Fedora 21 : dbus-1.8.12-1.fc21 (2014-16147)

Update to 1.8.12 1168438 - Fixes CVE-2014-3635 fd.o83622 - Fixes CVE-2014-3636 fd.o82820 - Fixes CVE-2014-3637 fd.o80559 - Fixes CVE-2014-3638 fd.o81053 - Fixes CVE-2014-3639 fd.o80919 - Fixes CVE-2014-7824 fd.o85105 Note that Tenable Network Security has extracted the preceding description block...

Fedora 20 : dbus-1.6.28-1.fc20 (2014-16243)

Update to 1.6.28 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable Network...

Debian DSA-3099-1 : dbus - security update

Simon McVittie discovered that the fix for CVE-2014-3636 was incorrect, as it did not fully address the underlying denial-of-service vector. This update starts the D-Bus daemon as root initially, so that it can properly raise its file descriptor count. In addition, this update reverts the...

Fedora Update for dbus FEDORA-2014-16243

Check the version of dbus SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.868585";...

[SECURITY] [DSA 3099-1] dbus security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3099-1 [email protected] http://www.debian.org/security/ Florian Weimer December 11, 2014 http://www.debian.org/security/faq -...

DSA-3099-1 dbus - security update

Bulletin has no description...

Debian: Security Advisory (DSA-3099-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[USN-2425-1] DBus vulnerability

========================================================================== Ubuntu Security Notice USN-2425-1 November 27, 2014 dbus vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: -...

dbus multiple security vulnerabilities

Memory corruptions, DoS...

Ubuntu 14.04 LTS : DBus vulnerability (USN-2425-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-2425-1 advisory. It was discovered that DBus incorrectly handled a large number of file descriptor messages. A local attacker could use this issue to cause DBus to stop responding...

USN-2425-1: DBus vulnerability

It was discovered that DBus incorrectly handled a large number of file descriptor messages. A local attacker could use this issue to cause DBus to stop responding, resulting in a denial of service. CVE-2014-7824...

USN-2425-1 dbus vulnerability

It was discovered that DBus incorrectly handled a large number of file descriptor messages. A local attacker could use this issue to cause DBus to stop responding, resulting in a denial of service. CVE-2014-7824...

dbus: denial of service

The patch issued by the D-Bus maintainers for CVE-2014-3636 was based on incorrect reasoning and does not fully prevent the attack described in the impact section below. Preventing that attack requires raising the system dbus-daemon's RLIMITNOFILE ulimit -n to a higher value...

[SECURITY] [DLA 87-1] dbus security update

Package : dbus Version : 1.2.24-4+squeeze3 CVE ID : CVE-2014-3477 CVE-2014-3638 CVE-2014-3639 This updates fixes multiple local denial of services discovered by Alban Crequy and Simon McVittie. CVE-2014-3477 Fix a denial of service failure to obtain bus name in newly-activated system services tha...

openSUSE Security Update : dbus-1 (openSUSE-SU-2014:1455-1)

dbus-1 was updated to version 1.8.10 to fix one security issue and several other issues. This security issue was fixed : - Increase dbus-daemon's RLIMITNOFILE rlimit to 65536 to stop an attacker from exhausting the system bus' file descriptors CVE-2014-7824. %NASLMINLEVEL 70300 C Tenable Network...

DLA-87-1 dbus - security update

Bulletin has no description...

openSUSE Security Update : dbus-1 (openSUSE-SU-2014:1454-1)

dbus-1 was updated to version 1.6.26 to fix one security issue and several other issues. This security issue was fixed : - Increase dbus-daemon's RLIMITNOFILE rlimit to 65536 to stop an attacker from exhausting the system bus' file descriptors CVE-2014-7824. %NASLMINLEVEL 70300 C Tenable Network...

Mandriva Linux Security Advisory : dbus (MDVSA-2014:214)

Updated dbus packages fixes the following security issues : Alban Crequy and Simon McVittie discovered several vulnerabilities in the D-Bus message daemon : On 64-bit platforms, file descriptor passing could be abused by local users to cause heap corruption in dbus-daemon, leading to a crash, or...

CVE-2014-7824

D-Bus 1.3.0 through 1.6.x before 1.6.26, 1.8.x before 1.8.10, and 1.9.x before 1.9.2 allows local users to cause a denial of service prevention of new connections and connection drop by queuing the maximum number of file descriptors. NOTE: this vulnerability exists because of an incomplete fix fo...

MGASA-2014-0457 Updated dbus packages fix security vulnerabilitiy

The patch issued by the D-Bus maintainers for CVE-2014-3636 was based on incorrect reasoning, and does not fully prevent the attack described as "CVE-2014-3636 part A", which is repeated below. Preventing that attack requires raising the system dbus-daemon's RLIMITNOFILE ulimit -n to a higher...