Every CVESearch/Get API key

CVE-2011-2200

The _dbus_header_byteswap function in dbus-marshal-header.c in D-Bus (aka DBus) 1.2.x before 1.2...

4.6 MediumFix available

CVE-2011-2200 is a medium vulnerability (CVSS 4.6) in D-bus Project D-bus, published June 22, 2011. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.39%, the 33rd percentile. Fixed in dbus 1.4.12-1.

What does this mean?
Severity
4.6 MediumCVSS 2.0, NVD
Exploit chance
0.39%EPSS, 33rd percentile
Exploitation
None knownNot on CISA’s or ENISA’s lists
Fixed in
1.4.12-1dbus +20 more

Description

The _dbus_header_byteswap function in dbus-marshal-header.c in D-Bus (aka DBus) 1.2.x before 1.2.28, 1.4.x before 1.4.12, and 1.5.x before 1.5.4 does not properly handle a non-native byte order, which allows local users to cause a denial of service (connection loss), obtain potentially sensitive information, or conduct unspecified state-modification attacks via crafted messages.

Exploit likelihood

0.39%Down 1.2 points since Feb 4, 2022
90%50%10%1%

Affected products

Affected packages

Affected packages
PackageAffectedFixed
dbus
Debian:12
before 1.4.12-1
1.4.12-1
dbus
Debian:13
before 1.4.12-1
1.4.12-1
dbus
Debian:14
before 1.4.12-1
1.4.12-1
dbus
Red Hat:enterprise_linux:5::client
before 0:1.1.2-16.el5_7
0:1.1.2-16.el5_7
dbus-debuginfo
Red Hat:enterprise_linux:5::client
before 0:1.1.2-16.el5_7
0:1.1.2-16.el5_7
dbus-libs
Red Hat:enterprise_linux:5::client
before 0:1.1.2-16.el5_7
0:1.1.2-16.el5_7
dbus-x11
Red Hat:enterprise_linux:5::client
before 0:1.1.2-16.el5_7
0:1.1.2-16.el5_7
dbus
Red Hat:enterprise_linux:5::client_workstation
before 0:1.1.2-16.el5_7
0:1.1.2-16.el5_7
dbus-debuginfo
Red Hat:enterprise_linux:5::client_workstation
before 0:1.1.2-16.el5_7
0:1.1.2-16.el5_7
dbus-devel
Red Hat:enterprise_linux:5::client_workstation
before 0:1.1.2-16.el5_7
0:1.1.2-16.el5_7
Show 11 moreShow less
Affected packages
PackageAffectedFixed
dbus
Red Hat:enterprise_linux:5::server
before 0:1.1.2-16.el5_7
0:1.1.2-16.el5_7
dbus-debuginfo
Red Hat:enterprise_linux:5::server
before 0:1.1.2-16.el5_7
0:1.1.2-16.el5_7
dbus-devel
Red Hat:enterprise_linux:5::server
before 0:1.1.2-16.el5_7
0:1.1.2-16.el5_7
dbus-libs
Red Hat:enterprise_linux:5::server
before 0:1.1.2-16.el5_7
0:1.1.2-16.el5_7
dbus-x11
Red Hat:enterprise_linux:5::server
before 0:1.1.2-16.el5_7
0:1.1.2-16.el5_7
dbus
Red Hat:enterprise_linux:6::server
before 1:1.2.24-5.el6_1
1:1.2.24-5.el6_1
dbus-debuginfo
Red Hat:enterprise_linux:6::server
before 1:1.2.24-5.el6_1
1:1.2.24-5.el6_1
dbus-devel
Red Hat:enterprise_linux:6::server
before 1:1.2.24-5.el6_1
1:1.2.24-5.el6_1
dbus-libs
Red Hat:enterprise_linux:6::server
before 1:1.2.24-5.el6_1
1:1.2.24-5.el6_1
dbus-x11
Red Hat:enterprise_linux:6::server
before 1:1.2.24-5.el6_1
1:1.2.24-5.el6_1
dbus-doc
Red Hat:enterprise_linux:6::server
before 1:1.2.24-5.el6_1
1:1.2.24-5.el6_1

What each source reports

NVD Score used4.6

The _dbus_header_byteswap function in dbus-marshal-header.c in D-Bus (aka DBus) 1.2.x before 1.2.28, 1.4.x before 1.4.12, and 1.5.x before 1.5.4 does not properly handle a non-native byte order, which allows local users to cause a denial of service (connection loss), obtain potentially sensitive information, or conduct unspecified state-modification attacks via crafted messages.

Record
CVE-2011-2200
CVSS 2.0
4.6 MediumAV:L/AC:L/Au:N/C:P/I:P/A:P
Weakness
CWE-20
Updated
2026-11-02
CVE ListNo score

The _dbus_header_byteswap function in dbus-marshal-header.c in D-Bus (aka DBus) 1.2.x before 1.2.28, 1.4.x before 1.4.12, and 1.5.x before 1.5.4 does not properly handle a non-native byte order, which allows local users to cause a denial of service (connection loss), obtain potentially sensitive information, or conduct unspecified state-modification attacks via crafted messages.

Record
CVE-2011-2200
Updated
2026-11-02
EUVDEUVD-2011-2190No score

The _dbus_header_byteswap function in dbus-marshal-header.c in D-Bus (aka DBus) 1.2.x before 1.2.28, 1.4.x before 1.4.12, and 1.5.x before 1.5.4 does not properly handle a non-native byte order, which allows local users to cause a denial of service (connection loss), obtain potentially sensitive information, or conduct unspecified state-modification attacks via crafted messages.

Record
EUVD-2011-2190
Updated
2026-11-03
GitHub AdvisoriesGHSA-8qh5-rr38-7xjmNo score

The _dbus_header_byteswap function in dbus-marshal-header.c in D-Bus (aka DBus) 1.2.x before 1.2...

The _dbus_header_byteswap function in dbus-marshal-header.c in D-Bus (aka DBus) 1.2.x before 1.2.28, 1.4.x before 1.4.12, and 1.5.x before 1.5.4 does not properly handle a non-native byte order, which allows local users to cause a denial of service (connection loss), obtain potentially sensitive information, or conduct unspecified state-modification attacks via crafted messages.

Record
GHSA-8qh5-rr38-7xjm
Weakness
CWE-20
Updated
2026-11-02
OSVNo score

The _dbus_header_byteswap function in dbus-marshal-header.c in D-Bus (aka DBus) 1.2.x before 1.2.28, 1.4.x before 1.4.12, and 1.5.x before 1.5.4 does not properly handle a non-native byte order, which allows local users to cause a denial of service (connection loss), obtain potentially sensitive information, or conduct unspecified state-modification attacks via crafted messages.

Record
CVE-2011-2200
Updated
2026-11-02
OSVDEBIAN-CVE-2011-2200No score

The _dbus_header_byteswap function in dbus-marshal-header.c in D-Bus (aka DBus) 1.2.x before 1.2.28, 1.4.x before 1.4.12, and 1.5.x before 1.5.4 does not properly handle a non-native byte order, which allows local users to cause a denial of service (connection loss), obtain potentially sensitive information, or conduct unspecified state-modification attacks via crafted messages.

Record
DEBIAN-CVE-2011-2200
Updated
2026-11-02

History

History
RecordedChangedSources
facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

Show 18 moreShow less
PagesAll vulnerabilitiesBrowseDocsSourcesGuideGet API key
MoveEnter Open