UbuntuUSN-2275-1DBus vulnerabilities
6.3 Medium
AI Score
Confidence
Low
2.1 Low
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:N/I:N/A:P
0.001 Low
EPSS
Percentile
35.9%
Releases
- Ubuntu 14.04 ESM
- Ubuntu 13.10
- Ubuntu 12.04
Packages
- dbus - simple interprocess messaging system
Details
Alban Crequy discovered that dbus-daemon incorrectly sent AccessDenied
errors to the service instead of the client when enforcing permissions. A
local user can use this issue to possibly deny access to the service.
(CVE-2014-3477)
Alban Crequy discovered that dbus-daemon incorrectly handled certain file
descriptors. A local attacker could use this issue to cause services or
clients to disconnect, resulting in a denial of service. (CVE-2014-3532,
CVE-2014-3533)
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Ubuntu | 14.04 | noarch | dbus | < 1.6.18-0ubuntu4.1 | UNKNOWN |
| Ubuntu | 14.04 | noarch | dbus-1-dbg | < 1.6.18-0ubuntu4.1 | UNKNOWN |
| Ubuntu | 14.04 | noarch | dbus-x11 | < 1.6.18-0ubuntu4.1 | UNKNOWN |
| Ubuntu | 14.04 | noarch | libdbus-1-3 | < 1.6.18-0ubuntu4.1 | UNKNOWN |
| Ubuntu | 14.04 | noarch | libdbus-1-dev | < 1.6.18-0ubuntu4.1 | UNKNOWN |
| Ubuntu | 13.10 | noarch | dbus | < 1.6.12-0ubuntu10.1 | UNKNOWN |
| Ubuntu | 13.10 | noarch | dbus-1-dbg | < 1.6.12-0ubuntu10.1 | UNKNOWN |
| Ubuntu | 13.10 | noarch | dbus-x11 | < 1.6.12-0ubuntu10.1 | UNKNOWN |
| Ubuntu | 13.10 | noarch | libdbus-1-3 | < 1.6.12-0ubuntu10.1 | UNKNOWN |
| Ubuntu | 13.10 | noarch | libdbus-1-dev | < 1.6.12-0ubuntu10.1 | UNKNOWN |
Related
6.3 Medium
AI Score
Confidence
Low
2.1 Low
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:N/I:N/A:P
0.001 Low
EPSS
Percentile
35.9%