Lucene search

K
cve[email protected]CVE-2014-3638
HistorySep 22, 2014 - 3:55 p.m.

CVE-2014-3638

2014-09-2215:55:08
CWE-399
web.nvd.nist.gov
68
d-bus
cve-2014-3638
denial of service
cpu consumption
security vulnerability

2.1 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:N/I:N/A:P

5.8 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

The bus_connections_check_reply function in config-parser.c in D-Bus before 1.6.24 and 1.8.x before 1.8.8 allows local users to cause a denial of service (CPU consumption) via a large number of method calls.

Affected configurations

NVD
Node
d-bus_projectd-busRange1.6.22
OR
freedesktopdbusMatch1.6.0
OR
freedesktopdbusMatch1.6.2
OR
freedesktopdbusMatch1.6.4
OR
freedesktopdbusMatch1.6.6
OR
freedesktopdbusMatch1.6.8
OR
freedesktopdbusMatch1.6.10
OR
freedesktopdbusMatch1.6.12
OR
freedesktopdbusMatch1.6.14
OR
freedesktopdbusMatch1.6.16
OR
freedesktopdbusMatch1.6.18
OR
freedesktopdbusMatch1.6.20
OR
freedesktopdbusMatch1.8.0
OR
freedesktopdbusMatch1.8.2
OR
freedesktopdbusMatch1.8.4
OR
freedesktopdbusMatch1.8.6
Node
opensuseopensuseMatch12.3

2.1 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:N/I:N/A:P

5.8 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%