Oracle Linux 5 : dbus-glib (ELSA-2010-0616)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2010-0616 advisory. - Rebuild to fix D-Bus property access for dbus-glib CVE-2010-1172 dbus-glib: Tenable has extracted the preceding description block directly from the Oracle Lin...

Fedora 18 : dbus-1.6.12-1.fc18 (2013-11198)

Not tested locally yet, I need to spin back up a Fedora 18 VM. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...

Oracle Linux 5 / 6 : dbus (ELSA-2011-1132)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2011-1132 advisory. - Merge changes from RHEL-6 branch: Drop default patch fuzz Merge CVE-2010-4352.patch from RHEL-60-Z - Apply patches for CVE-2011-2200 Tenable has extracted...

Fedora 19 : dbus-glib-0.100-5.fc19 (2013-12199)

This update fixes : - Bug 911714 - CVE-2013-0292 dbus-glib: Local privilege escalation due improper filtering of message sender when NameOwnerChanged signal received fedora-all Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security...

Slackware 14.0 / current : dbus (SSA:2013-191-01)

New dbus packages are available for Slackware 14.0, and -current to fix a security issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2013-191-01. The text itself is copyright C Slackwa...

[slackware-security] dbus

New dbus packages are available for Slackware 14.0, and -current to fix a security issue. Here are the details from the Slackware 14.0 ChangeLog: patches/packages/dbus-1.4.20-i486-4slack14.0.txz: Rebuilt. This update fixes a security issue where misuse of valist could be used to cause a denial of...

CVE-2013-2168

The dbusprintfstringupperbound function in dbus/dbus-sysdeps-unix.c in D-Bus aka DBus 1.4.x before 1.4.26, 1.6.x before 1.6.12, and 1.7.x before 1.7.4 allows local users to cause a denial of service service crash via a crafted message...

DEBIAN-CVE-2013-2168

The dbusprintfstringupperbound function in dbus/dbus-sysdeps-unix.c in D-Bus aka DBus 1.4.x before 1.4.26, 1.6.x before 1.6.12, and 1.7.x before 1.7.4 allows local users to cause a denial of service service crash via a crafted message...

Authorization

The dbusprintfstringupperbound function in dbus/dbus-sysdeps-unix.c in D-Bus aka DBus 1.4.x before 1.4.26, 1.6.x before 1.6.12, and 1.7.x before 1.7.4 allows local users to cause a denial of service service crash via a crafted message...

CVE-2013-2168

CVE-2013-2168 affects D-Bus (DBus) where the _dbus_printf_string_upper_bound function in dbus-sysdeps-unix.c can crash the service. A crafted message can cause a local denial of service (service crash). The advisory covers DBus 1.4.x < 1.4.26, 1.6.x < 1.6.12, and 1.7.x

Fedora Update for dbus FEDORA-2013-11198

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for dbus FEDORA-2013-11198

Check for the Version of dbus OpenVAS Vulnerability Test Fedora Update for dbus FEDORA-2013-11198 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...

Updated dbus packages fix security vulnerability

Alexandru Cornea discovered a vulnerability in libdbus caused by an implementation bug in dbusprintfstringupperbound. This vulnerability can be exploited by a local user to crash system services that use libdbus, causing denial of service. Depending on the dbus services running, it could lead to...

MGASA-2013-0173 Updated dbus packages fix security vulnerability

Alexandru Cornea discovered a vulnerability in libdbus caused by an implementation bug in dbusprintfstringupperbound. This vulnerability can be exploited by a local user to crash system services that use libdbus, causing denial of service. Depending on the dbus services running, it could lead to...

Ubuntu: Security Advisory (USN-1874-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu Update for dbus USN-1874-1

Check for the Version of dbus OpenVAS Vulnerability Test $Id: gbubuntuUSN18741.nasl 8466 2018-01-19 06:58:30Z teissa $ Ubuntu Update for dbus USN-1874-1 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you...

DBus DoS

Crash on message processing...

Debian DSA-2707-1 : dbus - denial of service

Alexandru Cornea discovered a vulnerability in libdbus caused by an implementation bug in dbusprintfstringupperbound. This vulnerability can be exploited by a local user to crash system services that use libdbus, causing denial of service. Depending on the dbus services running, it could lead to...

[USN-1874-1] DBus vulnerability

========================================================================== Ubuntu Security Notice USN-1874-1 June 13, 2013 dbus vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu...

Ubuntu 12.04 LTS / 12.10 / 13.04 : dbus vulnerability (USN-1874-1)

Alexandru Cornea discovered that DBus incorrectly handled certain messages. A local attacker could use this issue to cause system services to crash, resulting in a denial of service. Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security...