2.1
CVE-2014-3639
- EPSS 0.09%
- Published 22.09.2014 15:55:08
- Last modified 12.04.2025 10:46:40
- Source secalert@redhat.com
- Teams watchlist Login
- Open Login
The dbus-daemon in D-Bus before 1.6.24 and 1.8.x before 1.8.8 does not properly close old connections, which allows local users to cause a denial of service (incomplete connection consumption and prevention of new connections) via a large number of incomplete connections.
Data is provided by the National Vulnerability Database (NVD)
D-bus Project ≫ D-bus Version <= 1.6.22
Freedesktop ≫ Dbus Version1.6.0
Freedesktop ≫ Dbus Version1.6.2
Freedesktop ≫ Dbus Version1.6.4
Freedesktop ≫ Dbus Version1.6.6
Freedesktop ≫ Dbus Version1.6.8
Freedesktop ≫ Dbus Version1.6.10
Freedesktop ≫ Dbus Version1.6.12
Freedesktop ≫ Dbus Version1.6.14
Freedesktop ≫ Dbus Version1.6.16
Freedesktop ≫ Dbus Version1.6.18
Freedesktop ≫ Dbus Version1.6.20
Freedesktop ≫ Dbus Version1.8.0
Freedesktop ≫ Dbus Version1.8.2
Freedesktop ≫ Dbus Version1.8.4
Freedesktop ≫ Dbus Version1.8.6
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Type | Source | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.09% | 0.268 |
| Source | Base Score | Exploit Score | Impact Score | Vector string |
|---|---|---|---|---|
| nvd@nist.gov | 2.1 | 3.9 | 2.9 |
AV:L/AC:L/Au:N/C:N/I:N/A:P
|