1 matches found
dbus: invalid fix for CVE-2008-3834
The dbusvalidatesignaturewithreason function dbus-marshal-validate.c in D-Bus aka DBus before 1.2.14 uses incorrect logic to validate a basic type, which allows remote attackers to spoof a signature via a crafted key. NOTE: this is due to an incorrect fix for CVE-2008-3834...
3.6CVSS7.2AI score0.04585EPSS
SaveExploits9References4
20