Published: 22/09/2014 Updated: 27/12/2023

CVSS v2 Base Score: 2.1 | Impact Score: 2.9 | Exploitability Score: 3.9

VMScore: 187

Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P

The dbus-daemon in D-Bus prior to 1.6.24 and 1.8.x prior to 1.8.8 does not properly close old connections, which allows local users to cause a denial of service (incomplete connection consumption and prevention of new connections) via a large number of incomplete connections.

Vulnerable Product	Search on Vulmon	Subscribe to Product
opensuse opensuse 12.3
d-bus project d-bus
freedesktop dbus 1.6.4
freedesktop dbus 1.6.0
freedesktop dbus 1.8.0
freedesktop dbus 1.6.20
freedesktop dbus 1.6.10
freedesktop dbus 1.6.12
freedesktop dbus 1.6.16
freedesktop dbus 1.6.8
freedesktop dbus 1.6.14
freedesktop dbus 1.6.6
freedesktop dbus 1.8.6
freedesktop dbus 1.6.18
freedesktop dbus 1.8.4
freedesktop dbus 1.8.2
freedesktop dbus 1.6.2

Several security issues were fixed in DBus ...

Alban Crequy and Simon McVittie discovered several vulnerabilities in the D-Bus message daemon CVE-2014-3635 On 64-bit platforms, file descriptor passing could be abused by local users to cause heap corruption in dbus-daemon, leading to a crash, or potentially to arbitrary code execution CVE-2014-3636 A denial-of-service vulnerab ...

The dbus-daemon in D-Bus before 1624 and 18x before 188 does not properly close old connections, which allows local users to cause a denial of service (incomplete connection consumption and prevention of new connections) via a large number of incomplete connections ...

CWE-399 http://www.debian.org/security/2014/dsa-3026 http://www.openwall.com/lists/oss-security/2014/09/16/9 http://secunia.com/advisories/61378 https://bugs.freedesktop.org/show_bug.cgi?id=80919 http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00026.html http://www.ubuntu.com/usn/USN-2352-1 http://lists.opensuse.org/opensuse-updates/2014-09/msg00049.html http://www.mandriva.com/security/advisories?name=MDVSA-2015:176 http://advisories.mageia.org/MGASA-2014-0395.html http://www.securitytracker.com/id/1030864 http://secunia.com/advisories/61431 https://usn.ubuntu.com/2352-1/https://nvd.nist.gov https://access.redhat.com/security/cve/cve-2014-3639

CVE-2014-3639

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect