4.4
CVE-2014-3635
- EPSS 0.17%
- Veröffentlicht 22.09.2014 15:55:07
- Zuletzt bearbeitet 12.04.2025 10:46:40
- Quelle secalert@redhat.com
- Teams Watchlist Login
- Unerledigt Login
Off-by-one error in D-Bus 1.3.0 through 1.6.x before 1.6.24 and 1.8.x before 1.8.8, when running on a 64-bit system and the max_message_unix_fds limit is set to an odd number, allows local users to cause a denial of service (dbus-daemon crash) or possibly execute arbitrary code by sending one more file descriptor than the limit, which triggers a heap-based buffer overflow or an assertion failure.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
D-bus Project ≫ D-bus Version <= 1.6.22
Freedesktop ≫ Dbus Version1.6.0
Freedesktop ≫ Dbus Version1.6.2
Freedesktop ≫ Dbus Version1.6.4
Freedesktop ≫ Dbus Version1.6.6
Freedesktop ≫ Dbus Version1.6.8
Freedesktop ≫ Dbus Version1.6.10
Freedesktop ≫ Dbus Version1.6.12
Freedesktop ≫ Dbus Version1.6.14
Freedesktop ≫ Dbus Version1.6.16
Freedesktop ≫ Dbus Version1.6.18
Freedesktop ≫ Dbus Version1.6.20
Freedesktop ≫ Dbus Version1.8.0
Freedesktop ≫ Dbus Version1.8.2
Freedesktop ≫ Dbus Version1.8.4
Freedesktop ≫ Dbus Version1.8.6
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.17% | 0.354 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 4.4 | 3.4 | 6.4 |
AV:L/AC:M/Au:N/C:P/I:P/A:P
|
CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer
The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.