CVE-2014-3533

dbus 1.3.0 before 1.6.22 and 1.8.x before 1.8.6 allows local users to cause a denial of service ...

2.1 LowFix available

dbus 1.3.0 before 1.6.22 and 1.8.x before 1.8.6 allows local users to cause a denial of service (disconnect) via a certain sequence of crafted messages that cause the dbus-daemon to forward a message containing an invalid file descriptor.

Exploit likelihood

0.42%Down 0.9 points since Feb 4, 2022

What each source reports

NVD Score used 2.1

Record: CVE-2014-3533
CVSS 2.0: 2.1 LowAV:L/AC:L/Au:N/C:N/I:N/A:P
Weakness: CWE-20
Updated: 2026-11-02

CVE List No score

Record: CVE-2014-3533
Updated: 2026-11-02

EUVDEUVD-2014-3528 No score

Record: EUVD-2014-3528
Updated: 2026-11-03

GitHub AdvisoriesGHSA-gf7v-52mw-wwh2 No score

dbus 1.3.0 before 1.6.22 and 1.8.x before 1.8.6 allows local users to cause a denial of service ...

Record: GHSA-gf7v-52mw-wwh2
Weakness: CWE-20
Updated: 2026-11-02

OSV No score

Record: CVE-2014-3533
Updated: 2026-11-02

OSVDEBIAN-CVE-2014-3533 No score

Record: DEBIAN-CVE-2014-3533
Updated: 2026-11-02

Show 4 moreShow less

OSVMGASA-2014-0294 No score

Updated dbus packages fix multiple vulnerabilities

Updated dbus packages fix security vulnerabilities:

A flaw was reported in D-Bus's file descriptor passing feature. A local attacker could use this flaw to cause a service or application to disconnect from the bus, typically resulting in that service or application exiting (CVE-2014-3532).

A flaw was reported in D-Bus's file descriptor passing feature. A local attacker could use this flaw to cause an invalid file descriptor to be forwarded to a service or application, causing it to disconnect from the bus, typically resulting in that service or application exiting (CVE-2014-3533).

Record: MGASA-2014-0294
Updated: 2026-11-02

OSVopenSUSE-SU-2024:10517-1 No score

dbus-1-1.10.12-2.1 on GA media

These are all security issues fixed in the dbus-1-1.10.12-2.1 package on the GA media of openSUSE Tumbleweed.

Record: openSUSE-SU-2024:10517-1
Updated: 2026-11-02

OSVUBUNTU-CVE-2014-3533 No score

Record: UBUNTU-CVE-2014-3533
Updated: 2026-11-02

OSVUSN-2275-1 No score

dbus vulnerabilities

Alban Crequy discovered that dbus-daemon incorrectly sent AccessDenied errors to the service instead of the client when enforcing permissions. A local user can use this issue to possibly deny access to the service. (CVE-2014-3477)

Alban Crequy discovered that dbus-daemon incorrectly handled certain file descriptors. A local attacker could use this issue to cause services or clients to disconnect, resulting in a denial of service. (CVE-2014-3532, CVE-2014-3533)

Record: USN-2275-1
Updated: 2026-11-02

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`dbus` Debian:12	before 1.8.6-1	1.8.6-1
`dbus` Debian:13	before 1.8.6-1	1.8.6-1
`dbus` Debian:14	before 1.8.6-1	1.8.6-1
`dbus` Debian:7 From an advisory covering 3 CVEs	before 1.6.8-1+deb7u3, plus listed versions 1.6.8-11.6.8-1+deb7u11.6.8-1+deb7u2	1.6.8-1+deb7u3
`dbus` Mageia:3 From an advisory covering 2 CVEs	before 1.6.8-4.4.mga3	1.6.8-4.4.mga3
`dbus` Mageia:4 From an advisory covering 2 CVEs	before 1.6.18-1.3.mga4	1.6.18-1.3.mga4
`dbus` Ubuntu:14.04:LTS	before 1.6.18-0ubuntu4.1, plus listed versions 1.6.12-0ubuntu101.6.18-0ubuntu11.6.18-0ubuntu21.6.18-0ubuntu31.6.18-0ubuntu4	1.6.18-0ubuntu4.1
`dbus` Ubuntu:14.04:LTS From an advisory covering 3 CVEs	before 1.6.18-0ubuntu4.1, plus listed versions 1.6.12-0ubuntu101.6.18-0ubuntu11.6.18-0ubuntu21.6.18-0ubuntu31.6.18-0ubuntu4	1.6.18-0ubuntu4.1
`dbus-1` openSUSE:Tumbleweed From an advisory covering 14 CVEs	before 1.10.12-2.1	1.10.12-2.1

History

History
Recorded	Changed	Sources
Nov 6, 2026	affected, facts
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2014-3533 is a low vulnerability (CVSS 2.1) in Freedesktop Dbus, published July 2, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.42%, the 36th percentile. Fixed in dbus 1.8.6-1.

References

Show 30 moreShow less