Lucene search

K
nvd[email protected]NVD:CVE-2014-3532
HistoryJul 19, 2014 - 7:55 p.m.

CVE-2014-3532

2014-07-1919:55:07
CWE-20
web.nvd.nist.gov

2.1 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:N/I:N/A:P

6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

36.5%

dbus 1.3.0 before 1.6.22 and 1.8.x before 1.8.6, when running on Linux 2.6.37-rc4 or later, allows local users to cause a denial of service (system-bus disconnect of other services or applications) by sending a message containing a file descriptor, then exceeding the maximum recursion depth before the initial message is forwarded.

Affected configurations

NVD
Node
freedesktopdbusRange1.3.01.6.22
OR
freedesktopdbusRange1.8.01.8.6
AND
linuxlinux_kernelRange2.6.38
OR
linuxlinux_kernelMatch2.6.37-
OR
linuxlinux_kernelMatch2.6.37rc4
OR
linuxlinux_kernelMatch2.6.37rc5
OR
linuxlinux_kernelMatch2.6.37rc6
OR
linuxlinux_kernelMatch2.6.37rc7
OR
linuxlinux_kernelMatch2.6.37rc8
Node
opensuseopensuseMatch12.3
Node
debiandebian_linuxMatch7.0
Node
mageiamageiaMatch3.0
OR
mageiamageiaMatch4.0
Node
oraclesolarisMatch11.3

2.1 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:N/I:N/A:P

6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

36.5%