Photon OS 1.0: Dbus PHSA-2019-1.0-0249

An update of the dbus package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-1.0-0249. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid128758;...

NewStart CGSL MAIN 4.06 : dbus Vulnerability (NS-SA-2019-0173)

The remote NewStart CGSL host, running version MAIN 4.06, has dbus packages installed that are affected by a vulnerability: - dbus before 1.10.28, 1.12.x before 1.12.16, and 1.13.x before 1.13.12, as used in DBusServer in Canonical Upstart in Ubuntu 14.04 and in some, less common, uses of...

Important Photon OS Security Update - PHSA-2019-0249

Updates of 'tcpdump', 'haproxy', 'redis', 'dbus' packages of Photon OS have been released...

NewStart CGSL CORE 5.04 / MAIN 5.04 : systemd Multiple Vulnerabilities (NS-SA-2019-0057)

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has systemd packages installed that are affected by multiple vulnerabilities: - A memory leak was discovered in the backport of fixes for CVE-2018-16864 in Red Hat Enterprise Linux. Function dispatchmessagereal in...

systemd security and bug fix update

239-13.0.1.3 - fix netdev is missing for iscsi entry in /etc/fstab [email protected] Orabug: 25897792 - set RemoveIPC=no in logind.conf as default for OL7.2 Orabug: 22224874 - allow dm remove ioctl to co-operate with UEK3 Vaughan Cao Orabug: 18467469 - add hv dynamic memory support Jerry...

Amazon Linux AMI : dbus (ALAS-2019-1246)

dbus as used in DBusServer, allows cookie spoofing because of symlink mishandling in the reference implementation of DBUSCOOKIESHA1 in the libdbus library. This only affects the DBUSCOOKIESHA1 authentication mechanism. A malicious client with write access to its own home directory could manipulat...

Linux Kernel 4.15.x < 4.19.2 - map_write() CAP_SYS_ADMIN Local Privilege Escalation Exploit

Exploit for linux platform in category local exploits !/bin/sh EDB Note: Download https://github.com/offensive-security/exploitdb-bin-sploits/raw/master/bin-sploits/47165.zip wrapper for Jann Horn's exploit for CVE-2018-18955 uses dbus service technique ---...

EulerOS 2.0 SP8 : dbus (EulerOS-SA-2019-1767)

According to the version of the dbus packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - dbus before 1.10.28, 1.12.x before 1.12.16, and 1.13.x before 1.13.12, as used in DBusServer in Canonical Upstart in Ubuntu 14.04 and in some, less...

openSUSE Security Update : dbus-1 (openSUSE-2019-1750)

This update for dbus-1 fixes the following issues : Security issue fixed: - CVE-2019-12749: Fixed an implementation flaw in DBUSCOOKIESHA1 which could have allowed local attackers to bypass authentication bsc1137832. This update was imported from the SUSE:SLE-15-SP1:Update update project. C Tenab...

EulerOS 2.0 SP2 : dbus (EulerOS-SA-2019-1727)

According to the version of the dbus packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - dbus before 1.10.28, 1.12.x before 1.12.16, and 1.13.x before 1.13.12, as used in DBusServer in Canonical Upstart in Ubuntu 14.04 and in some, less...

OPENSUSE-SU-2019:1750-1 Security update for dbus-1

This update for dbus-1 fixes the following issues: Security issue fixed: - CVE-2019-12749: Fixed an implementation flaw in DBUSCOOKIESHA1 which could have allowed local attackers to bypass authentication bsc1137832. This update was imported from the SUSE:SLE-15-SP1:Update update project...

Security update for dbus-1 (important)

openSUSE Security Update: Security update for dbus-1 Announcement ID: openSUSE-SU-2019:1750-1 Rating: important References: 1137832 Cross-References: CVE-2019-12749 Affected Products: openSUSE Leap 15.1 An update that fixes one vulnerability is now available. Description: This update for dbus-1...

Medium: dbus

Issue Overview: dbus as used in DBusServer, allows cookie spoofing because of symlink mishandling in the reference implementation of DBUSCOOKIESHA1 in the libdbus library. This only affects the DBUSCOOKIESHA1 authentication mechanism. A malicious client with write access to its own home directory...

Authentication Bypass

dbus is vulnerable to authentication bypass. A mishandling of the reference implementation of the DBUSCOOKIESHA allows an attacker with write access to its own home directory to spoof the cookie by manipulating a /.dbus-keyrings symlink which causes the DBusServer with a different uid to read and...

Virtuozzo 6 : dbus / dbus-devel / dbus-doc / dbus-libs / etc (VZLSA-2019-1726)

An update for dbus is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

OracleVM 3.3 / 3.4 : dbus (OVMSA-2019-0034)

The remote OracleVM system is missing necessary patches to address critical security updates : - fix netlink poll: error 4 Zhenzhong Duan - Apply patch for CVE-2019-12749 1725574 - Fix CVE-2019-12749 1725574 - Add dbus-run-session 1268972 C Tenable Network Security, Inc. The package checks in thi...

CentOS 6 : dbus (CESA-2019:1726)

An update for dbus is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

CentOS Update for dbus CESA-2019:1726 centos6

The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Scientific Linux Security Update : dbus on SL6.x i386/x86_64 (20190710)

Security Fixes : - dbus: DBusServer DBUSCOOKIESHA1 authentication bypass CVE-2019-12749 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid126613; scriptversion"1.4"; scriptsetattributeattribute:"pluginmodificationdate",...

RHEL 6 : dbus (RHSA-2019:1726)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2019:1726 advisory. D-Bus is a system for sending messages between applications. It is used both for the system-wide message bus service, and as a per-user-login-session...