[ASA-201906-16] dbus: access restriction bypass

🗓️ 18 Jun 2019 00:00:00Reported by ArchLinuxType

archlinux

archlinux🔗 security.archlinux.org👁 30 Views

dbus vulnerability - symlink mishandlin

Reporter	Title	Published	Views	Family All 162
IBM Security Bulletins	Security Bulletin: IBM Security Guardium is affected by multiple vulnerabilities	15 Apr 202221:36	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM Application Framework v1 (CentOS6) is End of Life	14 Dec 202120:35	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Guardium is affected by a dbus vulnerability	7 Oct 202016:19	–	ibm
IBM Security Bulletins	Security Bulletin: Vyatta 5600 vRouter Software Patches - Release 1801-za	25 Jul 201915:25	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Security is vulnerable to cookie spoofing (CVE-2019-12749)	23 Feb 202120:58	–	ibm
IBM Security Bulletins	Security Bulletin: IBM WebSphere Cast Iron Solution & App Connect Professional is affected by Open Source vulnerabilities	10 Jan 202008:09	–	ibm
Tenable Nessus	Amazon Linux 2 : dbus (ALAS-2022-1870)	9 Nov 202200:00	–	nessus
Tenable Nessus	Amazon Linux AMI : dbus (ALAS-2019-1246)	26 Jul 201900:00	–	nessus
Tenable Nessus	Alibaba Cloud Linux 3 : 0097: dbus (ALINUX3-SA-2022:0097)	14 May 202500:00	–	nessus
Tenable Nessus	CentOS 8 : dbus (CESA-2019:3707)	29 Jan 202100:00	–	nessus

OS	OS Version	Architecture	Package	Package Version	Filename
Arch Linux	–	any	dbus	1.12.16-1	dbus-1.12.16-1-any.pkg.tar.zst

Source	Link
security	www.security.archlinux.org/AVG-974
openwall	www.openwall.com/lists/oss-security/2019/06/11/2
gitlab	www.gitlab.freedesktop.org/dbus/dbus/issues/269
gitlab	www.gitlab.freedesktop.org/dbus/dbus/commit/47b1a4c41004bf494b87370987b222c934b19016
security	www.security.archlinux.org/CVE-2019-12749

18 Jun 2019 00:00Current

0.9Low risk

Vulners AI Score0.9

CVSS 23.6

CVSS 37.1

CVSS 3.17.1

EPSS0.00555

SSVC

dbus vulnerability symlink mishandling authentication escalation