Lucene search
K

12 matches found

OSV
OSV
added 2023/10/06 9:15 p.m.4 views

CVE-2023-3725

Potential buffer overflow vulnerability in the Zephyr CAN bus subsystem...

9.8CVSS5.8AI score0.01061EPSS
Exploits1References4
Positive Technologies
Positive Technologies
added 2023/06/05 12:0 a.m.8 views

PT-2023-23100 · Kylinsoft · Youker-Assistant

Name of the Vulnerable Software and Affected Versions: KylinSoft youker-assistant versions prior to 3.0.2-0kylin6k70-23 Description: A critical issue was found in the delete file function of the dbus.SystemBus library in the Arbitrary File Handler component, leading to improper access controls...

7.1CVSS7.1AI score0.00306EPSS
Exploits1References4
OSV
OSV
added 2022/10/10 12:15 a.m.3 views

AZL-11093 CVE-2022-42012 affecting package dbus for versions less than 1.15.2-2

An issue was discovered in D-Bus before 1.12.24, 1.13.x and 1.14.x before 1.14.4, and 1.15.x before 1.15.2. An authenticated attacker can cause dbus-daemon and other programs that use libdbus to crash by sending a message with attached file descriptors in an unexpected format...

6.5CVSS6.8AI score0.0131EPSS
Exploits1References1
Veracode
Veracode
added 2020/04/10 1:1 a.m.21 views

Denial Of Service (DoS)

dbus is vulnerable to denial of service DoS. The vulnerability exists as a flaw was found in the way the D-Bus library handled endianness conversion when receiving messages. A local user could use this flaw to send a specially-crafted message to dbus-daemon or to a service using the bus, such as...

4.6CVSS2.5AI score0.00386EPSS
Exploits0References18Affected Software1
BDU FSTEC
BDU FSTEC
added 2015/04/28 12:0 a.m.2 views

The vulnerability of the CentOS operating system allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the dbus-glib-0.73 package in the CentOS operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited locally...

7.2CVSS5.4AI score0.0109EPSS
Exploits2References2Affected Software1
Tenable Nessus
Tenable Nessus
added 2013/04/20 12:0 a.m.25 views

Mandriva Linux Security Advisory : dbus (MDVSA-2013:070)

Updated dbus packages fix security vulnerability : It was discovered that the D-Bus library honored environment settings even when running with elevated privileges. A local attacker could possibly use this flaw to escalate their privileges, by setting specific environment variables before running...

6.9CVSS6.9AI score0.04514EPSS
Exploits4References1
OpenVAS
OpenVAS
added 2011/08/09 12:0 a.m.22 views

CentOS Update for dbus-glib CESA-2010:0616 centos5 i386

Check for the Version of dbus-glib OpenVAS Vulnerability Test CentOS Update for dbus-glib CESA-2010:0616 centos5 i386 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify ...

3.6CVSS6.3AI score0.00397EPSS
Exploits0References2
OSV
OSV
added 2008/10/07 9:1 p.m.2 views

DEBIAN-CVE-2008-3834

The dbussignaturevalidate function in the D-bus library libdbus before 1.2.4 allows remote attackers to cause a denial of service application abort via a message containing a malformed signature, which triggers a failed assertion error...

2.1CVSS6.8AI score0.04623EPSS
Exploits8References1
NVD
NVD
added 2008/10/07 9:1 p.m.20 views

CVE-2008-3834

The dbussignaturevalidate function in the D-bus library libdbus before 1.2.4 allows remote attackers to cause a denial of service application abort via a message containing a malformed signature, which triggers a failed assertion error...

2.1CVSS5.2AI score0.04623EPSS
Exploits8References22
OSV
OSV
added 2008/10/07 9:1 p.m.7 views

CVE-2008-3834

The dbussignaturevalidate function in the D-bus library libdbus before 1.2.4 allows remote attackers to cause a denial of service application abort via a message containing a malformed signature, which triggers a failed assertion error...

2.1CVSS6.2AI score0.04623EPSS
Exploits8References22
Cvelist
Cvelist
added 2008/10/07 7:0 p.m.30 views

CVE-2008-3834

The dbussignaturevalidate function in the D-bus library libdbus before 1.2.4 allows remote attackers to cause a denial of service application abort via a message containing a malformed signature, which triggers a failed assertion error...

5.2AI score0.04623EPSS
Exploits8References22
CVE
CVE
added 2008/10/07 7:0 p.m.99 views

CVE-2008-3834

Summary (CVE-2008-3834) In D-Bus libdbus prior to 1.2.4, the function dbus_signature_validate may trigger a failed assertion on a malformed signature, leading to a Denial of Service (application abort). Public advisories confirm the issue and reference a fix in version 1.2.4 or newer; multiple ve...

2.1CVSS5.2AI score0.04623EPSS
Exploits8References22Affected Software3
Rows per page
Query Builder