D-bus Project

D-bus

7 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
1.9

CVE-2014-3636

  • EPSS 0.09%
  • Published 25.10.2014 20:55:07
  • Last modified 12.04.2025 10:46:40

D-Bus 1.3.0 through 1.6.x before 1.6.24 and 1.8.x before 1.8.8 allows local users to (1) cause a denial of service (prevention of new connections and connection drop) by queuing the maximum number of file descriptors or (2) cause a denial of service ...

2.1

CVE-2014-3638

  • EPSS 0.1%
  • Published 22.09.2014 15:55:08
  • Last modified 12.04.2025 10:46:40

The bus_connections_check_reply function in config-parser.c in D-Bus before 1.6.24 and 1.8.x before 1.8.8 allows local users to cause a denial of service (CPU consumption) via a large number of method calls.

2.1

CVE-2014-3639

  • EPSS 0.09%
  • Published 22.09.2014 15:55:08
  • Last modified 12.04.2025 10:46:40

The dbus-daemon in D-Bus before 1.6.24 and 1.8.x before 1.8.8 does not properly close old connections, which allows local users to cause a denial of service (incomplete connection consumption and prevention of new connections) via a large number of i...

4.4

CVE-2014-3635

  • EPSS 0.17%
  • Published 22.09.2014 15:55:07
  • Last modified 12.04.2025 10:46:40

Off-by-one error in D-Bus 1.3.0 through 1.6.x before 1.6.24 and 1.8.x before 1.8.8, when running on a 64-bit system and the max_message_unix_fds limit is set to an odd number, allows local users to cause a denial of service (dbus-daemon crash) or pos...

2.1

CVE-2014-3477

  • EPSS 0.09%
  • Published 01.07.2014 17:55:04
  • Last modified 12.04.2025 10:46:40

The dbus-daemon in D-Bus 1.2.x through 1.4.x, 1.6.x before 1.6.20, and 1.8.x before 1.8.4, sends an AccessDenied error to the service instead of a client when the client is prohibited from accessing the service, which allows local users to cause a de...

4.6

CVE-2011-2200

  • EPSS 0.1%
  • Published 22.06.2011 22:55:04
  • Last modified 11.04.2025 00:51:21

The _dbus_header_byteswap function in dbus-marshal-header.c in D-Bus (aka DBus) 1.2.x before 1.2.28, 1.4.x before 1.4.12, and 1.5.x before 1.5.4 does not properly handle a non-native byte order, which allows local users to cause a denial of service (...

2.1

CVE-2010-4352

Exploit
  • EPSS 0.09%
  • Published 30.12.2010 19:00:05
  • Last modified 11.04.2025 00:51:21

Stack consumption vulnerability in D-Bus (aka DBus) before 1.4.1 allows local users to cause a denial of service (daemon crash) via a message containing many nested variants.