Lucene search
K

17 matches found

Mageia
Mageia
added 2026/06/07 5:10 a.m.12 views

Updated xdg-dbus-proxy packages fix security vulnerability

A policy parser vulnerability allows bypassing eavesdrop restrictions. The proxy checks for eavesdrop=true in policy rules but fails to handle eavesdrop ='true' with a space before the equals sign and similar cases...

6.8CVSS5.5AI score0.00175EPSS
Exploits0References3
OSV
OSV
added 2026/05/15 1:59 p.m.9 views

OESA-2026-2287 xdg-dbus-proxy security update

xdg-dbus-proxy is a filtering proxy for D-Bus connections. It was originally part of the flatpak project, but it has been broken out as a standalone module to facilitate using it in other contexts. Security Fixes: xdg-dbus-proxy is a filtering proxy for D-Bus connections. Prior to 0.1.7, a policy...

6.8CVSS5.8AI score0.00175EPSS
Exploits0References2
OSV
OSV
added 2026/05/09 12:30 p.m.11 views

OESA-2026-2212 xdg-dbus-proxy security update

xdg-dbus-proxy is a filtering proxy for D-Bus connections. It was originally part of the flatpak project, but it has been broken out as a standalone module to facilitate using it in other contexts. Security Fixes: xdg-dbus-proxy is a filtering proxy for D-Bus connections. Prior to 0.1.7, a policy...

6.8CVSS5.8AI score0.00175EPSS
Exploits0References2
Debian
Debian
added 2026/04/22 8:43 a.m.8 views

[SECURITY] [DSA 6224-1] xdg-dbus-proxy security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6224-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff April 22, 2026 https://www.debian.org/security/faq -...

6.8CVSS5.7AI score0.00175EPSS
Exploits0
Debian
Debian
added 2026/04/13 8:41 p.m.6 views

[SECURITY] [DSA 6209-1] xdg-dbus-proxy security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6209-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff April 13, 2026 https://www.debian.org/security/faq -...

6.8CVSS5.7AI score0.00175EPSS
Exploits0
SUSE CVE
SUSE CVE
added 2026/04/08 11:25 p.m.5 views

SUSE CVE-2026-34080

xdg-dbus-proxy is a filtering proxy for D-Bus connections. Prior to 0.1.7, a policy parser vulnerability allows bypassing eavesdrop restrictions. The proxy checks for eavesdrop=true in policy rules but fails to handle eavesdrop ='true' with a space before the equals sign and similar cases. Client...

5.5CVSS5.8AI score0.00175EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2026/04/08 9:2 a.m.6 views

CVE-2026-34080

A flaw was found in xdg-dbus-proxy, a filtering proxy for D-Bus connections. A local client can exploit a policy parser vulnerability by crafting specific policy rules, such as including a space before the equals sign in "eavesdrop=true". This improper parsing allows the client to bypass intended...

6.8CVSS5.8AI score0.00175EPSS
Exploits0References4
NVD
NVD
added 2026/04/07 9:17 p.m.5 views

CVE-2026-34080

xdg-dbus-proxy is a filtering proxy for D-Bus connections. Prior to 0.1.7, a policy parser vulnerability allows bypassing eavesdrop restrictions. The proxy checks for eavesdrop=true in policy rules but fails to handle eavesdrop ='true' with a space before the equals sign and similar cases. Client...

6.8CVSS0.00175EPSS
Exploits0References3
UbuntuCve
UbuntuCve
added 2026/04/07 9:17 p.m.5 views

CVE-2026-34080

xdg-dbus-proxy is a filtering proxy for D-Bus connections. Prior to 0.1.7, a policy parser vulnerability allows bypassing eavesdrop restrictions. The proxy checks for eavesdrop=true in policy rules but fails to handle eavesdrop ='true' with a space before the equals sign and similar cases. Client...

6.8CVSS5.9AI score0.00175EPSS
Exploits0References4
Cvelist
Cvelist
added 2026/04/07 8:57 p.m.21 views

CVE-2026-34080 xdg-dbus-proxy has an eavesdrop filter bypass allowing message interception

xdg-dbus-proxy is a filtering proxy for D-Bus connections. Prior to 0.1.7, a policy parser vulnerability allows bypassing eavesdrop restrictions. The proxy checks for eavesdrop=true in policy rules but fails to handle eavesdrop ='true' with a space before the equals sign and similar cases. Client...

6.8CVSS0.00175EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/04/07 8:57 p.m.2 views

CVE-2026-34080

xdg-dbus-proxy is a filtering proxy for D-Bus connections. Prior to 0.1.7, a policy parser vulnerability allows bypassing eavesdrop restrictions. The proxy checks for eavesdrop=true in policy rules but fails to handle eavesdrop ='true' with a space before the equals sign and similar cases. Client...

6.8CVSS5.9AI score0.00175EPSS
Exploits0References2Affected Software1
CVE
CVE
added 2026/04/07 8:57 p.m.27 views

CVE-2026-34080

xdg-dbus-proxy is a filtering proxy for D-Bus connections. Prior to 0.1.7, a policy parser vulnerability allowed bypassing eavesdrop restrictions because the parser mishandles patterns like eavesdrop ='true' (space before =). As a result, clients could intercept D-Bus messages they should not hav...

6.8CVSS5.9AI score0.00175EPSS
Exploits0References3Affected Software1
EUVD
EUVD
added 2026/04/07 8:57 p.m.3 views

EUVD-2026-19945

xdg-dbus-proxy is a filtering proxy for D-Bus connections. Prior to 0.1.7, a policy parser vulnerability allows bypassing eavesdrop restrictions. The proxy checks for eavesdrop=true in policy rules but fails to handle eavesdrop ='true' with a space before the equals sign and similar cases. Client...

6.8CVSS5.9AI score0.00175EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/04/07 8:57 p.m.3 views

CVE-2026-34080 xdg-dbus-proxy has an eavesdrop filter bypass allowing message interception

xdg-dbus-proxy is a filtering proxy for D-Bus connections. Prior to 0.1.7, a policy parser vulnerability allows bypassing eavesdrop restrictions. The proxy checks for eavesdrop=true in policy rules but fails to handle eavesdrop ='true' with a space before the equals sign and similar cases. Client...

6.8CVSS5.9AI score0.00175EPSS
Exploits0References1
Debian CVE
Debian CVE
added 2026/04/07 8:57 p.m.5 views

CVE-2026-34080

xdg-dbus-proxy is a filtering proxy for D-Bus connections. Prior to 0.1.7, a policy parser vulnerability allows bypassing eavesdrop restrictions. The proxy checks for eavesdrop=true in policy rules but fails to handle eavesdrop ='true' with a space before the equals sign and similar cases. Client...

6.8CVSS5.4AI score0.00175EPSS
Exploits0
Positive Technologies
Positive Technologies
added 2026/04/07 12:0 a.m.8 views

PT-2026-31022

Name of the Vulnerable Software and Affected Versions xdg-dbus-proxy versions prior to 0.1.7 Description xdg-dbus-proxy is a filtering proxy for D-Bus connections. A policy parser issue allows bypassing eavesdrop restrictions. The proxy incorrectly handles variations in the 'eavesdrop' policy rul...

6.8CVSS5.8AI score0.00175EPSS
Exploits0References30
Tenable Nessus
Tenable Nessus
added 2026/04/07 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2026-34080

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xdg-dbus-proxy is a filtering proxy for D-Bus connections. Prior to 0.1.7, a policy parser vulnerability allows bypassing eavesdrop restrictions. The proxy chec...

6.8CVSS5.8AI score0.00175EPSS
Exploits0References3
Rows per page
Query Builder