PT-2020-20764 · Apple · Ios +2

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 13.5 iPadOS versions prior to 13.5 macOS Catalina versions prior to 10.15.5 Description: A validation issue was addressed with improved input sanitization, which may allow a USB device to cause a denial of service...

DEBIAN-CVE-2020-12049

An issue was discovered in dbus = 1.3.0 before 1.12.18. The DBusServer in libdbus, as used in dbus-daemon, leaks file descriptors when a message exceeds the per-message file descriptor limit. A local attacker with access to the D-Bus system bus or another system service's private AFUNIX socket...

ALPINE-CVE-2020-12049

An issue was discovered in dbus = 1.3.0 before 1.12.18. The DBusServer in libdbus, as used in dbus-daemon, leaks file descriptors when a message exceeds the per-message file descriptor limit. A local attacker with access to the D-Bus system bus or another system service's private AFUNIX socket...

CVE-2020-12049

An issue was discovered in dbus = 1.3.0 before 1.12.18. The DBusServer in libdbus, as used in dbus-daemon, leaks file descriptors when a message exceeds the per-message file descriptor limit. A local attacker with access to the D-Bus system bus or another system service's private AFUNIX socket...

UBUNTU-CVE-2020-12049

An issue was discovered in dbus = 1.3.0 before 1.12.18. The DBusServer in libdbus, as used in dbus-daemon, leaks file descriptors when a message exceeds the per-message file descriptor limit. A local attacker with access to the D-Bus system bus or another system service's private AFUNIX socket...

Unspecified Vulnerability in D-BUS

D-BUS is a message bus system, which is mainly used for inter-process communication and remote process calls, etc. A security vulnerability exists in D-BUS that can be exploited by a local attacker to attack the system DBus daemon, resulting in a denial of service...

CVE-2020-12049

The CVE-2020-12049 issue affects dbus (libdbus/ dbus-daemon) where the DBusServer leaks file descriptors when a message exceeds the per-message limit, enabling a local attacker with access to the D-Bus system bus to exhaust fds and cause DoS. Affected versions are dbus >= 1.3.0 and

Debian DLA-2235-1 : dbus security update

It was discovered that there was a file descriptor leak in the D-Bus message bus. An unprivileged local attacker could use this to attack the system DBus daemon, leading to denial of service for all users of the machine. For Debian 8 'Jessie', this issue has been fixed in dbus version...

Fedora: Security Advisory for dbus (FEDORA-2020-5a1910208c)

The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 32 Update: dbus-1.12.18-1.fc32

D-BUS is a system for sending messages between applications. It is used both for the system-wide message bus service, and as a per-user-login-session messaging facility...

New USBCulprit Espionage Tool Steals Data From Air-Gapped Computers

A Chinese threat actor has developed new capabilities to target air-gapped systems in an attempt to exfiltrate sensitive data for espionage, according to a newly published research by Kaspersky yesterday. The APT, known as Cycldek, Goblin Panda, or Conimes, employs an extensive toolset for latera...

The input/output controller BK9000 Ethernet TCP/IP Bus Coupler is vulnerable to uncontrolled resource consumption, allowing a intruder to cause a service failure.

The vulnerability of the BK9000 Ethernet TCP/IP Bus Coupler input/output controller is related to an uncontrolled consumption of resources. Exploiting this vulnerability could allow a malicious actor to cause service interruptions remotely...

UBUNTU-CVE-2020-11039

In FreeRDP less than or equal to 2.0.0, when using a manipulated server with USB redirection enabled nearly arbitrary memory can be read and written due to integer overflows in length checks. This has been patched in 2.1.0...

The vulnerability of the stv06xx subsystem in Linux operating systems allows a hacker to cause a service failure.

The vulnerability of the stv06xx subsystem drivers/media/usb/gspca/stv06xx/stv06xx.c, drivers/media/usb/gspca/stv06xx/stv06xxpb0100.c in Linux operating systems is related to the use of a zero pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...

Fedora: Security Advisory for oddjob (FEDORA-2020-b1fa09aa64)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

USN-4369-2 linux, linux-raspi2, linux-raspi2-5.3 regression

USN-4369-1 fixed vulnerabilities in the 5.3 Linux kernel. Unfortunately, that update introduced a regression in overlayfs. This update corrects the problem. We apologize for the inconvenience. Original advisory details: It was discovered that the btrfs implementation in the Linux kernel did not...

jackson-databind: Serialization gadgets in org.aoju.bus.proxy.provider.*.RmiProvider

A flaw was found in jackson-databind 2.x prior to version 2.9.10.4. The interaction between serialization gadgets and typing is mishandled in the bus-proxy. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...

[SECURITY] Fedora 31 Update: oddjob-0.34.6-1.fc31

oddjob is a D-Bus service which performs particular tasks for clients which connect to it and issue requests using the system-wide message bus...

jackson-databind: Serialization gadgets in org.aoju.bus.proxy.provider.*.RmiProvider

A flaw was found in jackson-databind 2.x prior to version 2.9.10.4. The interaction between serialization gadgets and typing is mishandled in the bus-proxy. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...

jackson-databind mishandles the interaction between serialization gadgets and typing

FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.aoju.bus.proxy.provider.remoting.RmiProvider aka bus-proxy...