2328 matches found
Advisory ROSA-SA-2025-2603
software: dbus 1.12.20 WASP: ROSA-CHROME packageevrstring: dbus-1.12.20-8 CVE-ID: CVE-2022-42010 BDU-ID: 2022-06389 CVE-Crit: MEDIUM CVE-DESC.: A vulnerability in the D-Bus interprocess communication system is related to the reachability of an assertion in debug assemblies caused by a syntactical...
dde-api-proxy 安全漏洞
dde-api-proxy is a proxy program from Deepin open source. A security vulnerability exists in dde-api-proxy version 1.0.19, which stems from the fact that an unprivileged user can access the D-Bus service as root...
ROS-20250110-04
Vulnerability of instancecreate method of the program for monitoring and adaptive tuning of system devices tuned is related to insufficient input data validation when processing the instancename parameter. Exploitation of the vulnerability could allow an attacker to conduct spoofing attacks...
tuned: improper sanitization of `instance_name` parameter of the `instance_create()` method
A log spoofing flaw was found in the Tuned package due to improper sanitization of some API arguments. This flaw allows an attacker to pass a controlled sequence of characters; newlines can be inserted into the log. Instead of the 'evil' the attacker could mimic a valid TuneD log line and trick t...
tuned: improper sanitization of `instance_name` parameter of the `instance_create()` method
A log spoofing flaw was found in the Tuned package due to improper sanitization of some API arguments. This flaw allows an attacker to pass a controlled sequence of characters; newlines can be inserted into the log. Instead of the 'evil' the attacker could mimic a valid TuneD log line and trick t...
DEBIAN-CVE-2024-52337
A log spoofing flaw was found in the Tuned package due to improper sanitization of some API arguments. This flaw allows an attacker to pass a controlled sequence of characters; newlines can be inserted into the log. Instead of the 'evil' the attacker could mimic a valid TuneD log line and trick t...
AZL-53676 CVE-2024-52337 affecting package tuned for versions less than 2.15.0-5
A log spoofing flaw was found in the Tuned package due to improper sanitization of some API arguments. This flaw allows an attacker to pass a controlled sequence of characters; newlines can be inserted into the log. Instead of the 'evil' the attacker could mimic a valid TuneD log line and trick t...
DEBIAN-CVE-2024-52336
A script injection vulnerability was identified in the Tuned package. The instancecreate D-Bus function can be called by locally logged-in users without authentication. This flaw allows a local non-privileged user to execute a D-Bus call with scriptpre or scriptpost options that permit arbitrary...
Fedora 37 : dbus (2022-b0c2f2ab74)
The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-b0c2f2ab74 advisory. Update to 1.14.4 Fix CVE-2022-42010, CVE-2022-42011 and CVE-2022-42012 Tenable has extracted the preceding description block directly from the Fedor...
PT-2024-9218
Name of the Vulnerable Software and Affected Versions: Tuned affected versions not specified Description: A log spoofing flaw was found in the Tuned package due to improper sanitization of some API arguments. This flaw allows an attacker to pass a controlled sequence of characters, and newlines c...
Oracle Linux 8 : virt:ol / and / virt-devel:rhel (ELSA-2024-6964)
The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-6964 advisory. - Fix CVE-2024-7383 NBD server improper certificate validation resolves: RHEL-52728 libtpms libvirt libvirt-dbus libvirt-python nbdkit netcf...
RHSA-2023:5193 Red Hat Security Advisory: dbus security update
Bulletin has no description...
RHSA-2023:4569 Red Hat Security Advisory: dbus security update
Bulletin has no description...
RHSA-2023:4498 Red Hat Security Advisory: dbus security update
Bulletin has no description...
RHSA-2023:0335 Red Hat Security Advisory: dbus security update
Bulletin has no description...
RHSA-2023:0096 Red Hat Security Advisory: dbus security update
Bulletin has no description...
RHSA-2022:8977 Red Hat Security Advisory: dbus security update
Bulletin has no description...
RHSA-2022:8812 Red Hat Security Advisory: dbus security update
Bulletin has no description...