Lucene search

K
ubuntuUbuntuUSN-2275-1
HistoryJul 08, 2014 - 12:00 a.m.

DBus vulnerabilities

2014-07-0800:00:00
ubuntu.com
37

6.3 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

36.2%

Releases

  • Ubuntu 14.04 ESM
  • Ubuntu 13.10
  • Ubuntu 12.04

Packages

  • dbus - simple interprocess messaging system

Details

Alban Crequy discovered that dbus-daemon incorrectly sent AccessDenied
errors to the service instead of the client when enforcing permissions. A
local user can use this issue to possibly deny access to the service.
(CVE-2014-3477)

Alban Crequy discovered that dbus-daemon incorrectly handled certain file
descriptors. A local attacker could use this issue to cause services or
clients to disconnect, resulting in a denial of service. (CVE-2014-3532,
CVE-2014-3533)

OSVersionArchitecturePackageVersionFilename
Ubuntu14.04noarchdbus< 1.6.18-0ubuntu4.1UNKNOWN
Ubuntu14.04noarchdbus-1-dbg< 1.6.18-0ubuntu4.1UNKNOWN
Ubuntu14.04noarchdbus-x11< 1.6.18-0ubuntu4.1UNKNOWN
Ubuntu14.04noarchlibdbus-1-3< 1.6.18-0ubuntu4.1UNKNOWN
Ubuntu14.04noarchlibdbus-1-dev< 1.6.18-0ubuntu4.1UNKNOWN
Ubuntu13.10noarchdbus< 1.6.12-0ubuntu10.1UNKNOWN
Ubuntu13.10noarchdbus-1-dbg< 1.6.12-0ubuntu10.1UNKNOWN
Ubuntu13.10noarchdbus-x11< 1.6.12-0ubuntu10.1UNKNOWN
Ubuntu13.10noarchlibdbus-1-3< 1.6.12-0ubuntu10.1UNKNOWN
Ubuntu13.10noarchlibdbus-1-dev< 1.6.12-0ubuntu10.1UNKNOWN
Rows per page:
1-10 of 151

6.3 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

36.2%