Lucene search

K
archlinuxArch LinuxASA-201411-28
HistoryNov 23, 2014 - 12:00 a.m.

dbus: denial of service

2014-11-2300:00:00
Arch Linux
lists.archlinux.org
17

2.1 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:N/I:N/A:P

0.0004 Low

EPSS

Percentile

5.7%

The patch issued by the D-Bus maintainers for CVE-2014-3636 was based on
incorrect reasoning and does not fully prevent the attack described in
the impact section below. Preventing that attack requires raising the
system dbus-daemon’s RLIMIT_NOFILE (ulimit -n) to a higher value.

OSVersionArchitecturePackageVersionFilename
anyanyanydbus< 1.8.10-1UNKNOWN

2.1 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:N/I:N/A:P

0.0004 Low

EPSS

Percentile

5.7%