{"id":"CVE-2019-12749","aliases":["ALPINE-CVE-2019-12749","AZL-6371","BELL-CVE-2019-12749","DEBIAN-CVE-2019-12749","DLA-1818-1","DSA-4462-1","EUVD-2019-4335","GHSA-2hpj-v4f4-7g4j","MGASA-2019-0339","RHSA-2019:1726","RHSA-2019:2868","RHSA-2019:2870","RHSA-2019:3707","RHSA-2020:4032","SUSE-SU-2019:14111-1","SUSE-SU-2019:1521-1","SUSE-SU-2019:1591-1","SUSE-SU-2019:1595-1","SUSE-SU-2019:1597-1","SUSE-SU-2019:2820-2","SUSE-SU-2020:1672-1","UBUNTU-CVE-2019-12749","USN-4015-1","USN-4015-2","openSUSE-SU-2019:1604-1","openSUSE-SU-2019:1671-1","openSUSE-SU-2019:1750-1","openSUSE-SU-2024:10711-1"],"status":"published","title":"dbus before 1.10.28, 1.12.x before 1.12.16, and 1.13.x before 1.13.12, as used in DBusServer in...","description":"dbus before 1.10.28, 1.12.x before 1.12.16, and 1.13.x before 1.13.12, as used in DBusServer in Canonical Upstart in Ubuntu 14.04 (and in some, less common, uses of dbus-daemon), allows cookie spoofing because of symlink mishandling in the reference implementation of DBUS_COOKIE_SHA1 in the libdbus library. (This only affects the DBUS_COOKIE_SHA1 authentication mechanism.) A malicious client with write access to its own home directory could manipulate a ~/.dbus-keyrings symlink to cause a DBusServer with a different uid to read and write in unintended locations. In the worst case, this could result in the DBusServer reusing a cookie that is known to the malicious client, and treating that cookie as evidence that a subsequent client connection came from an attacker-chosen uid, allowing authentication bypass.","severity":{"version":"3.0","score":7.1,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.0055,"percentile":0.46306,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-59"],"published":"2019-06-11T15:00:00Z","modified":"2026-10-24T10:30:17Z","fixes":[{"ecosystem":"Alpine:v3.10","package":"dbus","fixed_in":["1.12.16-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.11","package":"dbus","fixed_in":["1.12.16-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.12","package":"dbus","fixed_in":["1.12.16-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.13","package":"dbus","fixed_in":["1.12.16-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"dbus","fixed_in":["1.12.16-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"dbus","fixed_in":["1.12.16-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"dbus","fixed_in":["1.12.16-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"dbus","fixed_in":["1.12.16-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"dbus","fixed_in":["1.12.16-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"dbus","fixed_in":["1.12.16-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"dbus","fixed_in":["1.12.16-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"dbus","fixed_in":["1.12.16-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"dbus","fixed_in":["1.12.16-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"dbus","fixed_in":["1.12.16-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"dbus","fixed_in":["1.12.16-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.7","package":"dbus","fixed_in":["1.10.28-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.8","package":"dbus","fixed_in":["1.10.28-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.9","package":"dbus","fixed_in":["1.10.28-r0"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"dbus","fixed_in":["1.13.6-9"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"dbus","fixed_in":["1.12.16-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"dbus","fixed_in":["1.12.16-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"dbus","fixed_in":["1.12.16-1"],"sources":["osv"]},{"ecosystem":"Debian:8","package":"dbus","fixed_in":["1.8.22-0+deb8u2"],"sources":["osv"]},{"ecosystem":"Debian:9","package":"dbus","fixed_in":["1.10.28-0+deb9u1"],"sources":["osv"]},{"ecosystem":"Mageia:7","package":"dbus","fixed_in":["1.13.8-4.1.mga7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"dbus","fixed_in":["1:1.2.24-11.el6_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"dbus-debuginfo","fixed_in":["1:1.2.24-11.el6_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"dbus-libs","fixed_in":["1:1.2.24-11.el6_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"dbus-x11","fixed_in":["1:1.2.24-11.el6_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"dbus-devel","fixed_in":["1:1.2.24-11.el6_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"dbus-doc","fixed_in":["1:1.2.24-11.el6_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"dbus","fixed_in":["1:1.2.24-11.el6_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"dbus-debuginfo","fixed_in":["1:1.2.24-11.el6_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"dbus-libs","fixed_in":["1:1.2.24-11.el6_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"dbus-x11","fixed_in":["1:1.2.24-11.el6_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"dbus-devel","fixed_in":["1:1.2.24-11.el6_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"dbus-doc","fixed_in":["1:1.2.24-11.el6_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"dbus","fixed_in":["1:1.2.24-11.el6_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"dbus-debuginfo","fixed_in":["1:1.2.24-11.el6_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"dbus-devel","fixed_in":["1:1.2.24-11.el6_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"dbus-libs","fixed_in":["1:1.2.24-11.el6_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"dbus-x11","fixed_in":["1:1.2.24-11.el6_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"dbus-doc","fixed_in":["1:1.2.24-11.el6_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"dbus","fixed_in":["1:1.2.24-11.el6_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"dbus-debuginfo","fixed_in":["1:1.2.24-11.el6_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"dbus-devel","fixed_in":["1:1.2.24-11.el6_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"dbus-libs","fixed_in":["1:1.2.24-11.el6_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"dbus-x11","fixed_in":["1:1.2.24-11.el6_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"dbus-doc","fixed_in":["1:1.2.24-11.el6_10"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:6.6::server","package":"dbus","fixed_in":["1:1.2.24-9.el6_6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:6.6::server","package":"dbus-debuginfo","fixed_in":["1:1.2.24-9.el6_6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:6.6::server","package":"dbus-devel","fixed_in":["1:1.2.24-9.el6_6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:6.6::server","package":"dbus-libs","fixed_in":["1:1.2.24-9.el6_6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:6.6::server","package":"dbus-x11","fixed_in":["1:1.2.24-9.el6_6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:6.6::server","package":"dbus-doc","fixed_in":["1:1.2.24-9.el6_6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:6.5::server","package":"dbus","fixed_in":["1:1.2.24-9.el6_5"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:6.5::server","package":"dbus-debuginfo","fixed_in":["1:1.2.24-9.el6_5"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:6.5::server","package":"dbus-devel","fixed_in":["1:1.2.24-9.el6_5"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:6.5::server","package":"dbus-libs","fixed_in":["1:1.2.24-9.el6_5"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:6.5::server","package":"dbus-x11","fixed_in":["1:1.2.24-9.el6_5"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:6.5::server","package":"dbus-doc","fixed_in":["1:1.2.24-9.el6_5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dbus-daemon-debuginfo","fixed_in":["1:1.12.8-9.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dbus-debuginfo","fixed_in":["1:1.12.8-9.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dbus-debugsource","fixed_in":["1:1.12.8-9.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dbus-devel","fixed_in":["1:1.12.8-9.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dbus-libs-debuginfo","fixed_in":["1:1.12.8-9.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dbus-tests-debuginfo","fixed_in":["1:1.12.8-9.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dbus-tools-debuginfo","fixed_in":["1:1.12.8-9.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dbus-x11","fixed_in":["1:1.12.8-9.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dbus-x11-debuginfo","fixed_in":["1:1.12.8-9.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"dbus","fixed_in":["1:1.12.8-9.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"dbus-common","fixed_in":["1:1.12.8-9.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"dbus-daemon","fixed_in":["1:1.12.8-9.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"dbus-daemon-debuginfo","fixed_in":["1:1.12.8-9.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"dbus-debuginfo","fixed_in":["1:1.12.8-9.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"dbus-debugsource","fixed_in":["1:1.12.8-9.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"dbus-libs","fixed_in":["1:1.12.8-9.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"dbus-libs-debuginfo","fixed_in":["1:1.12.8-9.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"dbus-tests-debuginfo","fixed_in":["1:1.12.8-9.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"dbus-tools","fixed_in":["1:1.12.8-9.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"dbus-tools-debuginfo","fixed_in":["1:1.12.8-9.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"dbus-x11-debuginfo","fixed_in":["1:1.12.8-9.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"dbus","fixed_in":["1:1.10.24-15.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"dbus-debuginfo","fixed_in":["1:1.10.24-15.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"dbus-libs","fixed_in":["1:1.10.24-15.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"dbus-x11","fixed_in":["1:1.10.24-15.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"dbus-devel","fixed_in":["1:1.10.24-15.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"dbus-doc","fixed_in":["1:1.10.24-15.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"dbus-tests","fixed_in":["1:1.10.24-15.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"dbus","fixed_in":["1:1.10.24-15.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"dbus-debuginfo","fixed_in":["1:1.10.24-15.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"dbus-libs","fixed_in":["1:1.10.24-15.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"dbus-x11","fixed_in":["1:1.10.24-15.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"dbus-devel","fixed_in":["1:1.10.24-15.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"dbus-doc","fixed_in":["1:1.10.24-15.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"dbus-tests","fixed_in":["1:1.10.24-15.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"dbus","fixed_in":["1:1.10.24-15.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"dbus-debuginfo","fixed_in":["1:1.10.24-15.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"dbus-devel","fixed_in":["1:1.10.24-15.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"dbus-libs","fixed_in":["1:1.10.24-15.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"dbus-x11","fixed_in":["1:1.10.24-15.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"dbus-doc","fixed_in":["1:1.10.24-15.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"dbus-tests","fixed_in":["1:1.10.24-15.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"dbus","fixed_in":["1:1.10.24-15.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"dbus-debuginfo","fixed_in":["1:1.10.24-15.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"dbus-devel","fixed_in":["1:1.10.24-15.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"dbus-libs","fixed_in":["1:1.10.24-15.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"dbus-x11","fixed_in":["1:1.10.24-15.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"dbus-doc","fixed_in":["1:1.10.24-15.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"dbus-tests","fixed_in":["1:1.10.24-15.el7"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Point of Sale 11 SP3","package":"dbus-1","fixed_in":["1.2.10-3.34.8.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Point of Sale 11 SP3","package":"dbus-1-x11","fixed_in":["1.2.10-3.34.8.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 11 SP4-LTSS","package":"dbus-1","fixed_in":["1.2.10-3.34.8.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 11 SP4-LTSS","package":"dbus-1-x11","fixed_in":["1.2.10-3.34.8.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15","package":"dbus-1","fixed_in":["1.12.2-3.5.1","1.12.2-3.8.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15","package":"dbus-1-x11","fixed_in":["1.12.2-3.5.1","1.12.2-3.8.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 7","package":"dbus-1","fixed_in":["1.8.22-24.19.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 7","package":"dbus-1-x11","fixed_in":["1.8.22-24.19.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"dbus-1","fixed_in":["1.8.22-24.19.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"dbus-1-x11","fixed_in":["1.8.22-24.19.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"dbus-1","fixed_in":["1.8.22-24.19.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"dbus-1-x11","fixed_in":["1.8.22-24.19.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12-LTSS","package":"dbus-1","fixed_in":["1.8.22-24.19.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12-LTSS","package":"dbus-1-x11","fixed_in":["1.8.22-24.19.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP1-LTSS","package":"dbus-1","fixed_in":["1.8.22-24.19.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP1-LTSS","package":"dbus-1-x11","fixed_in":["1.8.22-24.19.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP2-LTSS","package":"dbus-1","fixed_in":["1.8.22-24.19.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP2-LTSS","package":"dbus-1-x11","fixed_in":["1.8.22-24.19.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"dbus-1","fixed_in":["1.8.22-24.19.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"dbus-1-x11","fixed_in":["1.8.22-24.19.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 4","package":"dbus-1","fixed_in":["1.8.22-24.19.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 4","package":"dbus-1-x11","fixed_in":["1.8.22-24.19.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP1","package":"dbus-1","fixed_in":["1.12.2-8.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP1","package":"dbus-1-x11","fixed_in":["1.12.2-8.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:HPE Helion OpenStack 8","package":"dbus-1","fixed_in":["1.8.22-29.17.7"],"sources":["osv"]},{"ecosystem":"SUSE:HPE Helion OpenStack 8","package":"dbus-1-x11","fixed_in":["1.8.22-29.17.12"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 8","package":"dbus-1","fixed_in":["1.8.22-29.17.7"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 8","package":"dbus-1-x11","fixed_in":["1.8.22-29.17.12"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"dbus-1","fixed_in":["1.8.22-29.17.7"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"dbus-1-x11","fixed_in":["1.8.22-29.17.12"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"dbus-1","fixed_in":["1.8.22-29.17.7"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"dbus-1-x11","fixed_in":["1.8.22-29.17.12"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 5","package":"dbus-1","fixed_in":["1.8.22-29.17.7"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 5","package":"dbus-1-x11","fixed_in":["1.8.22-29.17.12"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"dbus-1","fixed_in":["1.8.22-11.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"dbus-1-x11","fixed_in":["1.8.22-11.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"dbus-1","fixed_in":["1.8.22-11.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"dbus-1-x11","fixed_in":["1.8.22-11.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"dbus-1","fixed_in":["1.8.22-11.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"dbus-1-x11","fixed_in":["1.8.22-11.3.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"dbus","fixed_in":["1.6.18-0ubuntu4.5+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"dbus","fixed_in":["1.10.6-1ubuntu3.4"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"dbus","fixed_in":["1.12.2-1ubuntu1.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.0","package":"dbus-1","fixed_in":["1.12.2-lp150.2.3.1","1.12.2-lp150.2.4.2"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.0","package":"dbus-1-x11","fixed_in":["1.12.2-lp150.2.3.1","1.12.2-lp150.2.4.2"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.1","package":"dbus-1","fixed_in":["1.12.2-lp151.4.3.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.1","package":"dbus-1-x11","fixed_in":["1.12.2-lp151.4.3.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.10","package":"dbus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.12.0"},{"fixed":"1.12.16-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.11","package":"dbus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.12.0"},{"fixed":"1.12.16-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.12","package":"dbus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.12.0"},{"fixed":"1.12.16-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.13","package":"dbus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.12.0"},{"fixed":"1.12.16-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"dbus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.12.0"},{"fixed":"1.12.16-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"dbus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.12.0"},{"fixed":"1.12.16-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"dbus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.12.0"},{"fixed":"1.12.16-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"dbus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.12.0"},{"fixed":"1.12.16-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"dbus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.12.0"},{"fixed":"1.12.16-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"dbus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.12.0"},{"fixed":"1.12.16-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"dbus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.12.0"},{"fixed":"1.12.16-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"dbus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.12.0"},{"fixed":"1.12.16-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"dbus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.12.0"},{"fixed":"1.12.16-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"dbus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.12.0"},{"fixed":"1.12.16-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"dbus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.12.0"},{"fixed":"1.12.16-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.7","package":"dbus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.12.0"},{"fixed":"1.10.28-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.8","package":"dbus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.12.0"},{"fixed":"1.10.28-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.9","package":"dbus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.12.0"},{"fixed":"1.10.28-r0"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"dbus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.6-9"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"dbus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.16-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"dbus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.16-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"dbus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.16-1"}]}]},{"source":"osv","ecosystem":"Debian:8","package":"dbus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.22-0+deb8u2"}]}],"versions":["1.8.16-1","1.8.16-2","1.8.18-0+deb8u1","1.8.18-1","1.8.20-0+deb8u1","1.8.20-1","1.8.22-0+deb8u1"]},{"source":"osv","ecosystem":"Debian:9","package":"dbus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.28-0+deb9u1"}]}],"versions":["1.10.18-1","1.10.20-1","1.10.22-0+deb9u1","1.10.22-1","1.10.24-0+deb9u1","1.10.26-0+deb9u1"]},{"source":"osv","ecosystem":"Mageia:7","package":"dbus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.8-4.1.mga7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"dbus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.2.24-11.el6_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"dbus-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.2.24-11.el6_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"dbus-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.2.24-11.el6_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"dbus-x11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.2.24-11.el6_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"dbus-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.2.24-11.el6_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"dbus-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.2.24-11.el6_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"dbus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.2.24-11.el6_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"dbus-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.2.24-11.el6_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"dbus-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.2.24-11.el6_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"dbus-x11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.2.24-11.el6_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"dbus-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.2.24-11.el6_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"dbus-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.2.24-11.el6_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"dbus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.2.24-11.el6_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"dbus-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.2.24-11.el6_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"dbus-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.2.24-11.el6_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"dbus-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.2.24-11.el6_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"dbus-x11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.2.24-11.el6_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"dbus-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.2.24-11.el6_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"dbus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.2.24-11.el6_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"dbus-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.2.24-11.el6_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"dbus-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.2.24-11.el6_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"dbus-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.2.24-11.el6_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"dbus-x11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.2.24-11.el6_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"dbus-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.2.24-11.el6_10"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:6.6::server","package":"dbus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.2.24-9.el6_6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:6.6::server","package":"dbus-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.2.24-9.el6_6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:6.6::server","package":"dbus-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.2.24-9.el6_6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:6.6::server","package":"dbus-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.2.24-9.el6_6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:6.6::server","package":"dbus-x11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.2.24-9.el6_6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:6.6::server","package":"dbus-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.2.24-9.el6_6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:6.5::server","package":"dbus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.2.24-9.el6_5"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:6.5::server","package":"dbus-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.2.24-9.el6_5"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:6.5::server","package":"dbus-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.2.24-9.el6_5"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:6.5::server","package":"dbus-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.2.24-9.el6_5"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:6.5::server","package":"dbus-x11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.2.24-9.el6_5"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:6.5::server","package":"dbus-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.2.24-9.el6_5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dbus-daemon-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.12.8-9.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dbus-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.12.8-9.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dbus-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.12.8-9.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dbus-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.12.8-9.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dbus-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.12.8-9.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dbus-tests-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.12.8-9.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dbus-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.12.8-9.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dbus-x11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.12.8-9.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dbus-x11-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.12.8-9.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"dbus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.12.8-9.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"dbus-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.12.8-9.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"dbus-daemon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.12.8-9.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"dbus-daemon-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.12.8-9.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"dbus-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.12.8-9.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"dbus-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.12.8-9.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"dbus-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.12.8-9.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"dbus-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.12.8-9.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"dbus-tests-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.12.8-9.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"dbus-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.12.8-9.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"dbus-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.12.8-9.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"dbus-x11-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.12.8-9.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"dbus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.10.24-15.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"dbus-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.10.24-15.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"dbus-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.10.24-15.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"dbus-x11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.10.24-15.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"dbus-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.10.24-15.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"dbus-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.10.24-15.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"dbus-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.10.24-15.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"dbus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.10.24-15.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"dbus-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.10.24-15.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"dbus-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.10.24-15.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"dbus-x11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.10.24-15.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"dbus-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.10.24-15.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"dbus-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.10.24-15.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"dbus-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.10.24-15.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"dbus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.10.24-15.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"dbus-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.10.24-15.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"dbus-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.10.24-15.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"dbus-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.10.24-15.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"dbus-x11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.10.24-15.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"dbus-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.10.24-15.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"dbus-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.10.24-15.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"dbus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.10.24-15.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"dbus-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.10.24-15.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"dbus-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.10.24-15.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"dbus-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.10.24-15.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"dbus-x11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.10.24-15.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"dbus-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.10.24-15.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"dbus-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.10.24-15.el7"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Point of Sale 11 SP3","package":"dbus-1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.10-3.34.8.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Point of Sale 11 SP3","package":"dbus-1-x11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.10-3.34.8.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4-LTSS","package":"dbus-1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.10-3.34.8.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4-LTSS","package":"dbus-1-x11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.10-3.34.8.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15","package":"dbus-1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.2-3.5.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15","package":"dbus-1-x11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.2-3.5.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"dbus-1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.22-24.19.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"dbus-1-x11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.22-24.19.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"dbus-1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.22-24.19.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"dbus-1-x11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.22-24.19.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"dbus-1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.22-24.19.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"dbus-1-x11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.22-24.19.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12-LTSS","package":"dbus-1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.22-24.19.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12-LTSS","package":"dbus-1-x11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.22-24.19.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1-LTSS","package":"dbus-1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.22-24.19.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1-LTSS","package":"dbus-1-x11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.22-24.19.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-LTSS","package":"dbus-1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.22-24.19.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-LTSS","package":"dbus-1-x11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.22-24.19.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"dbus-1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.22-24.19.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"dbus-1-x11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.22-24.19.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 4","package":"dbus-1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.22-24.19.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 4","package":"dbus-1-x11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.22-24.19.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP1","package":"dbus-1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.2-8.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP1","package":"dbus-1-x11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.2-8.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15","package":"dbus-1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.2-3.8.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15","package":"dbus-1-x11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.2-3.8.1"}]}]},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"dbus-1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.22-29.17.7"}]}]},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"dbus-1-x11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.22-29.17.12"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"dbus-1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.22-29.17.7"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"dbus-1-x11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.22-29.17.12"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"dbus-1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.22-29.17.7"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"dbus-1-x11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.22-29.17.12"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"dbus-1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.22-29.17.7"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"dbus-1-x11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.22-29.17.12"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 5","package":"dbus-1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.22-29.17.7"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 5","package":"dbus-1-x11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.22-29.17.12"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"dbus-1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.22-11.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"dbus-1-x11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.22-11.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"dbus-1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.22-11.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"dbus-1-x11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.22-11.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"dbus-1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.22-11.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"dbus-1-x11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.22-11.3.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"dbus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.18-0ubuntu4.5+esm1"}]}],"versions":["1.6.12-0ubuntu10","1.6.18-0ubuntu1","1.6.18-0ubuntu2","1.6.18-0ubuntu3","1.6.18-0ubuntu4","1.6.18-0ubuntu4.1","1.6.18-0ubuntu4.2","1.6.18-0ubuntu4.3","1.6.18-0ubuntu4.4","1.6.18-0ubuntu4.5"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"dbus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.6-1ubuntu3.4"}]}],"versions":["1.10.0-1ubuntu1","1.10.4-1ubuntu2","1.10.6-1ubuntu1","1.10.6-1ubuntu2","1.10.6-1ubuntu3","1.10.6-1ubuntu3.1","1.10.6-1ubuntu3.3"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"dbus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.2-1ubuntu1.1"}]}],"versions":["1.10.22-1ubuntu1","1.12.0-1ubuntu1","1.12.2-1ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"dbus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.6-1ubuntu3.4"}]}],"versions":["1.10.0-1ubuntu1","1.10.4-1ubuntu2","1.10.6-1ubuntu1","1.10.6-1ubuntu2","1.10.6-1ubuntu3","1.10.6-1ubuntu3.1","1.10.6-1ubuntu3.3"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"dbus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.2-1ubuntu1.1"}]}],"versions":["1.10.22-1ubuntu1","1.12.0-1ubuntu1","1.12.2-1ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"dbus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.18-0ubuntu4.5+esm1"}]}],"versions":["1.6.12-0ubuntu10","1.6.18-0ubuntu1","1.6.18-0ubuntu2","1.6.18-0ubuntu3","1.6.18-0ubuntu4","1.6.18-0ubuntu4.1","1.6.18-0ubuntu4.2","1.6.18-0ubuntu4.3","1.6.18-0ubuntu4.4","1.6.18-0ubuntu4.5"]},{"source":"osv","ecosystem":"openSUSE:Leap 15.0","package":"dbus-1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.2-lp150.2.3.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.0","package":"dbus-1-x11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.2-lp150.2.3.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.0","package":"dbus-1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.2-lp150.2.4.2"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.0","package":"dbus-1-x11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.2-lp150.2.4.2"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"dbus-1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.2-lp151.4.3.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"dbus-1-x11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.2-lp151.4.3.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"dbus-1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.20-5.5"}]}],"bundled":6}],"products":[{"vendor":"canonical","product":"ubuntu_linux"},{"vendor":"freedesktop","product":"dbus"}],"references":[{"url":"https://www.openwall.com/lists/oss-security/2019/06/11/2","tags":["x_refsource_MISC","x_transferred","Mailing List","Third Party Advisory","advisory","web","article"]},{"url":"http://www.openwall.com/lists/oss-security/2019/06/11/2","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Mitigation","Third Party Advisory","advisory"]},{"url":"https://usn.ubuntu.com/4015-1/","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory","advisory"]},{"url":"https://usn.ubuntu.com/4015-2/","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","web"]},{"url":"https://www.debian.org/security/2019/dsa-4462","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","advisory"]},{"url":"https://seclists.org/bugtraq/2019/Jun/16","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred","web"]},{"url":"http://www.securityfocus.com/bid/108751","tags":["vdb-entry","x_refsource_BID","x_transferred","web"]},{"url":"https://lists.debian.org/debian-lts-announce/2019/06/msg00005.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V2CQF37O73VH2JDVX2ILX2KD2KLXLQOU/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00059.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","web"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00092.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","web"]},{"url":"https://access.redhat.com/errata/RHSA-2019:1726","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00026.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","web"]},{"url":"https://security.gentoo.org/glsa/201909-08","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2019:2868","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2019:2870","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2019:3707","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20241206-0010/","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-12749","tags":["web","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V2CQF37O73VH2JDVX2ILX2KD2KLXLQOU"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V2CQF37O73VH2JDVX2ILX2KD2KLXLQOU"},{"url":"https://usn.ubuntu.com/4015-1"},{"url":"https://usn.ubuntu.com/4015-2"},{"url":"https://security.netapp.com/advisory/ntap-20241206-0010"},{"url":"https://github.com/advisories/GHSA-2hpj-v4f4-7g4j"},{"url":"https://security.alpinelinux.org/vuln/CVE-2019-12749","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2019-12749","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2019-12749","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2019-0339.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=24944","tags":["report"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1719344","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_1726.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-12749","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-12749","tags":["advisory","report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_2868.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_2870.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.1_release_notes/","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_3707.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2020:4032","tags":["advisory"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/7.9_release_notes/index","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_4032.json","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-201914111-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1137832","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2019-12749","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20191521-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1082318","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20191591-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20191595-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20191597-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20192820-2/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20201672-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1140091","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-12749","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-4015-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-4015-2","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XZVR64DPBS7J3FRD6GWGPW3Y54OBW62W/#XZVR64DPBS7J3FRD6GWGPW3Y54OBW62W","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/QNHYN47AVCXFKCLHEOJ5O7FB65XSK7QL/#QNHYN47AVCXFKCLHEOJ5O7FB65XSK7QL","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/PGA7NJC7OHX4NMTM3JZ3FS42PFMMYLII/#PGA7NJC7OHX4NMTM3JZ3FS42PFMMYLII","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2006-6107","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-0595","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-3834","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-4311","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-12049","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2019-12749","description":"dbus before 1.10.28, 1.12.x before 1.12.16, and 1.13.x before 1.13.12, as used in DBusServer in Canonical Upstart in Ubuntu 14.04 (and in some, less common, uses of dbus-daemon), allows cookie spoofing because of symlink mishandling in the reference implementation of DBUS_COOKIE_SHA1 in the libdbus library. (This only affects the DBUS_COOKIE_SHA1 authentication mechanism.) A malicious client with write access to its own home directory could manipulate a ~/.dbus-keyrings symlink to cause a DBusServer with a different uid to read and write in unintended locations. In the worst case, this could result in the DBusServer reusing a cookie that is known to the malicious client, and treating that cookie as evidence that a subsequent client connection came from an attacker-chosen uid, allowing authentication bypass.","status":"published","published":"2019-06-11T16:11:45Z","modified":"2026-02-13T19:57:55.649Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","level":"high","assessor":"adp"}],"cwes":["CWE-59"],"updated_at":"2026-11-02T14:20:23.697579Z"}],"euvd":[{"id":"EUVD-2019-4335","description":"dbus before 1.10.28, 1.12.x before 1.12.16, and 1.13.x before 1.13.12, as used in DBusServer in Canonical Upstart in Ubuntu 14.04 (and in some, less common, uses of dbus-daemon), allows cookie spoofing because of symlink mishandling in the reference implementation of DBUS_COOKIE_SHA1 in the libdbus library. (This only affects the DBUS_COOKIE_SHA1 authentication mechanism.) A malicious client with write access to its own home directory could manipulate a ~/.dbus-keyrings symlink to cause a DBusServer with a different uid to read and write in unintended locations. In the worst case, this could result in the DBusServer reusing a cookie that is known to the malicious client, and treating that cookie as evidence that a subsequent client connection came from an attacker-chosen uid, allowing authentication bypass.","status":"published","published":"2019-06-11T16:11:45Z","modified":"2026-02-13T19:57:55Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T19:48:38.489604Z"}],"ghsa":[{"id":"GHSA-2hpj-v4f4-7g4j","title":"dbus before 1.10.28, 1.12.x before 1.12.16, and 1.13.x before 1.13.12, as used in DBusServer in...","description":"dbus before 1.10.28, 1.12.x before 1.12.16, and 1.13.x before 1.13.12, as used in DBusServer in Canonical Upstart in Ubuntu 14.04 (and in some, less common, uses of dbus-daemon), allows cookie spoofing because of symlink mishandling in the reference implementation of DBUS_COOKIE_SHA1 in the libdbus library. (This only affects the DBUS_COOKIE_SHA1 authentication mechanism.) A malicious client with write access to its own home directory could manipulate a ~/.dbus-keyrings symlink to cause a DBusServer with a different uid to read and write in unintended locations. In the worst case, this could result in the DBusServer reusing a cookie that is known to the malicious client, and treating that cookie as evidence that a subsequent client connection came from an attacker-chosen uid, allowing authentication bypass.","status":"published","published":"2022-05-24T16:47:45Z","modified":"2024-12-06T15:31:18Z","cvss":[{"version":"3.0","score":7.1,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","level":"high"}],"cwes":["CWE-59"],"updated_at":"2026-11-02T14:59:03.724628Z"}],"nvd":[{"id":"CVE-2019-12749","description":"dbus before 1.10.28, 1.12.x before 1.12.16, and 1.13.x before 1.13.12, as used in DBusServer in Canonical Upstart in Ubuntu 14.04 (and in some, less common, uses of dbus-daemon), allows cookie spoofing because of symlink mishandling in the reference implementation of DBUS_COOKIE_SHA1 in the libdbus library. (This only affects the DBUS_COOKIE_SHA1 authentication mechanism.) A malicious client with write access to its own home directory could manipulate a ~/.dbus-keyrings symlink to cause a DBusServer with a different uid to read and write in unintended locations. In the worst case, this could result in the DBusServer reusing a cookie that is known to the malicious client, and treating that cookie as evidence that a subsequent client connection came from an attacker-chosen uid, allowing authentication bypass.","status":"published","published":"2019-06-11T17:29:00.517Z","modified":"2026-06-17T02:15:22.303Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","level":"high","assessor":"secondary"},{"version":"3.0","score":7.1,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","level":"high","assessor":"primary"},{"version":"2.0","score":3.6,"vector":"AV:L/AC:L/Au:N/C:P/I:P/A:N","level":"low","assessor":"primary"}],"cwes":["CWE-59"],"updated_at":"2026-11-02T14:05:16.285679Z"}],"osv":[{"id":"ALPINE-CVE-2019-12749","description":"dbus before 1.10.28, 1.12.x before 1.12.16, and 1.13.x before 1.13.12, as used in DBusServer in Canonical Upstart in Ubuntu 14.04 (and in some, less common, uses of dbus-daemon), allows cookie spoofing because of symlink mishandling in the reference implementation of DBUS_COOKIE_SHA1 in the libdbus library. (This only affects the DBUS_COOKIE_SHA1 authentication mechanism.) A malicious client with write access to its own home directory could manipulate a ~/.dbus-keyrings symlink to cause a DBusServer with a different uid to read and write in unintended locations. In the worst case, this could result in the DBusServer reusing a cookie that is known to the malicious client, and treating that cookie as evidence that a subsequent client connection came from an attacker-chosen uid, allowing authentication bypass.","status":"published","published":"2019-06-11T17:29:00.517Z","modified":"2026-09-21T06:17:52.467305686Z","cvss":[{"version":"3.0","score":7.1,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:27:47.663013Z"},{"id":"AZL-6371","title":"CVE-2019-12749 affecting package dbus for versions less than 1.13.6-9","description":"dbus before 1.10.28, 1.12.x before 1.12.16, and 1.13.x before 1.13.12, as used in DBusServer in Canonical Upstart in Ubuntu 14.04 (and in some, less common, uses of dbus-daemon), allows cookie spoofing because of symlink mishandling in the reference implementation of DBUS_COOKIE_SHA1 in the libdbus library. (This only affects the DBUS_COOKIE_SHA1 authentication mechanism.) A malicious client with write access to its own home directory could manipulate a ~/.dbus-keyrings symlink to cause a DBusServer with a different uid to read and write in unintended locations. In the worst case, this could result in the DBusServer reusing a cookie that is known to the malicious client, and treating that cookie as evidence that a subsequent client connection came from an attacker-chosen uid, allowing authentication bypass.","status":"published","published":"2019-06-11T17:29:00Z","modified":"2026-04-21T04:32:12.233764Z","cvss":[{"version":"3.0","score":7.1,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:28:07.805289Z"},{"id":"BELL-CVE-2019-12749","title":"CVE-2019-12749 does not affect BellSoft software","status":"withdrawn","published":"2023-08-31T12:16:30.244726Z","modified":"2026-02-15T07:19:07.67658Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:28:15.340685Z"},{"id":"CVE-2019-12749","description":"dbus before 1.10.28, 1.12.x before 1.12.16, and 1.13.x before 1.13.12, as used in DBusServer in Canonical Upstart in Ubuntu 14.04 (and in some, less common, uses of dbus-daemon), allows cookie spoofing because of symlink mishandling in the reference implementation of DBUS_COOKIE_SHA1 in the libdbus library. (This only affects the DBUS_COOKIE_SHA1 authentication mechanism.) A malicious client with write access to its own home directory could manipulate a ~/.dbus-keyrings symlink to cause a DBusServer with a different uid to read and write in unintended locations. In the worst case, this could result in the DBusServer reusing a cookie that is known to the malicious client, and treating that cookie as evidence that a subsequent client connection came from an attacker-chosen uid, allowing authentication bypass.","status":"published","published":"2019-06-11T17:29:00.517Z","modified":"2026-10-24T10:30:17.469084525Z","cvss":[{"version":"3.0","score":7.1,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:44:10.718934Z"},{"id":"DEBIAN-CVE-2019-12749","description":"dbus before 1.10.28, 1.12.x before 1.12.16, and 1.13.x before 1.13.12, as used in DBusServer in Canonical Upstart in Ubuntu 14.04 (and in some, less common, uses of dbus-daemon), allows cookie spoofing because of symlink mishandling in the reference implementation of DBUS_COOKIE_SHA1 in the libdbus library. (This only affects the DBUS_COOKIE_SHA1 authentication mechanism.) A malicious client with write access to its own home directory could manipulate a ~/.dbus-keyrings symlink to cause a DBusServer with a different uid to read and write in unintended locations. In the worst case, this could result in the DBusServer reusing a cookie that is known to the malicious client, and treating that cookie as evidence that a subsequent client connection came from an attacker-chosen uid, allowing authentication bypass.","status":"published","published":"2019-06-11T17:29:00.517Z","modified":"2026-09-21T07:01:49.790700997Z","cvss":[{"version":"3.0","score":7.1,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:45:31.467893Z"},{"id":"RHSA-2019:1726","title":"Red Hat Security Advisory: dbus security update","status":"published","published":"2024-09-16T02:44:20Z","modified":"2026-06-26T12:22:03.576734255Z","cvss":[{"version":"3.0","score":7,"vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:06.0195Z"},{"id":"RHSA-2019:2868","title":"Red Hat Security Advisory: dbus security update","status":"published","published":"2024-09-16T02:44:14Z","modified":"2026-06-26T12:21:59.907585316Z","cvss":[{"version":"3.0","score":7,"vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:06.0195Z"},{"id":"RHSA-2019:2870","title":"Red Hat Security Advisory: dbus security update","status":"published","published":"2024-09-16T02:44:08Z","modified":"2026-06-26T12:22:04.073363232Z","cvss":[{"version":"3.0","score":7,"vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:06.0195Z"},{"id":"RHSA-2019:3707","title":"Red Hat Security Advisory: dbus security update","status":"published","published":"2024-09-16T02:44:26Z","modified":"2026-06-26T12:21:59.962853291Z","cvss":[{"version":"3.0","score":7,"vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:06.535721Z"},{"id":"RHSA-2020:4032","title":"Red Hat Security Advisory: dbus security update","status":"published","published":"2024-09-16T02:44:32Z","modified":"2026-06-26T12:22:26.654408859Z","cvss":[{"version":"3.0","score":7,"vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:07.57369Z"},{"id":"UBUNTU-CVE-2019-12749","description":"dbus before 1.10.28, 1.12.x before 1.12.16, and 1.13.x before 1.13.12, as used in DBusServer in Canonical Upstart in Ubuntu 14.04 (and in some, less common, uses of dbus-daemon), allows cookie spoofing because of symlink mishandling in the reference implementation of DBUS_COOKIE_SHA1 in the libdbus library. (This only affects the DBUS_COOKIE_SHA1 authentication mechanism.) A malicious client with write access to its own home directory could manipulate a ~/.dbus-keyrings symlink to cause a DBusServer with a different uid to read and write in unintended locations. In the worst case, this could result in the DBusServer reusing a cookie that is known to the malicious client, and treating that cookie as evidence that a subsequent client connection came from an attacker-chosen uid, allowing authentication bypass.","status":"published","published":"2019-06-11T15:00:00Z","modified":"2026-04-22T12:09:19.652078Z","cvss":[{"version":"3.0","score":7.1,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","level":"high"},{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:54:19.202697Z"},{"id":"DLA-1818-1","title":"dbus - security update","status":"published","published":"2019-06-14T00:00:00Z","modified":"2026-03-09T01:22:31.168929Z","updated_at":"2026-11-02T15:46:09.777694Z"},{"id":"DSA-4462-1","title":"dbus - security update","status":"published","published":"2019-06-13T00:00:00Z","modified":"2026-03-09T02:09:17.513744Z","updated_at":"2026-11-02T15:46:16.862196Z"},{"id":"MGASA-2019-0339","title":"Updated dbus packages fix security vulnerability","description":"dbus before 1.10.28, 1.12.x before 1.12.16, and 1.13.x before 1.13.12, as\nused in DBusServer in Canonical Upstart in Ubuntu 14.04 (and in some, less\ncommon, uses of dbus-daemon), allows cookie spoofing because of symlink\nmishandling in the reference implementation of DBUS_COOKIE_SHA1 in the\nlibdbus library. (This only affects the DBUS_COOKIE_SHA1 authentication\nmechanism.) A malicious client with write access to its own home directory\ncould manipulate a ~/.dbus-keyrings symlink to cause a DBusServer with a\ndifferent uid to read and write in unintended locations. In the worst case,\nthis could result in the DBusServer reusing a cookie that is known to the\nmalicious client, and treating that cookie as evidence that a subsequent\nclient connection came from an attacker-chosen uid, allowing authentication\nbypass (CVE-2019-12749). \n","status":"published","published":"2019-11-30T13:06:06Z","modified":"2026-04-16T04:41:33.476477284Z","updated_at":"2026-11-02T15:49:41.151324Z"},{"id":"openSUSE-SU-2019:1604-1","title":"Security update for dbus-1","description":"This update for dbus-1 fixes the following issues:\n\nSecurity issue fixed:     \n    \n- CVE-2019-12749: Fixed an implementation flaw in DBUS_COOKIE_SHA1 which \n  could have allowed local attackers to bypass authentication (bsc#1137832).   \n\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2019-06-24T10:18:47Z","modified":"2026-02-04T02:52:57.18196Z","updated_at":"2026-11-02T16:58:30.784344Z"},{"id":"openSUSE-SU-2019:1671-1","title":"Security update for dbus-1","description":"This update for dbus-1 fixes the following issue:\n\nSecurity issue fixed:     \n    \n- CVE-2019-12749: Fixed an implementation flaw in DBUS_COOKIE_SHA1 which \n  could have allowed local attackers to bypass authentication (bsc#1137832).   \n  \nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2019-06-30T19:03:35Z","modified":"2026-02-04T03:35:25.823139Z","updated_at":"2026-11-02T16:58:30.784344Z"},{"id":"openSUSE-SU-2019:1750-1","title":"Security update for dbus-1","description":"This update for dbus-1 fixes the following issues:\n\nSecurity issue fixed:\t  \n\n- CVE-2019-12749: Fixed an implementation flaw in DBUS_COOKIE_SHA1 which \n  could have allowed local attackers to bypass authentication (bsc#1137832).   \n  \nThis update was imported from the SUSE:SLE-15-SP1:Update update project.","status":"published","published":"2019-07-20T06:25:05Z","modified":"2026-02-04T02:56:57.555963Z","updated_at":"2026-11-02T16:58:30.784344Z"},{"id":"openSUSE-SU-2024:10711-1","title":"dbus-1-1.12.20-5.5 on GA media","description":"These are all security issues fixed in the dbus-1-1.12.20-5.5 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:23:02.75821Z","updated_at":"2026-11-02T16:58:34.487567Z"},{"id":"SUSE-SU-2019:14111-1","title":"Security update for dbus-1","description":"This update for dbus-1 fixes the following issues:\n\nSecurity issue fixed: \t  \n\n- CVE-2019-12749: Fixed an implementation flaw in DBUS_COOKIE_SHA1 which\n  could have allowed local attackers to bypass authentication (bsc#1137832).\n\n","status":"published","published":"2019-07-02T08:31:38Z","modified":"2026-02-04T04:06:27.298219Z","updated_at":"2026-11-02T15:53:46.44301Z"},{"id":"SUSE-SU-2019:1521-1","title":"Security update for dbus-1","description":"This update for dbus-1 fixes the following issues:\n\nSecurity issue fixed:     \n    \n- CVE-2019-12749: Fixed an implementation flaw in DBUS_COOKIE_SHA1 which \n  could have allowed local attackers to bypass authentication (bsc#1137832).   \n\n- Fixes in spec file:\n\t* fix warning and error messages.\n\t* fix licensing directory. (bsc#1082318)\n","status":"published","published":"2019-06-17T15:28:21Z","modified":"2026-02-04T02:29:25.898459Z","updated_at":"2026-11-02T15:53:46.44301Z"},{"id":"SUSE-SU-2019:1591-1","title":"Security update for dbus-1","description":"This update for dbus-1 fixes the following issue:\n\t  \nSecurity issue fixed:     \n    \n- CVE-2019-12749: Fixed an implementation flaw in DBUS_COOKIE_SHA1 which \n  could have allowed local attackers to bypass authentication (bsc#1137832).   \n  ","status":"published","published":"2019-06-21T08:16:27Z","modified":"2026-02-04T03:00:24.29114Z","updated_at":"2026-11-02T15:53:46.44301Z"},{"id":"SUSE-SU-2019:1595-1","title":"Security update for dbus-1","description":"This update for dbus-1 fixes the following issues:\n\nSecurity issue fixed:\t  \n\n- CVE-2019-12749: Fixed an implementation flaw in DBUS_COOKIE_SHA1 which \n  could have allowed local attackers to bypass authentication (bsc#1137832).   \n  ","status":"published","published":"2019-06-21T08:17:47Z","modified":"2026-02-04T03:39:51.499257Z","updated_at":"2026-11-02T15:53:46.44301Z"},{"id":"SUSE-SU-2019:1597-1","title":"Security update for dbus-1","description":"This update for dbus-1 fixes the following issue:\n\nSecurity issue fixed:     \n    \n- CVE-2019-12749: Fixed an implementation flaw in DBUS_COOKIE_SHA1 which \n  could have allowed local attackers to bypass authentication (bsc#1137832).   \n  ","status":"published","published":"2019-06-21T08:18:23Z","modified":"2026-02-04T03:47:56.948496Z","updated_at":"2026-11-02T15:53:46.44301Z"},{"id":"SUSE-SU-2019:2820-2","title":"Security update for dbus-1","description":"This update for dbus-1 fixes the following issues:\n\t  \nSecurity issue fixed:     \n    \n- CVE-2019-12749: Fixed an implementation flaw in DBUS_COOKIE_SHA1 which \n  could have allowed local attackers to bypass authentication (bsc#1137832).   \n","status":"published","published":"2020-02-18T14:06:49Z","modified":"2026-02-04T04:14:39.787805Z","updated_at":"2026-11-02T15:53:47.06185Z"},{"id":"SUSE-SU-2020:1672-1","title":"Security update for dbus-1","description":"This update for dbus-1 fixes the following issues:\n\n- CVE-2019-12749: Fixed an implementation flaw in DBUS_COOKIE_SHA1 which \n  could have allowed local attackers to bypass authentication (bsc#1137832). \n","status":"published","published":"2020-06-18T11:41:37Z","modified":"2026-02-04T04:08:56.570926Z","updated_at":"2026-11-02T15:53:47.634847Z"},{"id":"USN-4015-1","title":"dbus vulnerability","description":"Joe Vennix discovered that DBus incorrectly handled DBUS_COOKIE_SHA1\nauthentication. A local attacker could possibly use this issue to bypass\nauthentication and connect to DBus servers with elevated privileges.\n","status":"published","published":"2019-06-11T16:38:56Z","modified":"2026-04-22T09:57:45.301717Z","updated_at":"2026-11-02T16:58:14.019824Z"},{"id":"USN-4015-2","title":"dbus vulnerability","description":"USN-4015-1 fixed a vulnerability in DBus. This update provides\nthe corresponding update for Ubuntu 12.04 ESM and Ubuntu 14.04 ESM.\n\nOriginal advisory details:\n\n Joe Vennix discovered that DBus incorrectly handled DBUS_COOKIE_SHA1\n authentication. A local attacker could possibly use this issue to bypass\n authentication and connect to DBus servers with elevated privileges.\n","status":"published","published":"2019-06-12T14:50:58Z","modified":"2026-04-22T09:57:50.509365Z","updated_at":"2026-11-02T16:58:14.019824Z"}]}}