Lucene search
K

148 matches found

Cvelist
Cvelist
added 2020/06/08 12:0 a.m.22 views

CVE-2020-12049

An issue was discovered in dbus = 1.3.0 before 1.12.18. The DBusServer in libdbus, as used in dbus-daemon, leaks file descriptors when a message exceeds the per-message file descriptor limit. A local attacker with access to the D-Bus system bus or another system service's private AFUNIX socket...

5.6AI score0.00569EPSS
Exploits1References10
Veracode
Veracode
added 2020/04/10 12:41 a.m.31 views

Spoofable Signature

D-Bus is vulnerable to Spoofable Signature. It was discovered that the Red Hat Security Advisory RHSA-2009:0008 did not correctly fix the denial of service flaw in the system for sending messages between applications. A local user could use this flaw to send a message with a malformed signature t...

3.6CVSS1.2AI score0.01332EPSS
Exploits1References16Affected Software1
OpenVAS
OpenVAS
added 2020/01/23 12:0 a.m.15 views

Huawei EulerOS: Security Advisory for dbus (EulerOS-SA-2019-1706)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.1CVSS7.4AI score0.00555EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2020/01/23 12:0 a.m.25 views

Huawei EulerOS: Security Advisory for dbus (EulerOS-SA-2019-1727)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.1CVSS7.4AI score0.00555EPSS
Exploits0References2
OSV
OSV
added 2019/06/11 5:29 p.m.18 views

CVE-2019-12749

dbus before 1.10.28, 1.12.x before 1.12.16, and 1.13.x before 1.13.12, as used in DBusServer in Canonical Upstart in Ubuntu 14.04 and in some, less common, uses of dbus-daemon, allows cookie spoofing because of symlink mishandling in the reference implementation of DBUSCOOKIESHA1 in the libdbus...

7.1CVSS6.8AI score
Exploits0References18
Vulnrichment
Vulnrichment
added 2019/06/11 4:11 p.m.0 views

CVE-2019-12749

dbus before 1.10.28, 1.12.x before 1.12.16, and 1.13.x before 1.13.12, as used in DBusServer in Canonical Upstart in Ubuntu 14.04 and in some, less common, uses of dbus-daemon, allows cookie spoofing because of symlink mishandling in the reference implementation of DBUSCOOKIESHA1 in the libdbus...

7.5AI score0.00555EPSS
Exploits0References17
Veracode
Veracode
added 2019/01/15 8:58 a.m.16 views

Local Privilege Escalation

libdbus-glib-1.so is vulnerable to local privilege escalation attacks. The vulnerability exists due to the improper filtering of the message sender value when the NameOwnerChanged signal is received, allowing privilege escalation attacks...

7.2CVSS6.1AI score0.0109EPSS
Exploits2References18Affected Software1
Veracode
Veracode
added 2019/01/15 8:57 a.m.26 views

Arbitrary Code Execution

dbus is vulnerable to arbitrary code execution attacks. The vulnerability exists as libdbus 1.5.x and earlier, when used in setuid or other privileged programs in X.org and possibly other products, allows local users to gain privileges and execute arbitrary code via the DBUSSYSTEMBUSADDRESS...

6.9CVSS6.5AI score0.04514EPSS
Exploits4References27Affected Software1
Veracode
Veracode
added 2018/12/04 11:43 a.m.7 views

Denial Of Service (DoS)

libdbus-c++.so is vulnerable to denial of service. The expansion of internal XML entities in the Expat-based XML parser is not disabled and potentially allows a remote attacker to cause a denial of service condition via billion laughs attack...

6.4AI score
Exploits0
Veracode
Veracode
added 2018/07/17 8:4 a.m.17 views

Local Privilege Escalation

libdbus-glib-1.so is vulnerable to local privilege escalation attacks. The vulnerability exists due to the improper filtering of the message sender value when the NameOwnerChanged signal is received, allowing privilege escalation attacks...

7.2CVSS6.1AI score0.0109EPSS
Exploits2References18Affected Software1
Prion
Prion
added 2018/06/26 6:29 p.m.24 views

Memory corruption

There was a Memory Corruption issue discovered in multiple models of Axis IP Cameras which causes a denial of service crash. The crash arises from code inside libdbus-send.so shared object or similar...

5CVSS7.5AI score0.01524EPSS
Exploits1References3Affected Software390
OSV
OSV
added 2018/06/26 6:29 p.m.3 views

CVE-2018-10658

There was a Memory Corruption issue discovered in multiple models of Axis IP Cameras which causes a denial of service crash. The crash arises from code inside libdbus-send.so shared object or similar...

7.5CVSS5.8AI score0.01524EPSS
Exploits1References3
Cvelist
Cvelist
added 2018/06/26 6:0 p.m.31 views

CVE-2018-10658

There was a Memory Corruption issue discovered in multiple models of Axis IP Cameras which causes a denial of service crash. The crash arises from code inside libdbus-send.so shared object or similar...

8AI score0.01524EPSS
Exploits1References3
Tenable Nessus
Tenable Nessus
added 2018/03/12 12:0 a.m.11 views

Solaris 10 (x86) : 148003-01

SunOS 5.10x86: libdbus-1.so.3.4.2 patch. Date this patch was last updated by Sun : May/04/12 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...

7AI score
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2018/03/12 12:0 a.m.12 views

Solaris 10 (sparc) : 148002-01

SunOS 5.10: libdbus-1.so.3.4.2 patch. Date this patch was last updated by Sun : May/04/12 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if descripti...

7AI score
Exploits0References1
OpenVAS
OpenVAS
added 2015/09/29 12:0 a.m.26 views

Gentoo Security Advisory GLSA 201406-01

Gentoo Linux Local Security Checks GLSA 201406-01 SPDX-FileCopyrightText: 2015 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...

6.9CVSS6.9AI score0.04514EPSS
Exploits4References1
BDU FSTEC
BDU FSTEC
added 2015/04/28 12:0 a.m.2 views

The vulnerability of the OpenSUSE operating system allows malicious actors to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the libdbus-1-3-32bit package of the OpenSUSE operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited locally...

6.9CVSS7AI score0.04514EPSS
Exploits4References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2015/04/28 12:0 a.m.4 views

The vulnerability of the OpenSUSE operating system allows malicious actors to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the libdbus-1-3-debuginfo package in the OpenSUSE operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited locally...

6.9CVSS7AI score0.04514EPSS
Exploits4References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2015/04/28 12:0 a.m.4 views

The vulnerability of the OpenSUSE operating system allows malicious actors to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the libdbus-1-3-debuginfo-32bit package of the OpenSUSE operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. Exploiting this vulnerability can be carried out locally...

6.9CVSS7AI score0.04514EPSS
Exploits4References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2015/04/28 12:0 a.m.3 views

The vulnerability of the OpenSUSE operating system allows malicious actors to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the libdbus-1-3 package in the OpenSUSE operating system can lead to violations of privacy, integrity, and accessibility of protected information. This vulnerability can be exploited locally...

6.9CVSS7AI score0.04514EPSS
Exploits4References2Affected Software1
Rows per page
Query Builder