1730 matches found
CVE-2016-5410
firewalld.py in firewalld before 0.4.3.3 allows local users to bypass authentication and modify firewall configurations via the 1 addPassthrough, 2 removePassthrough, 3 addEntry, 4 removeEntry, or 5 setEntries D-Bus API method...
CVE-2016-5410
CVE-2016-5410 affects firewalld before 0.4.3.3. The vulnerability, described in multiple sources, allows local users to bypass authentication and modify firewall configurations via D‑Bus API methods (addPassthrough, removePassthrough, addEntry, removeEntry, setEntries). This is due to improper ac...
CVE-2016-5410
firewalld.py in firewalld before 0.4.3.3 allows local users to bypass authentication and modify firewall configurations via the 1 addPassthrough, 2 removePassthrough, 3 addEntry, 4 removeEntry, or 5 setEntries D-Bus API method...
CVE-2017-7622
dde-daemon, the daemon process of DDE Deepin Desktop Environment 15.0 through 15.3, runs with root privileges and hardly does anything to identify the user who calls the function through D-Bus. Anybody can change the grub config, even to append some arguments to make a backdoor or privilege...
CVE-2017-7622
The CVE-2017-7622 issue affects DDE’s dde-daemon (Deepin Desktop Environment) versions 15.0–15.3, where the daemon runs with root privileges and does not properly identify the caller over D-Bus. An attacker can exploit DoWriteGrubSettings() to alter GRUB configuration, enabling a backdoor or priv...
GLSA-201701-20 : D-Bus: Format string vulnerability
The remote host is affected by the vulnerability described in GLSA-201701-20 D-Bus: Format string vulnerability It was discovered that D-Bus incorrectly handles certain format strings. The impact of this new vulnerability is believed to not be exploitable if D-Bus is patched against CVE-2015-0245...
D-Bus: Format string vulnerability
Background D-Bus is a message bus system, a simple way for applications to talk to one another. Description It was discovered that D-Bus incorrectly handles certain format strings. The impact of this new vulnerability is believed to not be exploitable if D-Bus is patched against CVE-2015-0245. Th...
CentOS 7 : firewalld (CESA-2016:2597)
An update for firewalld is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...
[SECURITY] Fedora 23 Update: dbus-1.10.12-1.fc23
D-BUS is a system for sending messages between applications. It is used both for the system-wide message bus service, and as a per-user-login-session messaging facility...
Moderate: Red Hat Security Advisory: systemd security and bug fix update
An update for systemd is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...
Moderate: Red Hat Security Advisory: firewalld security, bug fix, and enhancement update
An update for firewalld is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...
[SECURITY] Fedora 24 Update: dbus-1.11.6-1.fc24
D-BUS is a system for sending messages between applications. It is used both for the system-wide message bus service, and as a per-user-login-session messaging facility...
[SECURITY] Fedora 25 Update: systemd-231-6.fc25
systemd is a system and service manager for Linux, compatible with SysV and LSB init scripts. systemd provides aggressive parallelization capabilities, uses socket and D-Bus activation for starting services, offers on-demand starting of daemons, keeps track of processes using Linux cgroups,...
[SECURITY] Fedora 25 Update: firewalld-0.4.3.3-1.fc25
firewalld is a firewall service daemon that provides a dynamic customizable firewall with a D-Bus interface...
lastore-daemon D-Bus Privilege Escalation
This module attempts to gain root privileges on Deepin Linux systems by using lastore-daemon to install a package. The lastore-daemon D-Bus configuration on Deepin Linux permits any user in the sudo group to install arbitrary system packages without providing a password, resulting in code executi...
blueman set_dhcp_handler D-Bus Privilege Escalation
This module attempts to gain root privileges by exploiting a Python code injection vulnerability in blueman versions prior to 2.0.3. The org.blueman.Mechanism.EnableNetwork D-Bus interface exposes the setdhcphandler function which uses user input in a call to eval, without sanitization, resulting...
Gentoo Security Advisory GLSA 201503-02
Gentoo Linux Local Security Checks GLSA 201503-02 SPDX-FileCopyrightText: 2015 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...
Gentoo Security Advisory GLSA 201412-12
Gentoo Linux Local Security Checks GLSA 201412-12 SPDX-FileCopyrightText: 2015 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...
Gentoo Security Advisory GLSA 201308-02
Gentoo Linux Local Security Checks GLSA 201308-02 SPDX-FileCopyrightText: 2015 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...