CVE-2018-16265

The bt/btcore system service in Tizen allows an unprivileged process to create a system user interface and control the Bluetooth pairing process, due to improper D-Bus security policy configurations. This affects Tizen before 5.0 M1, and Tizen-based firmwares including Samsung Galaxy Gear series...

CVE-2018-16264

The BlueZ system service in Tizen allows an unprivileged process to partially control Bluetooth or acquire sensitive information, due to improper D-Bus security policy configurations. This affects Tizen before 5.0 M1, and Tizen-based firmwares including Samsung Galaxy Gear series before build RE2...

CVE-2018-16264

The CVE-2018-16264 issue involves the BlueZ system service in Tizen. Affected: Tizen before 5.0 M1 and Tizen-based firmwares (Samsung Galaxy Gear) before RE2. Root cause: improper D-Bus security policy configurations. Impact: an unprivileged process could partially control Bluetooth or access sen...

CVE-2018-16263

The CVE-2018-16263 entry concerns the PulseAudio system service on Tizen. The vulnerability arises from improper D-Bus security policy configurations that allow an unprivileged process to control the A2DP MediaEndpoint. Affected products include Tizen releases before 5.0 M1 and Tizen-based firmwa...

CVE-2018-16263

The PulseAudio system service in Tizen allows an unprivileged process to control its A2DP MediaEndpoint, due to improper D-Bus security policy configurations. This affects Tizen before 5.0 M1, and Tizen-based firmwares including Samsung Galaxy Gear series before build RE2...

CVE-2018-16262

The pkgmgr system service in Tizen allows an unprivileged process to perform package management actions, due to improper D-Bus security policy configurations. Such actions include installing, decrypting, and killing other packages. This affects Tizen before 5.0 M1, and Tizen-based firmwares...

CVE-2018-16262

The CVE-2018-16262 issue affects Tizen’s pkgmgr system service where an unprivileged process can perform package management actions due to improper D-Bus security policy configurations. This can enable installing, decrypting, or killing other packages. Affected platforms include Tizen up to 5.0 M...

CVE-2018-16266

The Enlightenment system service in Tizen allows an unprivileged process to fully control or capture windows, due to improper D-Bus security policy configurations. This affects Tizen before 5.0 M1, and Tizen-based firmwares including Samsung Galaxy Gear series before build RE2...

CVE-2018-16266

The CVE-2018-16266 issue affects the Enlightenment system service in Tizen, where improper D-Bus security policy configurations allow an unprivileged process to fully control or capture windows. Affected: Tizen before 5.0 M1 and Tizen-based firmwares (e.g., Samsung Galaxy Gear) before build RE2. ...

EulerOS Virtualization for ARM 64 3.0.5.0 : systemd (EulerOS-SA-2020-1054)

According to the version of the systemd packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - In systemd 240, busopensystemwatchbindwithdescription in shared/bus-util.c as used by systemd-resolved to connect to the...

EulerOS 2.0 SP3 : cups (EulerOS-SA-2019-2565)

According to the version of the cups packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - The addjob function in scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is enabled, can be crashed by remote attackers by sending print jobs...

EulerOS 2.0 SP2 : cups (EulerOS-SA-2019-2422)

According to the version of the cups packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - The addjob function in scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is enabled, can be crashed by remote attackers by sending print jobs...

EulerOS Virtualization for ARM 64 3.0.3.0 : cups (EulerOS-SA-2019-2346)

According to the versions of the cups package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - The addjob function in scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is enabled, can be crashed by remote...

[SECURITY] Fedora 31 Update: systemd-243.4-1.fc31

systemd is a system and service manager that runs as PID 1 and starts the rest of the system. It provides aggressive parallelization capabilities, uses socket and D-Bus activation for starting services, offers on-demand starting of daemons, keeps track of processes using Linux control groups,...

MGASA-2019-0330 Updated systemd packages fix security vulnerability

Updated systemd packages fix security vulnerability: Nadav Markus from Palo Alto Networks discovered that systemd-resolved does not enforce appropriate access controls on its D-Bus interface and allows unprivileged users to execute methods that are meant to be available only to privileged users...

Updated systemd packages fix security vulnerability

Updated systemd packages fix security vulnerability: Nadav Markus from Palo Alto Networks discovered that systemd-resolved does not enforce appropriate access controls on its D-Bus interface and allows unprivileged users to execute methods that are meant to be available only to privileged users...

Fedora 31 : bluez / iwd / libell (2019-17419b24a3)

bluez 5.52 : - improvements for bluetooth mesh - audio bug fixes - general bug fixes ---- ell 0.26 : - Fix issue with memory leak and TLS certificates. - Fix issue with buffer size and TLS PRF handling. - Add support for D-Bus non-root ObjectManager. iwd 1.0 : - Add support for stable D-Bus...

EulerOS 2.0 SP8 : systemd (EulerOS-SA-2019-2121)

According to the version of the systemd packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - In systemd 240, busopensystemwatchbindwithdescription in shared/bus-util.c as used by systemd-resolved to connect to the system D-Bus instance,...

EulerOS 2.0 SP5 : cups (EulerOS-SA-2019-2135)

According to the version of the cups packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - The addjob function in scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is enabled, can be crashed by remote attackers by sending print jobs...

Moderate: Red Hat Security Advisory: dbus security update

An update for dbus is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the C...