2.1

CVE-2014-3533

dbus 1.3.0 before 1.6.22 and 1.8.x before 1.8.6 allows local users to cause a denial of service (disconnect) via a certain sequence of crafted messages that cause the dbus-daemon to forward a message containing an invalid file descriptor.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Debian ≫ Debian Linux Version 7.0
Freedesktop ≫ Dbus Version 1.3.0
Freedesktop ≫ Dbus Version 1.3.1
Freedesktop ≫ Dbus Version 1.4.0
Freedesktop ≫ Dbus Version 1.4.1
Freedesktop ≫ Dbus Version 1.4.4
Freedesktop ≫ Dbus Version 1.4.6
Freedesktop ≫ Dbus Version 1.4.8
Freedesktop ≫ Dbus Version 1.4.10
Freedesktop ≫ Dbus Version 1.4.12
Freedesktop ≫ Dbus Version 1.4.14
Freedesktop ≫ Dbus Version 1.4.16
Freedesktop ≫ Dbus Version 1.4.18
Freedesktop ≫ Dbus Version 1.4.20
Freedesktop ≫ Dbus Version 1.4.22
Freedesktop ≫ Dbus Version 1.4.24
Freedesktop ≫ Dbus Version 1.4.26
Freedesktop ≫ Dbus Version 1.5.0
Freedesktop ≫ Dbus Version 1.5.2
Freedesktop ≫ Dbus Version 1.5.4
Freedesktop ≫ Dbus Version 1.5.6
Freedesktop ≫ Dbus Version 1.5.8
Freedesktop ≫ Dbus Version 1.5.10
Freedesktop ≫ Dbus Version 1.5.12
Freedesktop ≫ Dbus Version 1.6.0
Freedesktop ≫ Dbus Version 1.6.2
Freedesktop ≫ Dbus Version 1.6.10
Freedesktop ≫ Dbus Version 1.6.12
Freedesktop ≫ Dbus Version 1.6.14
Freedesktop ≫ Dbus Version 1.6.16
Freedesktop ≫ Dbus Version 1.6.18
Freedesktop ≫ Dbus Version 1.6.20
Freedesktop ≫ Dbus Version 1.8.0
Freedesktop ≫ Dbus Version 1.8.2
Freedesktop ≫ Dbus Version 1.8.4
Mageia Project ≫ Mageia Version 3
Mageia Project ≫ Mageia Version 4
Opensuse ≫ Opensuse Version 12.3
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.42% 0.332
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 2.1 3.9 2.9
AV:L/AC:L/Au:N/C:N/I:N/A:P
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html
http://lists.opensuse.org/opensuse-updates/2014-09/msg00049.html
http://secunia.com/advisories/59611
http://secunia.com/advisories/59798
http://www.debian.org/security/2014/dsa-2971
http://www.mandriva.com/security/advisories?name=MDVSA-2015:176
http://advisories.mageia.org/MGASA-2014-0294.html
http://openwall.com/lists/oss-security/2014/07/02/4
http://secunia.com/advisories/60236
https://bugs.freedesktop.org/show_bug.cgi?id=79694
https://bugs.freedesktop.org/show_bug.cgi?id=80469
Vendor Advisory