Fedora Update for dbus FEDORA-2016-0a4dc821d5

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-3116-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE Security Update : dbus-1 (openSUSE-2016-1269)

This update for dbus-1 to version 1.8.22 fixes several issues. This security issue was fixed : - boo1003898: Do not treat ActivationFailure message received from root-owned systemd name as a format string. These non-security issues were fixed : - boo978477: Correctly reset timeouts for pending fi...

Ubuntu 14.04 LTS / 16.04 LTS : DBus vulnerabilities (USN-3116-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-3116-1 advisory. It was discovered that DBus incorrectly validated the source of ActivationFailure signals. A local attacker could use this issue to cause a denial of...

USN-3116-1: DBus vulnerabilities

It was discovered that DBus incorrectly validated the source of ActivationFailure signals. A local attacker could use this issue to cause a denial of service. This issue only applied to Ubuntu 12.04 LTS and Ubuntu 14.04 LTS. CVE-2015-0245 It was discovered that DBus incorrectly handled certain...

SUSE SLED12 / SLES12 Security Update : dbus-1 (SUSE-SU-2016:2565-1)

This update for dbus-1 to version 1.8.22 fixes one security issue and bugs. The following security issue was fixed : - bsc1003898: Do not treat ActivationFailure message received from root-owned systemd name as a format string. The following upstream changes are included : - Change the default...

openSUSE Security Update : dbus-1 (openSUSE-2016-1222)

This update for dbus-1 to version 1.8.22 fixes one security issue and bugs. The following security issue was fixed : - bsc1003898: Do not treat ActivationFailure message received from root-owned systemd name as a format string. The following upstream changes are included : - Change the default...

openSUSE Security Update : dbus-1 (openSUSE-2016-1206)

This update for dbus-1 to version 1.8.22 fixes several issues. This security issue was fixed : - boo1003898: Do not treat ActivationFailure message received from root-owned systemd name as a format string. These non-security issues were fixed : - boo978477: Correctly reset timeouts for pending fi...

PT-2016-7919

Name of the Vulnerable Software and Affected Versions dbus-1 versions prior to 1.8.22 Description The issue concerns a security problem where an ActivationFailure message received from a root-owned systemd name is treated as a format string. This has been fixed by updating dbus-1 to version 1.8.2...

Fedora 24 : 1:dbus (2016-0a4dc821d5)

Update to 1.11.6 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable...

Security fix for the ALT Linux 7 package dbus version 1.6.30-alt1.M70P.1

1.6.30-alt1.M70P.1 built Oct. 11, 2016 Valery Inozemtsev in task 170694 Oct. 10, 2016 Valery Inozemtsev - fixed CVE-2015-0245...

Vulnerabilities of the Debian GNU/Linux operating system, which allow a local malicious individual to compromise the integrity and accessibility of protected information

The numerous vulnerabilities in the debian-gnu/linux operating system’s dbus-x11 package can be exploited, leading to a violation of the integrity and accessibility of protected information. These vulnerabilities can be exploited by local malicious individuals...

Vulnerabilities of the Debian GNU/Linux operating system that allow a local malicious individual to compromise the accessibility of protected information

Multiple vulnerabilities in the debian-gnu/linux operating system’s dbus package; exploiting these vulnerabilities may lead to a violation of the accessibility of protected information. These vulnerabilities can be exploited by local malicious individuals...

Vulnerabilities in the Debian GNU/Linux operating system that allow a malicious individual to compromise the confidentiality, integrity, and accessibility of protected information

The multiple vulnerabilities in the debian-gnu/linux operating system’s dbus-1-utils package can lead to breaches of the confidentiality, integrity, and accessibility of protected information...

Vulnerabilities in the Debian GNU/Linux operating system that allow a malicious individual to compromise the confidentiality, integrity, and accessibility of protected information

The multiple vulnerabilities in the debian-gnu-linux operating system’s dbus-1-doc package can lead to breaches of the confidentiality, integrity, and accessibility of protected information...

OracleVM 3.2 : dbus-glib (OVMSA-2016-0057)

The remote OracleVM system is missing necessary patches to address critical security updates : - Add patch to fix CVE-2013-0292 - Resolves: 913072 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The package checks in this plugin were extracted from OracleVM Security Advisory OVMSA-2016-0057...

Deepin 15 lastore-daemon Privilege Escalation

!/usr/bin/env python encoding=utf8 Exploit Title: Lastore-daemon in Deepin 15 results in privilege escalation Date: 20160208 Exploit Author: King's Way Vendor Homepage: http://www.deepin.org Software Link: http://cdimage.linuxdeepin.com/releases/15.1/deepin-15.1-amd64.iso Version: Deepin 15 & 15....

Deepin Linux 15 - lastore-daemon Privilege Escalation

Exploit for linux platform in category local exploits !/usr/bin/env python encoding=utf8 Exploit Title: Lastore-daemon in Deepin 15 results in privilege escalation Date: 20160208 Exploit Author: King's Way Vendor Homepage: http://www.deepin.org Software Link:...

Deepin Linux 15 - 'lastore-daemon' Local Privilege Escalation

!/usr/bin/env python encoding=utf8 Exploit Title: Lastore-daemon in Deepin 15 results in privilege escalation Date: 20160208 Exploit Author: King's Way Vendor Homepage: http://www.deepin.org Software Link: http://cdimage.linuxdeepin.com/releases/15.1/deepin-15.1-amd64.iso Version: Deepin 15 & 15....

blueman: privilege escalation

A local privilege escalation vulnerability has been found in the Network::EnableNetwork method of blueman. An unsanitized string is received over DBUS into the dhcphandler parameter and passed to eval, thus allowing arbitrary command execution with the privileges of the user running blueman...