Every CVESearch/Get API key

CVE-2014-3533

dbus 1.3.0 before 1.6.22 and 1.8.x before 1.8.6 allows local users to cause a denial of service ...

2.1 LowFix available

CVE-2014-3533 is a low vulnerability (CVSS 2.1) in Freedesktop Dbus, published July 2, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.42%, the 36th percentile. Fixed in dbus 1.8.6-1.

Severity
2.1 LowCVSS 2.0, NVD
Exploit chance
0.42%EPSS, 36th percentile
Exploitation
None knownNot on CISA’s or ENISA’s lists
Fixed in
1.8.6-1dbus +8 more

Description

dbus 1.3.0 before 1.6.22 and 1.8.x before 1.8.6 allows local users to cause a denial of service (disconnect) via a certain sequence of crafted messages that cause the dbus-daemon to forward a message containing an invalid file descriptor.

Exploit likelihood

0.42%Down 0.9 points since Feb 4, 2022
90%50%10%1%

Affected products

Affected packages

Affected packages
PackageAffectedFixed
dbus
Debian:12
before 1.8.6-1
1.8.6-1
dbus
Debian:13
before 1.8.6-1
1.8.6-1
dbus
Debian:14
before 1.8.6-1
1.8.6-1
dbus
Debian:7
From an advisory covering 3 CVEs
before 1.6.8-1+deb7u3, plus listed versions
1.6.8-11.6.8-1+deb7u11.6.8-1+deb7u2
1.6.8-1+deb7u3
dbus
Mageia:3
From an advisory covering 2 CVEs
before 1.6.8-4.4.mga3
1.6.8-4.4.mga3
dbus
Mageia:4
From an advisory covering 2 CVEs
before 1.6.18-1.3.mga4
1.6.18-1.3.mga4
dbus
Ubuntu:14.04:LTS
before 1.6.18-0ubuntu4.1, plus listed versions
1.6.12-0ubuntu101.6.18-0ubuntu11.6.18-0ubuntu21.6.18-0ubuntu31.6.18-0ubuntu4
1.6.18-0ubuntu4.1
dbus
Ubuntu:14.04:LTS
From an advisory covering 3 CVEs
before 1.6.18-0ubuntu4.1, plus listed versions
1.6.12-0ubuntu101.6.18-0ubuntu11.6.18-0ubuntu21.6.18-0ubuntu31.6.18-0ubuntu4
1.6.18-0ubuntu4.1
dbus-1
openSUSE:Tumbleweed
From an advisory covering 14 CVEs
before 1.10.12-2.1
1.10.12-2.1

What each source reports

NVD Score used2.1

dbus 1.3.0 before 1.6.22 and 1.8.x before 1.8.6 allows local users to cause a denial of service (disconnect) via a certain sequence of crafted messages that cause the dbus-daemon to forward a message containing an invalid file descriptor.

Record
CVE-2014-3533
CVSS 2.0
2.1 LowAV:L/AC:L/Au:N/C:N/I:N/A:P
Weakness
CWE-20
Updated
2026-11-02
CVE ListNo score

dbus 1.3.0 before 1.6.22 and 1.8.x before 1.8.6 allows local users to cause a denial of service (disconnect) via a certain sequence of crafted messages that cause the dbus-daemon to forward a message containing an invalid file descriptor.

Record
CVE-2014-3533
Updated
2026-11-02
EUVDEUVD-2014-3528No score

dbus 1.3.0 before 1.6.22 and 1.8.x before 1.8.6 allows local users to cause a denial of service (disconnect) via a certain sequence of crafted messages that cause the dbus-daemon to forward a message containing an invalid file descriptor.

Record
EUVD-2014-3528
Updated
2026-11-03
GitHub AdvisoriesGHSA-gf7v-52mw-wwh2No score

dbus 1.3.0 before 1.6.22 and 1.8.x before 1.8.6 allows local users to cause a denial of service ...

dbus 1.3.0 before 1.6.22 and 1.8.x before 1.8.6 allows local users to cause a denial of service (disconnect) via a certain sequence of crafted messages that cause the dbus-daemon to forward a message containing an invalid file descriptor.

Record
GHSA-gf7v-52mw-wwh2
Weakness
CWE-20
Updated
2026-11-02
OSVNo score

dbus 1.3.0 before 1.6.22 and 1.8.x before 1.8.6 allows local users to cause a denial of service (disconnect) via a certain sequence of crafted messages that cause the dbus-daemon to forward a message containing an invalid file descriptor.

Record
CVE-2014-3533
Updated
2026-11-02
OSVDEBIAN-CVE-2014-3533No score

dbus 1.3.0 before 1.6.22 and 1.8.x before 1.8.6 allows local users to cause a denial of service (disconnect) via a certain sequence of crafted messages that cause the dbus-daemon to forward a message containing an invalid file descriptor.

Record
DEBIAN-CVE-2014-3533
Updated
2026-11-02
Show 4 moreShow less
OSVMGASA-2014-0294No score

Updated dbus packages fix multiple vulnerabilities

Updated dbus packages fix security vulnerabilities:

A flaw was reported in D-Bus's file descriptor passing feature. A local attacker could use this flaw to cause a service or application to disconnect from the bus, typically resulting in that service or application exiting (CVE-2014-3532).

A flaw was reported in D-Bus's file descriptor passing feature. A local attacker could use this flaw to cause an invalid file descriptor to be forwarded to a service or application, causing it to disconnect from the bus, typically resulting in that service or application exiting (CVE-2014-3533).

Record
MGASA-2014-0294
Updated
2026-11-02
OSVopenSUSE-SU-2024:10517-1No score

dbus-1-1.10.12-2.1 on GA media

These are all security issues fixed in the dbus-1-1.10.12-2.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10517-1
Updated
2026-11-02
OSVUBUNTU-CVE-2014-3533No score

dbus 1.3.0 before 1.6.22 and 1.8.x before 1.8.6 allows local users to cause a denial of service (disconnect) via a certain sequence of crafted messages that cause the dbus-daemon to forward a message containing an invalid file descriptor.

Record
UBUNTU-CVE-2014-3533
Updated
2026-11-02
OSVUSN-2275-1No score

dbus vulnerabilities

Alban Crequy discovered that dbus-daemon incorrectly sent AccessDenied errors to the service instead of the client when enforcing permissions. A local user can use this issue to possibly deny access to the service. (CVE-2014-3477)

Alban Crequy discovered that dbus-daemon incorrectly handled certain file descriptors. A local attacker could use this issue to cause services or clients to disconnect, resulting in a denial of service. (CVE-2014-3532, CVE-2014-3533)

Record
USN-2275-1
Updated
2026-11-02

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

Show 30 moreShow less
PagesAll vulnerabilitiesBrowseDocsSourcesGuideGet API key
MoveEnter Open