DB
Product
Dbus
24
CVEs
0
On KEV
7.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 2Medium 6Low 0
Watch
Add Dbus to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-35512 | 7.8 | Feb 15 | A use-after-free flaw was found in D-Bus Development branch <= 1.13.16, dbus-1.12.x stable branch <= 1.12.18, and dbus-1.10.x and older branches <= 1.10.30 when a system has… Affected: 1.12.20 |
| CVE-2019-12749 | 7.1 | Jun 11 | dbus before 1.10.28, 1.12.x before 1.12.16, and 1.13.x before 1.13.12, as used in DBusServer in Canonical Upstart in Ubuntu 14.04 (and in some, less common, uses of dbus-daemon),… Affected: before 1.10.28; 1.12.0 before 1.12.16; 1.13.0 before 1.13.12 |
| CVE-2023-34969 | 6.5 | Jun 8 | D-Bus before 1.15.6 sometimes allows unprivileged users to crash dbus-daemon Affected: 1.12.0 before 1.12.28; 1.14.0 before 1.14.8; 1.15.0 before 1.15.6 |
| CVE-2022-42010 | 6.5 | Oct 9 | An issue was discovered in D-Bus before 1.12.24, 1.13.x and 1.14.x before 1.14.4, and 1.15.x before 1.15.2 Affected: before 1.12.24; 1.13.0 before 1.14.4; 1.15.0 before 1.15.2 |
| CVE-2022-42012 | 6.5 | Oct 9 | An issue was discovered in D-Bus before 1.12.24, 1.13.x and 1.14.x before 1.14.4, and 1.15.x before 1.15.2 Affected: before 1.12.24; 1.13.0 before 1.14.4; 1.15.0 before 1.15.2 |
| CVE-2022-42011 | 6.5 | Oct 9 | An issue was discovered in D-Bus before 1.12.24, 1.13.x and 1.14.x before 1.14.4, and 1.15.x before 1.15.2 Affected: before 1.12.24; 1.13.0 before 1.14.4; 1.15.0 before 1.15.2 |
| CVE-2020-12049 | 5.5 | Jun 8 | An issue was discovered in dbus >= 1.3.0 before 1.12.18 Affected: 1.3.0 before 1.12.18 |
| CVE-2014-3477 | 4.0 | Jul 1 | The dbus-daemon in D-Bus 1.2.x through 1.4.x, 1.6.x before 1.6.20, and 1.8.x before 1.8.4, sends an AccessDenied error to the service instead of a client when the client is… Affected: 1.2.1; 1.2.3; 1.2.4; 1.2.6; 1.2.8; 1.2.10; +34 more |
| CVE-2015-0245 | – | Feb 13 | D-Bus 1.4.x through 1.6.x before 1.6.30, 1.8.x before 1.8.16, and 1.9.x before 1.9.10 does not validate the source of ActivationFailure signals, which allows local users to cause… Affected: 1.4.0; 1.4.1; 1.4.4; 1.4.6; 1.4.8; 1.4.10; +34 more |
| CVE-2014-7824 | – | Nov 18 | D-Bus 1.3.0 through 1.6.x before 1.6.26, 1.8.x before 1.8.10, and 1.9.x before 1.9.2 allows local users to cause a denial of service (prevention of new connections and connection… Affected: 1.6.0; 1.6.2; 1.6.4; 1.6.6; 1.6.8; 1.6.10; +13 more |
| CVE-2014-3636 | – | Oct 25 | D-Bus 1.3.0 through 1.6.x before 1.6.24 and 1.8.x before 1.8.8 allows local users to (1) cause a denial of service (prevention of new connections and connection drop) by queuing… Affected: 1.8.0; 1.8.2; 1.8.4; 1.8.6 |
| CVE-2014-3639 | – | Sep 22 | The dbus-daemon in D-Bus before 1.6.24 and 1.8.x before 1.8.8 does not properly close old connections, which allows local users to cause a denial of service (incomplete connection… Affected: 1.6.0; 1.6.2; 1.6.4; 1.6.6; 1.6.8; 1.6.10; +9 more |
| CVE-2014-3638 | – | Sep 22 | The bus_connections_check_reply function in config-parser.c in D-Bus before 1.6.24 and 1.8.x before 1.8.8 allows local users to cause a denial of service (CPU consumption) via a… Affected: 1.6.0; 1.6.2; 1.6.4; 1.6.6; 1.6.8; 1.6.10; +9 more |
| CVE-2014-3637 | – | Sep 22 | D-Bus 1.3.0 through 1.6.x before 1.6.24 and 1.8.x before 1.8.8 does not properly close connections for processes that have terminated, which allows local users to cause a denial… Affected: 1.3.0; 1.3.1; 1.4.0; 1.4.1; 1.4.4; 1.4.6; +33 more |
| CVE-2014-3635 | – | Sep 22 | Off-by-one error in D-Bus 1.3.0 through 1.6.x before 1.6.24 and 1.8.x before 1.8.8, when running on a 64-bit system and the max_message_unix_fds limit is set to an odd number,… Affected: 1.6.0; 1.6.2; 1.6.4; 1.6.6; 1.6.8; 1.6.10; +9 more |
| CVE-2014-3533 | – | Jul 19 | dbus 1.3.0 before 1.6.22 and 1.8.x before 1.8.6 allows local users to cause a denial of service (disconnect) via a certain sequence of crafted messages that cause the dbus-daemon… Affected: 1.3.0; 1.3.1; 1.4.0; 1.4.1; 1.4.4; 1.4.6; +28 more |
| CVE-2014-3532 | – | Jul 19 | dbus 1.3.0 before 1.6.22 and 1.8.x before 1.8.6, when running on Linux 2.6.37-rc4 or later, allows local users to cause a denial of service (system-bus disconnect of other… Affected: 1.3.0 before 1.6.22; 1.8.0 before 1.8.6 |
| CVE-2013-2168 | – | Jul 3 | The _dbus_printf_string_upper_bound function in dbus/dbus-sysdeps-unix.c in D-Bus (aka DBus) 1.4.x before 1.4.26, 1.6.x before 1.6.12, and 1.7.x before 1.7.4 allows local users to… Affected: 1.4.0; 1.4.1; 1.4.4; 1.4.6; 1.4.8; 1.4.10; +15 more |
| CVE-2011-2533 | – | Jun 22 | The configure script in D-Bus (aka DBus) 1.2.x before 1.2.28 allows local users to overwrite arbitrary files via a symlink attack on an unspecified file in /tmp/ Affected: 1.2.1; 1.2.3; 1.2.4; 1.2.6; 1.2.8; 1.2.10; +8 more |
| CVE-2011-2200 | – | Jun 22 | The _dbus_header_byteswap function in dbus-marshal-header.c in D-Bus (aka DBus) 1.2.x before 1.2.28, 1.4.x before 1.4.12, and 1.5.x before 1.5.4 does not properly handle a… Affected: 1.5.0; 1.5.2; 1.4.0; 1.4.1; 1.4.4; 1.4.6; +17 more |
| CVE-2009-1189 | – | Apr 27 | The _dbus_validate_signature_with_reason function (dbus-marshal-validate.c) in D-Bus (aka DBus) before 1.2.14 uses incorrect logic to validate a basic type, which allows remote… Affected: through 1.2.3; 0.1; 0.2; 0.3; 0.4; 0.5; +34 more |
| CVE-2008-4311 | – | Dec 10 | The default configuration of system.conf in D-Bus (aka DBus) before 1.2.6 omits the send_type attribute in certain rules, which allows local users to bypass intended access… Affected: through 1.2.4; 0.1; 0.2; 0.3; 0.4; 0.5; +34 more |
| CVE-2008-3834 | – | Oct 7 | The dbus_signature_validate function in the D-bus library (libdbus) before 1.2.4 allows remote attackers to cause a denial of service (application abort) via a message containing… Affected: through 1.1.4; 0.1; 0.2; 0.3; 0.4; 0.5; +34 more |
| CVE-2008-0595 | – | Feb 29 | dbus-daemon in D-Bus before 1.0.3, and 1.1.x before 1.1.20, recognizes send_interface attributes in allow directives in the security policy only for fully qualified method calls,… Affected: before 1.0.3; 1.1.0 before 1.1.20 |
Showing 24