GoogleOSV:CVE-2023-34969CVE-2023-34969
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
6.9 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
45.6%
D-Bus before 1.15.6 sometimes allows unprivileged users to crash dbus-daemon. If a privileged user with control over the dbus-daemon is using the org.freedesktop.DBus.Monitoring interface to monitor message bus traffic, then an unprivileged user with the ability to connect to the same dbus-daemon can cause a dbus-daemon crash under some circumstances via an unreplyable message. When done on the well-known system bus, this is a denial-of-service vulnerability. The fixed versions are 1.12.28, 1.14.8, and 1.15.6.
| CPE | Name | Operator | Version |
|---|---|---|---|
| dbus | eq | dbus-1.12.24 | |
| dbus | eq | dbus-1.12.2 | |
| dbus | eq | dbus-1.12.22 | |
| dbus | eq | dbus-1.12.8 | |
| dbus | eq | dbus-1.12.18 | |
| dbus | eq | dbus-1.12.14 | |
| dbus | eq | dbus-1.12.4 | |
| dbus | eq | dbus-1.12.20 | |
| dbus | eq | dbus-1.12.6 | |
| dbus | eq | dbus-1.12.12 |
Related
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
6.9 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
45.6%