Veracode Vulnerability DatabaseVERACODE:24676Denial Of Service (DoS)
4.6 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
dbus is vulnerable to denial of service (DoS). The vulnerability exists as a flaw was found in the way the D-Bus library handled endianness conversion when receiving messages. A local user could use this flaw to send a specially-crafted message to dbus-daemon or to a service using the bus, such as Avahi or NetworkManager, possibly causing the daemon to exit or the service to disconnect from the bus.
References
bugs.debian.org/cgi-bin/bugreport.cgi?bug=629938
cgit.freedesktop.org/dbus/dbus/commit/?h=dbus-1.2&id=6519a1f77c61d753d4c97efd6e15630eb275336e
cgit.freedesktop.org/dbus/dbus/commit/?h=dbus-1.4&id=c3223ba6c401ba81df1305851312a47c485e6cd7
cgit.freedesktop.org/dbus/dbus/tree/NEWS?h=dbus-1.2
cgit.freedesktop.org/dbus/dbus/tree/NEWS?h=dbus-1.4
kb.juniper.net/InfoCenter/index?page=content&id=JSA10705
lists.freedesktop.org/archives/dbus/2007-March/007357.html
lists.freedesktop.org/archives/dbus/2011-May/014408.html
openwall.com/lists/oss-security/2011/06/12/1
openwall.com/lists/oss-security/2011/06/12/2
openwall.com/lists/oss-security/2011/06/13/12
secunia.com/advisories/44896
www.redhat.com/support/errata/RHSA-2011-1132.html
access.redhat.com/errata/RHSA-2011:1132
access.redhat.com/security/updates/classification/#moderate
bugs.freedesktop.org/show_bug.cgi?id=38120
bugzilla.redhat.com/show_bug.cgi?id=712676
exchange.xforce.ibmcloud.com/vulnerabilities/67974
Related
4.6 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P