Security update for dbus-broker (moderate)

openSUSE Security Update: Security update for dbus-broker Announcement ID: openSUSE-SU-2022:10030-1 Rating: moderate References: 1200332 1200333 Cross-References: CVE-2022-31212 CVE-2022-31213 CVSS scores: CVE-2022-31212 SUSE: 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L CVE-2022-31213 SUSE:...

Buffer Overflow

dbus-broker:sid is vulnerable to buffer overflow. It depends on c-uitl/c-shquote to parse the DBus service's Exec line. c-shquote contains a stack-based buffer over-read if a malicious Exec line is supplied...

CVE-2022-31213

A flaw was found in the dbus-broker package. This issue occurs when supplying a malformed XML config file and leads to a NULL pointer dereference...

CVE-2022-31212

A stack-based buffer over-read flaw was found in the dbus-broker package. Dbus-Broker depends on c-uitl/c-shquote to parse the DBus service's Exec line, and if a malicious Exec line is supplied, this can lead to a crash or other undefined behaviors...

dbus-broker-29 Memory Corruption Exploit

======================================================================= title: Multiple Memory Corruption Vulnerabilities product: dbus-broker vulnerable version: dbus-broker-29 fixed version: dbus-broker-31 CVE number: CVE-2022-31212, CVE-2022-31213 impact: medium homepage:...

dbus-broker-29 Memory Corruption

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Multiple Memory Corruption Vulnerabilities product: dbus-broker vulnerable version: dbus-broker-29 fixed version: dbus-broker-31 CVE number: CVE-2022-31212, CVE-2022-3121...

dbus-broker 缓冲区错误漏洞

dbus-broker is a Linux D-Bus message broker open-sourced by bus1. A security vulnerability exists in dbus-broker. No information about this vulnerability is available at this time, please stay tuned to CNNVD or the vendor's announcement...

dbus-broker 代码问题漏洞

dbus-broker is a Linux D-Bus message broker open-sourced by bus1. A security vulnerability exists in dbus-broker. No information about this vulnerability is available at this time, please stay tuned to CNNVD or the vendor's announcement...

Authentication Bypass

isclosingsession allows users to create arbitrary tcp dbus connections...

CVE-2022-28655

isclosingsession allows users to create arbitrary tcp dbus connections...

UBUNTU-CVE-2022-28655

isclosingsession allows users to create arbitrary tcp dbus connections...

new packages: dbus-python

An update is available for dbus-python. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky...

new packages: dbus

An update is available for dbus. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Enterprise...

new packages: xdg-dbus-proxy

An update is available for xdg-dbus-proxy. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky...

new packages: python-into-dbus-python

An update is available for python-into-dbus-python. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the...

new packages: python-dbus-signature-pyparsing

An update is available for python-dbus-signature-pyparsing. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release,...

new packages: python-dbus-python-client-gen

An update is available for python-dbus-python-client-gen. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, se...

new packages: python-dbus-client-gen

An update is available for python-dbus-client-gen. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the...

new packages: libvirt-dbus

An update is available for libvirt-dbus. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky...

new packages: dbus-glib

An update is available for dbus-glib. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Enterpri...