Every CVE Search/ Get API key

CVE-2011-2200

The _dbus_header_byteswap function in dbus-marshal-header.c in D-Bus (aka DBus) 1.2.x before 1.2...

4.6 MediumFix available

The _dbus_header_byteswap function in dbus-marshal-header.c in D-Bus (aka DBus) 1.2.x before 1.2.28, 1.4.x before 1.4.12, and 1.5.x before 1.5.4 does not properly handle a non-native byte order, which allows local users to cause a denial of service (connection loss), obtain potentially sensitive information, or conduct unspecified state-modification attacks via crafted messages.

Exploit likelihood

0.39%Down 1.2 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 4.6

The _dbus_header_byteswap function in dbus-marshal-header.c in D-Bus (aka DBus) 1.2.x before 1.2.28, 1.4.x before 1.4.12, and 1.5.x before 1.5.4 does not properly handle a non-native byte order, which allows local users to cause a denial of service (connection loss), obtain potentially sensitive information, or conduct unspecified state-modification attacks via crafted messages.

Record
CVE-2011-2200
CVSS 2.0
4.6 MediumAV:L/AC:L/Au:N/C:P/I:P/A:P
Weakness
CWE-20
Updated
2026-11-02
CVE List No score

The _dbus_header_byteswap function in dbus-marshal-header.c in D-Bus (aka DBus) 1.2.x before 1.2.28, 1.4.x before 1.4.12, and 1.5.x before 1.5.4 does not properly handle a non-native byte order, which allows local users to cause a denial of service (connection loss), obtain potentially sensitive information, or conduct unspecified state-modification attacks via crafted messages.

Record
CVE-2011-2200
Updated
2026-11-02
EUVDEUVD-2011-2190 No score

The _dbus_header_byteswap function in dbus-marshal-header.c in D-Bus (aka DBus) 1.2.x before 1.2.28, 1.4.x before 1.4.12, and 1.5.x before 1.5.4 does not properly handle a non-native byte order, which allows local users to cause a denial of service (connection loss), obtain potentially sensitive information, or conduct unspecified state-modification attacks via crafted messages.

Record
EUVD-2011-2190
Updated
2026-11-03
GitHub AdvisoriesGHSA-8qh5-rr38-7xjm No score

The _dbus_header_byteswap function in dbus-marshal-header.c in D-Bus (aka DBus) 1.2.x before 1.2...

The _dbus_header_byteswap function in dbus-marshal-header.c in D-Bus (aka DBus) 1.2.x before 1.2.28, 1.4.x before 1.4.12, and 1.5.x before 1.5.4 does not properly handle a non-native byte order, which allows local users to cause a denial of service (connection loss), obtain potentially sensitive information, or conduct unspecified state-modification attacks via crafted messages.

Record
GHSA-8qh5-rr38-7xjm
Weakness
CWE-20
Updated
2026-11-02
OSV No score

The _dbus_header_byteswap function in dbus-marshal-header.c in D-Bus (aka DBus) 1.2.x before 1.2.28, 1.4.x before 1.4.12, and 1.5.x before 1.5.4 does not properly handle a non-native byte order, which allows local users to cause a denial of service (connection loss), obtain potentially sensitive information, or conduct unspecified state-modification attacks via crafted messages.

Record
CVE-2011-2200
Updated
2026-11-02
OSVDEBIAN-CVE-2011-2200 No score

The _dbus_header_byteswap function in dbus-marshal-header.c in D-Bus (aka DBus) 1.2.x before 1.2.28, 1.4.x before 1.4.12, and 1.5.x before 1.5.4 does not properly handle a non-native byte order, which allows local users to cause a denial of service (connection loss), obtain potentially sensitive information, or conduct unspecified state-modification attacks via crafted messages.

Record
DEBIAN-CVE-2011-2200
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
dbus
Debian:12
 before 1.4.12-1
1.4.12-1
dbus
Debian:13
 before 1.4.12-1
1.4.12-1
dbus
Debian:14
 before 1.4.12-1
1.4.12-1
dbus
Red Hat:enterprise_linux:5::client
 before 0:1.1.2-16.el5_7
0:1.1.2-16.el5_7
dbus-debuginfo
Red Hat:enterprise_linux:5::client
 before 0:1.1.2-16.el5_7
0:1.1.2-16.el5_7
dbus-libs
Red Hat:enterprise_linux:5::client
 before 0:1.1.2-16.el5_7
0:1.1.2-16.el5_7
dbus-x11
Red Hat:enterprise_linux:5::client
 before 0:1.1.2-16.el5_7
0:1.1.2-16.el5_7
dbus
Red Hat:enterprise_linux:5::client_workstation
 before 0:1.1.2-16.el5_7
0:1.1.2-16.el5_7
dbus-debuginfo
Red Hat:enterprise_linux:5::client_workstation
 before 0:1.1.2-16.el5_7
0:1.1.2-16.el5_7
dbus-devel
Red Hat:enterprise_linux:5::client_workstation
 before 0:1.1.2-16.el5_7
0:1.1.2-16.el5_7
Show 11 moreShow less
Affected packages
PackageAffectedFixed
dbus
Red Hat:enterprise_linux:5::server
 before 0:1.1.2-16.el5_7
0:1.1.2-16.el5_7
dbus-debuginfo
Red Hat:enterprise_linux:5::server
 before 0:1.1.2-16.el5_7
0:1.1.2-16.el5_7
dbus-devel
Red Hat:enterprise_linux:5::server
 before 0:1.1.2-16.el5_7
0:1.1.2-16.el5_7
dbus-libs
Red Hat:enterprise_linux:5::server
 before 0:1.1.2-16.el5_7
0:1.1.2-16.el5_7
dbus-x11
Red Hat:enterprise_linux:5::server
 before 0:1.1.2-16.el5_7
0:1.1.2-16.el5_7
dbus
Red Hat:enterprise_linux:6::server
 before 1:1.2.24-5.el6_1
1:1.2.24-5.el6_1
dbus-debuginfo
Red Hat:enterprise_linux:6::server
 before 1:1.2.24-5.el6_1
1:1.2.24-5.el6_1
dbus-devel
Red Hat:enterprise_linux:6::server
 before 1:1.2.24-5.el6_1
1:1.2.24-5.el6_1
dbus-libs
Red Hat:enterprise_linux:6::server
 before 1:1.2.24-5.el6_1
1:1.2.24-5.el6_1
dbus-x11
Red Hat:enterprise_linux:6::server
 before 1:1.2.24-5.el6_1
1:1.2.24-5.el6_1
dbus-doc
Red Hat:enterprise_linux:6::server
 before 1:1.2.24-5.el6_1
1:1.2.24-5.el6_1

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2011-2200 is a medium vulnerability (CVSS 4.6) in D-bus Project D-bus, published June 22, 2011. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.39%, the 32nd percentile. Fixed in dbus 1.4.12-1.

References

Show 18 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open