2064 matches found
[SECURITY] Fedora 30 Update: group-service-1.1.0-5.fc30
Dbus Group management CLI tool...
[SECURITY] Fedora 30 Update: dbus-broker-20-3.fc30
dbus-broker is an implementation of a message bus as defined by the D-Bus specification. Its aim is to provide high performance and reliability, while keeping compatibility to the D-Bus reference implementation. It is exclusiv ely written for Linux systems, and makes use of many modern features...
EulerOS Virtualization 2.5.4 : systemd (EulerOS-SA-2019-1196)
According to the version of the systemd packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - It was discovered that systemd allocates a buffer large enough to store the path field of a dbus message without performing enough...
EulerOS Virtualization 2.5.3 : systemd (EulerOS-SA-2019-1256)
According to the version of the systemd packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - It was discovered that systemd allocates a buffer large enough to store the path field of a dbus message without performing enough...
DEBIAN-CVE-2019-6454
An issue was discovered in sd-bus in systemd 239. busprocessobject in libsystemd/sd-bus/bus-objects.c allocates a variable-length stack buffer for temporarily storing the object path of incoming D-Bus messages. An unprivileged local user can exploit this by sending a specially crafted message to...
The vulnerability of the graphical user input component in the fly-dm system of the Astra Linux operating system allows a intruder to unauthorizedly alter the level of session integrity.
The vulnerability of the graphical user input component in the fly-dm system of the Astra Linux operating system is related to an error that causes the fly-mac-dialog component to be executed without the required DBUSSESSIONBUSADDRESS=nothing option. This option is necessary for executing the dbu...
systemd: Insufficient input validation in bus_process_object() resulting in PID 1 crash
It was discovered that systemd allocates a buffer large enough to store the path field of a dbus message without performing enough checks. A local attacker may trigger this flaw by sending a dbus message to systemd with a large path making systemd crash or possibly elevating his privileges...
openSUSE Security Update : systemd (openSUSE-2019-268)
This update for systemd fixes the following issues : Security vulnerability fixed : - CVE-2019-6454: Fixed a crash of PID1 by sending specially crafted D-BUS message on the system bus by an unprivileged user bsc1125352 Other bug fixes and changes : - journal-remote: set a limit on the number of...
Security update for systemd (important)
openSUSE Security Update: Security update for systemd Announcement ID: openSUSE-SU-2019:0255-1 Rating: important References: 1117025 1121563 1122000 1123333 1123727 1123892 1124153 1125352 Cross-References: CVE-2019-6454 Affected Products: openSUSE Leap 15.0 An update that solves one vulnerabilit...
[ASA-201902-24] systemd: denial of service
Arch Linux Security Advisory ASA-201902-24 ========================================== Severity: High Date : 2019-02-21 CVE-ID : CVE-2019-6454 Package : systemd Type : denial of service Remote : No Link : https://security.archlinux.org/AVG-906 Summary ======= The package systemd before version...
Denial Of Service (DoS)
libsystemd.so is vulnerable to denial of service. A local attacker is able to cause a kernel panic by sending a malicious DBUS message which would cause a stack-based buffer overflow in the function busprocessobject in bus-objects.c...
Amazon Linux 2 : systemd (ALAS-2019-1164)
It was found that busprocessobject in bus-objects.c allocates a buffer on the stack large enough to temporarily store the object path specified in the incoming message. A malicious unprivileged local user to send a message which results in the stack pointer moving outside of the bounds of the...
systemd security update
219-62.0.4 - do not create utmp update symlinks for reboot and poweroff Orabug: 27854896 - OL7 udev rule for virtio net standby interface Orabug: 28826743 - fix netdev is missing for iscsi entry in /etc/fstab Orabug: 25897792 [email protected] - set 'RemoveIPC=no' in logind.conf as default fo...
SUSE-SU-2019:0426-1 Security update for systemd
This update for systemd fixes the following issues: - CVE-2019-6454: Overlong DBUS messages could be used to crash systemd bsc1125352 - units: make sure initrd-cleanup.service terminates before switching to rootfs bsc1123333 - logind: fix bad error propagation - login: log session state 'closing'...
Important: systemd
Issue Overview: It was found that busprocessobject in bus-objects.c allocates a buffer on the stack large enough to temporarily store the object path specified in the incoming message. A malicious unprivileged local user to send a message which results in the stack pointer moving outside of the...
Updated kauth packages fix security vulnerability
KAuth allows to pass parameters with arbitrary types to helpers running as root over DBus. Certain types can cause crashes and trigger decoding arbitrary images with dynamically loaded plugins...
kf5-kauth -- Insecure handling of arguments in helpers
Albert Astals Cid reports: KAuth allows to pass parameters with arbitrary types to helpers running as root over DBus. Certain types can cause crashes and trigger decoding arbitrary images with dynamically loaded plugin...
The vulnerability of the dbus package in the Astra Linux operating system allows a hacker to increase their privileges.
The vulnerability of the dbus package in the Astra Linux operating system relates to the ability for a root user with low integrity levels to access the session bus of a root user with high integrity levels. Exploiting this vulnerability could allow an attacker to enhance their privileges...
Security Bulletin: Vulnerabilities in dbus affect the IBM Flex System Manager (FSM) (CVE-2014-3638, CVE-2014-3639, CVE-2014-3477)
Summary Vulnerabilities in dbus affect the IBM Flex System Manager FSM CVE-2014-3638, CVE-2014-3639, CVE-2014-3477 Vulnerability Details Abstract Vulnerabilities in dbus affect the IBM Flex System Manager FSM CVE-2014-3638, CVE-2014-3639, CVE-2014-3477 Content Vulnerability Details: CVE-ID:...
