An issue was discovered in D-Bus before 1.12.24 1.13.x and 1.14.x before 1.14.4 and 1.15.x before 1.15.2. An authenticated attacker can cause dbus-daemon and other programs that use libdbus to crash when receiving a message where an array length is inconsistent with the size of the element type.

🗓️ 12 Oct 2022 07:00:00Reported by MicrosoftType

D-Bus flaw allows authenticated attacker to crash the daemon and libdbus from mismatched array length.

Reporter	Title	Published	Views	Family All 169
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in CloudPak for Watson AIOPs	30 Mar 202315:19	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Assistant for IBM Cloud Pak for Data is vulnerable to multiple Freedesktop D-Bus denial of service vulnerability	6 Jul 202317:04	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Security includes components with multiple known vulnerabilities	7 Jun 202316:53	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities have been identified in OpenSSL, Apache HTTP Server and other system libraries shipped with the DS8000 Hardware Management Console (HMC)	12 Jul 202311:03	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to a denial of service in Freedesktop D-Bus (CVE-2022-42011)	31 Mar 202317:53	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in D-Bus (CVE-2022-42010, CVE-2022-42011 and CVE-2022-42012) affects Power HMC	24 Apr 202308:09	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities may affect IBM Robotic Process Automation for Cloud Pak.	30 Mar 202316:55	–	ibm
Tenable Nessus	Amazon Linux 2022 : dbus (ALAS2022-2022-260)	4 Jan 202300:00	–	nessus
Tenable Nessus	Amazon Linux 2023 : dbus, dbus-common, dbus-daemon (ALAS2023-2023-100)	21 Mar 202300:00	–	nessus
Tenable Nessus	Amazon Linux 2 : dbus (ALAS-2023-2006)	5 Apr 202300:00	–	nessus