior to 1.9.10 does not validate the source of ActivationFailure signals, which allows local users to cause a denial of service (activation failure error returned) by leveraging a race condit...
Freedesktop Dbus 1.6.4Freedesktop Dbus 1.4.18Freedesktop Dbus 1.6.0Freedesktop Dbus 1.5.6Freedesktop Dbus 1.6.24Freedesktop Dbus 1.8.0Freedesktop Dbus 1.5.8Freedesktop Dbus 1.5.4Freedesktop Dbus 1.5.10Freedesktop Dbus 1.9.0Freedesktop Dbus 1.4.24Freedesktop Dbus 1.4.12Freedesktop Dbus 1.6.20Freedesktop Dbus 1.6.10Freedesktop Dbus 1.5.0Freedesktop Dbus 1.6.12Freedesktop Dbus 1.6.16Freedesktop Dbus 1.4.6Freedesktop Dbus 1.6.8Freedesktop Dbus 1.4.16Freedesktop Dbus 1.5.2Freedesktop Dbus 1.6.26
2.1
CVSSv2
CVE-2014-7824
D-Bus 1.3.0 up to and including 1.6.x prior to 1.6.26, 1.8.x prior to 1.8.10, and 1.9.x prior to 1.9.2 allows local users to cause a denial of service (prevention of new connections and connection drop) by queuing the maximum number of file descriptors. NOTE: this vulnerability e...
Freedesktop Dbus 1.6.4Freedesktop Dbus 1.6.0Freedesktop Dbus 1.6.24Freedesktop Dbus 1.8.0Freedesktop Dbus 1.9.0Freedesktop Dbus 1.6.20Freedesktop Dbus 1.6.10Freedesktop Dbus 1.6.12Freedesktop Dbus 1.6.16Freedesktop Dbus 1.6.8Freedesktop Dbus 1.6.14Freedesktop Dbus 1.6.6Freedesktop Dbus 1.6.22Freedesktop Dbus 1.8.6Freedesktop Dbus 1.6.18Freedesktop Dbus 1.8.8Freedesktop Dbus 1.8.4Freedesktop Dbus 1.8.2Freedesktop Dbus 1.6.2Debian Debian Linux 8.0Debian Debian Linux 7.0Mageia Project Mageia 4
1.9
CVSSv2
CVE-2014-3636
D-Bus 1.3.0 up to and including 1.6.x prior to 1.6.24 and 1.8.x prior to 1.8.8 allows local users to (1) cause a denial of service (prevention of new connections and connection drop) by queuing the maximum number of file descriptors or (2) cause a denial of service (disconnect) v...
D-bus Project D-busFreedesktop Dbus 1.8.0Freedesktop Dbus 1.8.6Freedesktop Dbus 1.8.4Freedesktop Dbus 1.8.2Opensuse Opensuse 12.3
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionCVE-2006-4304CVE-2023-26603CVE-2024-28327CVE-2023-50363CVE-2024-21905template injectionCVE-2024-3400cross-site request forgery
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook