{"id":"CVE-2022-42011","aliases":["ALPINE-CVE-2022-42011","ALSA-2023:0096","ALSA-2023:0335","AZL-11092","BELL-CVE-2022-42011","CLSA-2022-1669241224","DEBIAN-CVE-2022-42011","DLA-3142-1","DSA-5250-1","EUVD-2022-45111","GHSA-3g2p-5q22-h774","JLSEC-2025-20","MGASA-2022-0365","OESA-2022-2000","OESA-2022-2001","OESA-2022-2051","RHSA-2022:8812","RHSA-2022:8977","RHSA-2023:0096","RHSA-2023:0335","RLSA-2023:0096","RLSA-2023:0335","SUSE-SU-2022:3804-1","SUSE-SU-2022:3805-1","SUSE-SU-2022:3806-1","SUSE-SU-2022:4295-1","UBUNTU-CVE-2022-42011","USN-5704-1","openSUSE-SU-2024:12448-1"],"status":"published","title":"An issue was discovered in D-Bus before 1.12.24, 1.13.x and 1.14.x before 1.14.4, and 1.15.x...","description":"An issue was discovered in D-Bus before 1.12.24, 1.13.x and 1.14.x before 1.14.4, and 1.15.x before 1.15.2. An authenticated attacker can cause dbus-daemon and other programs that use libdbus to crash when receiving a message where an array length is inconsistent with the size of the element type.","severity":{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.01768,"percentile":0.78233,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-129"],"published":"2022-10-06T00:00:00Z","modified":"2026-11-03T08:04:10Z","fixes":[{"ecosystem":"Alpine:v3.13","package":"dbus","fixed_in":["1.12.24-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"dbus","fixed_in":["1.12.24-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"dbus","fixed_in":["1.12.24-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"dbus","fixed_in":["1.14.4-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"dbus","fixed_in":["1.14.4-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"dbus","fixed_in":["1.14.4-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"dbus","fixed_in":["1.14.4-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"dbus","fixed_in":["1.14.4-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"dbus","fixed_in":["1.14.4-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"dbus","fixed_in":["1.14.4-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"dbus","fixed_in":["1.14.4-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"dbus","fixed_in":["1.14.4-r0"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"dbus","fixed_in":["1.15.2-2"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"dbus","fixed_in":["1.14.4-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"dbus","fixed_in":["1.14.4-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"dbus","fixed_in":["1.14.4-1"],"sources":["osv"]},{"ecosystem":"Julia","package":"Dbus_jll","fixed_in":["1.14.10+0"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"dbus","fixed_in":["1.6.18-0ubuntu4.5+esm3"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"dbus","fixed_in":["1.10.6-1ubuntu3.6+esm2"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"dbus","fixed_in":["1.12.2-1ubuntu1.4"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"dbus","fixed_in":["1.12.16-2ubuntu2.3"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"dbus","fixed_in":["1.12.20-2ubuntu4.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.13","package":"dbus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.13.0"},{"fixed":"1.12.24-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"dbus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.13.0"},{"fixed":"1.12.24-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"dbus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.13.0"},{"fixed":"1.12.24-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"dbus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.13.0"},{"fixed":"1.14.4-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"dbus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.13.0"},{"fixed":"1.14.4-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"dbus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.13.0"},{"fixed":"1.14.4-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"dbus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.13.0"},{"fixed":"1.14.4-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"dbus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.13.0"},{"fixed":"1.14.4-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"dbus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.13.0"},{"fixed":"1.14.4-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"dbus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.13.0"},{"fixed":"1.14.4-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"dbus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.13.0"},{"fixed":"1.14.4-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"dbus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.13.0"},{"fixed":"1.14.4-r0"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"dbus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.12.8-23.el8_7.1"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"dbus-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.12.8-23.el8_7.1"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"dbus-daemon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.12.8-23.el8_7.1"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"dbus-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.12.8-23.el8_7.1"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"dbus-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.12.8-23.el8_7.1"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"dbus-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.12.8-23.el8_7.1"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"dbus-x11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.12.8-23.el8_7.1"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:9","package":"dbus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.12.20-7.el9_1"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:9","package":"dbus-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.12.20-7.el9_1"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:9","package":"dbus-daemon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.12.20-7.el9_1"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:9","package":"dbus-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.12.20-7.el9_1"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:9","package":"dbus-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.12.20-7.el9_1"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:9","package":"dbus-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.12.20-7.el9_1"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:9","package":"dbus-x11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.12.20-7.el9_1"}]}],"bundled":3},{"source":"osv","ecosystem":"Azure Linux:2","package":"dbus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.2-2"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"dbus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.6-1ubuntu3.6+tuxcare.els1"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"dbus-1-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.6-1ubuntu3.6+tuxcare.els1"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"dbus-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.6-1ubuntu3.6+tuxcare.els1"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"dbus-user-session","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.6-1ubuntu3.6+tuxcare.els1"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"dbus-x11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.6-1ubuntu3.6+tuxcare.els1"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libdbus-1-3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.6-1ubuntu3.6+tuxcare.els1"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libdbus-1-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.6-1ubuntu3.6+tuxcare.els1"}]}],"bundled":4},{"source":"osv","ecosystem":"Debian:12","package":"dbus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.4-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"dbus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.4-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"dbus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.4-1"}]}]},{"source":"osv","ecosystem":"Debian:10","package":"dbus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.24-0+deb10u1"}]}],"versions":["1.12.16-1","1.12.16-2","1.12.18-1","1.12.20-0+deb10u1","1.12.20-1","1.12.20-2","1.12.20-3","1.12.20-4","1.12.22-1"],"bundled":3},{"source":"osv","ecosystem":"Debian:11","package":"dbus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.24-0+deb11u1"}]}],"versions":["1.12.20-2","1.12.20-3","1.12.20-4","1.12.22-1"],"bundled":3},{"source":"osv","ecosystem":"Julia","package":"Dbus_jll","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"1.14.10+0"}]}]},{"source":"osv","ecosystem":"Mageia:8","package":"dbus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.18-3.1.mga8"}]}],"bundled":3},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"dbus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.16-19.oe1"}]}],"bundled":3},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"dbus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.20-8.oe2203"}]}],"bundled":3},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP3","package":"dbus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.16-20.oe1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"dbus-daemon-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.12.8-18.el8_6.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"dbus-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.12.8-18.el8_6.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"dbus-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.12.8-18.el8_6.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"dbus-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.12.8-18.el8_6.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"dbus-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.12.8-18.el8_6.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"dbus-tests-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.12.8-18.el8_6.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"dbus-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.12.8-18.el8_6.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"dbus-x11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.12.8-18.el8_6.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"dbus-x11-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.12.8-18.el8_6.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"dbus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.12.8-18.el8_6.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"dbus-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.12.8-18.el8_6.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"dbus-daemon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.12.8-18.el8_6.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"dbus-daemon-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.12.8-18.el8_6.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"dbus-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.12.8-18.el8_6.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"dbus-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.12.8-18.el8_6.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"dbus-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.12.8-18.el8_6.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"dbus-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.12.8-18.el8_6.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"dbus-tests-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.12.8-18.el8_6.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"dbus-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.12.8-18.el8_6.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"dbus-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.12.8-18.el8_6.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"dbus-x11-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.12.8-18.el8_6.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"dbus-daemon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.12.20-5.el9_0.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"dbus-daemon-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.12.20-5.el9_0.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"dbus-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.12.20-5.el9_0.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"dbus-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.12.20-5.el9_0.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"dbus-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.12.20-5.el9_0.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"dbus-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.12.20-5.el9_0.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"dbus-tests-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.12.20-5.el9_0.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"dbus-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.12.20-5.el9_0.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"dbus-x11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.12.20-5.el9_0.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"dbus-x11-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.12.20-5.el9_0.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::baseos","package":"dbus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.12.20-5.el9_0.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::baseos","package":"dbus-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.12.20-5.el9_0.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::baseos","package":"dbus-daemon-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.12.20-5.el9_0.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::baseos","package":"dbus-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.12.20-5.el9_0.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::baseos","package":"dbus-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.12.20-5.el9_0.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::baseos","package":"dbus-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.12.20-5.el9_0.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::baseos","package":"dbus-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.12.20-5.el9_0.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::baseos","package":"dbus-tests-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.12.20-5.el9_0.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::baseos","package":"dbus-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.12.20-5.el9_0.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::baseos","package":"dbus-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.12.20-5.el9_0.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::baseos","package":"dbus-x11-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.12.20-5.el9_0.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dbus-daemon-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.12.8-23.el8_7.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dbus-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.12.8-23.el8_7.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dbus-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.12.8-23.el8_7.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dbus-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.12.8-23.el8_7.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dbus-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.12.8-23.el8_7.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dbus-tests-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.12.8-23.el8_7.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dbus-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.12.8-23.el8_7.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dbus-x11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.12.8-23.el8_7.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dbus-x11-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.12.8-23.el8_7.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"dbus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.12.8-23.el8_7.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"dbus-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.12.8-23.el8_7.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"dbus-daemon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.12.8-23.el8_7.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"dbus-daemon-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.12.8-23.el8_7.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"dbus-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.12.8-23.el8_7.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"dbus-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.12.8-23.el8_7.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"dbus-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.12.8-23.el8_7.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"dbus-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.12.8-23.el8_7.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"dbus-tests-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.12.8-23.el8_7.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"dbus-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.12.8-23.el8_7.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"dbus-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.12.8-23.el8_7.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"dbus-x11-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.12.8-23.el8_7.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"dbus-daemon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.12.20-7.el9_1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"dbus-daemon-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.12.20-7.el9_1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"dbus-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.12.20-7.el9_1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"dbus-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.12.20-7.el9_1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"dbus-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.12.20-7.el9_1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"dbus-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.12.20-7.el9_1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"dbus-tests-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.12.20-7.el9_1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"dbus-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.12.20-7.el9_1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"dbus-x11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.12.20-7.el9_1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"dbus-x11-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.12.20-7.el9_1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"dbus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.12.20-7.el9_1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"dbus-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.12.20-7.el9_1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"dbus-daemon-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.12.20-7.el9_1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"dbus-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.12.20-7.el9_1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"dbus-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.12.20-7.el9_1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"dbus-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.12.20-7.el9_1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"dbus-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.12.20-7.el9_1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"dbus-tests-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.12.20-7.el9_1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"dbus-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.12.20-7.el9_1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"dbus-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.12.20-7.el9_1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"dbus-x11-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.12.20-7.el9_1"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"dbus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.12.8-23.el8_7.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:9","package":"dbus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.12.20-7.el9_1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"dbus-1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.22-29.24.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"dbus-1-x11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.22-29.24.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"dbus-1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.22-29.24.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"dbus-1-x11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.22-29.24.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"dbus-1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.22-29.24.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"dbus-1-x11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.22-29.24.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-BCL","package":"dbus-1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.22-29.24.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-BCL","package":"dbus-1-x11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.22-29.24.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4-LTSS","package":"dbus-1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.22-29.24.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4-LTSS","package":"dbus-1-x11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.22-29.24.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP3","package":"dbus-1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.2-150100.8.14.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP3","package":"dbus-1-x11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.2-150100.8.14.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS","package":"dbus-1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.2-150100.8.14.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS","package":"dbus-1-x11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.2-150100.8.14.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"dbus-1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.2-150100.8.14.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"dbus-1-x11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.2-150100.8.14.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS","package":"dbus-1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.2-150100.8.14.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS","package":"dbus-1-x11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.2-150100.8.14.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"dbus-1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.2-150100.8.14.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"dbus-1-x11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.2-150100.8.14.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-BCL","package":"dbus-1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.2-150100.8.14.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-BCL","package":"dbus-1-x11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.2-150100.8.14.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"dbus-1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.2-150100.8.14.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"dbus-1-x11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.2-150100.8.14.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-BCL","package":"dbus-1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.2-150100.8.14.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-BCL","package":"dbus-1-x11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.2-150100.8.14.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"dbus-1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.2-150100.8.14.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"dbus-1-x11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.2-150100.8.14.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"dbus-1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.2-150100.8.14.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"dbus-1-x11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.2-150100.8.14.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"dbus-1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.2-150100.8.14.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"dbus-1-x11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.2-150100.8.14.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.1","package":"dbus-1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.2-150100.8.14.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.1","package":"dbus-1-x11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.2-150100.8.14.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Retail Branch Server 4.1","package":"dbus-1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.2-150100.8.14.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Retail Branch Server 4.1","package":"dbus-1-x11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.2-150100.8.14.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Server 4.1","package":"dbus-1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.2-150100.8.14.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Server 4.1","package":"dbus-1-x11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.2-150100.8.14.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"dbus-1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.2-150100.8.14.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"dbus-1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.2-150100.8.14.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"dbus-1-x11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.2-150100.8.14.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 6","package":"dbus-1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.2-150100.8.14.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 6","package":"dbus-1-x11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.2-150100.8.14.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7","package":"dbus-1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.2-150100.8.14.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7","package":"dbus-1-x11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.2-150100.8.14.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap Micro 5.2","package":"dbus-1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.2-150100.8.14.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap Micro 5.2","package":"dbus-1-x11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.2-150100.8.14.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"dbus-1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.2-150100.8.14.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"dbus-1-x11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.2-150100.8.14.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"dbus-1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.2-150400.18.5.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"dbus-1-x11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.2-150400.18.5.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"dbus-1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.2-150400.18.5.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"dbus-1-x11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.2-150400.18.5.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"dbus-1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.2-150400.18.5.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"dbus-1-x11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.2-150400.18.5.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"dbus-1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.22-38.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"dbus-1-x11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.22-38.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"dbus-1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.22-38.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"dbus-1-x11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.22-38.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"dbus-1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.22-38.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"dbus-1-x11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.22-38.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"dbus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.18-0ubuntu4.5+esm3"}]}],"versions":["1.6.12-0ubuntu10","1.6.18-0ubuntu1","1.6.18-0ubuntu2","1.6.18-0ubuntu3","1.6.18-0ubuntu4","1.6.18-0ubuntu4.1","1.6.18-0ubuntu4.2","1.6.18-0ubuntu4.3","1.6.18-0ubuntu4.4","1.6.18-0ubuntu4.5","1.6.18-0ubuntu4.5+esm1","1.6.18-0ubuntu4.5+esm2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"dbus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.6-1ubuntu3.6+esm2"}]}],"versions":["1.10.0-1ubuntu1","1.10.4-1ubuntu2","1.10.6-1ubuntu1","1.10.6-1ubuntu2","1.10.6-1ubuntu3","1.10.6-1ubuntu3.1","1.10.6-1ubuntu3.3","1.10.6-1ubuntu3.4","1.10.6-1ubuntu3.5","1.10.6-1ubuntu3.6","1.10.6-1ubuntu3.6+esm1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"dbus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.2-1ubuntu1.4"}]}],"versions":["1.10.22-1ubuntu1","1.12.0-1ubuntu1","1.12.2-1ubuntu1","1.12.2-1ubuntu1.1","1.12.2-1ubuntu1.2","1.12.2-1ubuntu1.3"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"dbus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.16-2ubuntu2.3"}]}],"versions":["1.12.14-1ubuntu2","1.12.16-2ubuntu1","1.12.16-2ubuntu2","1.12.16-2ubuntu2.1","1.12.16-2ubuntu2.2"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"dbus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.20-2ubuntu4.1"}]}],"versions":["1.12.20-2ubuntu2","1.12.20-2ubuntu3","1.12.20-2ubuntu4"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"dbus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.18-0ubuntu4.5+esm3"}]}],"versions":["1.6.12-0ubuntu10","1.6.18-0ubuntu1","1.6.18-0ubuntu2","1.6.18-0ubuntu3","1.6.18-0ubuntu4","1.6.18-0ubuntu4.1","1.6.18-0ubuntu4.2","1.6.18-0ubuntu4.3","1.6.18-0ubuntu4.4","1.6.18-0ubuntu4.5","1.6.18-0ubuntu4.5+esm1","1.6.18-0ubuntu4.5+esm2"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"dbus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.6-1ubuntu3.6+esm2"}]}],"versions":["1.10.0-1ubuntu1","1.10.4-1ubuntu2","1.10.6-1ubuntu1","1.10.6-1ubuntu2","1.10.6-1ubuntu3","1.10.6-1ubuntu3.1","1.10.6-1ubuntu3.3","1.10.6-1ubuntu3.4","1.10.6-1ubuntu3.5","1.10.6-1ubuntu3.6","1.10.6-1ubuntu3.6+esm1"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"dbus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.2-1ubuntu1.4"}]}],"versions":["1.10.22-1ubuntu1","1.12.0-1ubuntu1","1.12.2-1ubuntu1","1.12.2-1ubuntu1.1","1.12.2-1ubuntu1.2","1.12.2-1ubuntu1.3"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"dbus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.16-2ubuntu2.3"}]}],"versions":["1.12.14-1ubuntu2","1.12.16-2ubuntu1","1.12.16-2ubuntu2","1.12.16-2ubuntu2.1","1.12.16-2ubuntu2.2"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"dbus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.20-2ubuntu4.1"}]}],"versions":["1.12.20-2ubuntu2","1.12.20-2ubuntu3","1.12.20-2ubuntu4"],"bundled":3}],"products":[{"vendor":"fedoraproject","product":"fedora"},{"vendor":"freedesktop","product":"dbus"}],"references":[{"url":"https://gitlab.freedesktop.org/dbus/dbus/-/issues/413","tags":["x_transferred","Exploit","Issue Tracking","Third Party Advisory","report","web"]},{"url":"https://www.openwall.com/lists/oss-security/2022/10/06/1","tags":["x_transferred","Mailing List","Patch","Third Party Advisory","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SQCSLMCK2XGX23R2DKW2MSAICQAK6MT2/","tags":["vendor-advisory","x_transferred","Mailing List","advisory","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/E4CO7N226I3X5FNBR2MACCH6TS764VJP/","tags":["vendor-advisory","x_transferred","Mailing List","advisory","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ND74SKN56BCYL3QLEAAB6E64UUBRA5UG/","tags":["vendor-advisory","x_transferred","Mailing List","advisory","web"]},{"url":"https://security.gentoo.org/glsa/202305-08","tags":["vendor-advisory","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-42011","tags":["web","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/E4CO7N226I3X5FNBR2MACCH6TS764VJP"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ND74SKN56BCYL3QLEAAB6E64UUBRA5UG"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SQCSLMCK2XGX23R2DKW2MSAICQAK6MT2"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/E4CO7N226I3X5FNBR2MACCH6TS764VJP"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ND74SKN56BCYL3QLEAAB6E64UUBRA5UG"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SQCSLMCK2XGX23R2DKW2MSAICQAK6MT2"},{"url":"https://github.com/advisories/GHSA-3g2p-5q22-h774"},{"url":"https://security.alpinelinux.org/vuln/CVE-2022-42011","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:0096","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-42010","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-42011","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-42012","tags":["report"]},{"url":"https://bugzilla.redhat.com/2133616","tags":["report"]},{"url":"https://bugzilla.redhat.com/2133617","tags":["report"]},{"url":"https://bugzilla.redhat.com/2133618","tags":["report"]},{"url":"https://errata.almalinux.org/8/ALSA-2023-0096.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:0335","tags":["advisory"]},{"url":"https://errata.almalinux.org/9/ALSA-2023-0335.html","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2022-42011","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/ubuntu16-els/CLSA-2022-1669241224","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/42xxx/CVE-2022-42011.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2022-42011","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2022-0365.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=30941","tags":["report"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-2000","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-42010","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-42012","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-2001","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-2051","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:8812","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2133616","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2133617","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2133618","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_8812.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-42010","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-42011","tags":["advisory","report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-42012","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:8977","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_8977.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_0096.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_0335.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2023:0096","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2023:0335","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20223804-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1087072","tags":["report"]},{"url":"https://bugzilla.suse.com/1204111","tags":["report"]},{"url":"https://bugzilla.suse.com/1204112","tags":["report"]},{"url":"https://bugzilla.suse.com/1204113","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2022-42010","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-42011","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-42012","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20223805-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20223806-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20224295-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2022-42011","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-5704-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2022-42010","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-42012","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2022-42011","description":"An issue was discovered in D-Bus before 1.12.24, 1.13.x and 1.14.x before 1.14.4, and 1.15.x before 1.15.2. An authenticated attacker can cause dbus-daemon and other programs that use libdbus to crash when receiving a message where an array length is inconsistent with the size of the element type.","status":"published","published":"2022-10-09T00:00:00Z","modified":"2025-06-09T15:05:41.494Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"adp"}],"cwes":["CWE-129"],"updated_at":"2026-11-02T14:34:27.640972Z"}],"euvd":[{"id":"EUVD-2022-45111","description":"An issue was discovered in D-Bus before 1.12.24, 1.13.x and 1.14.x before 1.14.4, and 1.15.x before 1.15.2. An authenticated attacker can cause dbus-daemon and other programs that use libdbus to crash when receiving a message where an array length is inconsistent with the size of the element type.","status":"published","published":"2022-10-09T00:00:00Z","modified":"2025-06-09T15:05:41Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T20:32:27.753525Z"}],"ghsa":[{"id":"GHSA-3g2p-5q22-h774","title":"An issue was discovered in D-Bus before 1.12.24, 1.13.x and 1.14.x before 1.14.4, and 1.15.x...","description":"An issue was discovered in D-Bus before 1.12.24, 1.13.x and 1.14.x before 1.14.4, and 1.15.x before 1.15.2. An authenticated attacker can cause dbus-daemon and other programs that use libdbus to crash when receiving a message where an array length is inconsistent with the size of the element type.","status":"published","published":"2022-10-10T19:00:18Z","modified":"2025-06-09T15:32:39Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-129"],"updated_at":"2026-11-02T15:02:37.765114Z"}],"nvd":[{"id":"CVE-2022-42011","description":"An issue was discovered in D-Bus before 1.12.24, 1.13.x and 1.14.x before 1.14.4, and 1.15.x before 1.15.2. An authenticated attacker can cause dbus-daemon and other programs that use libdbus to crash when receiving a message where an array length is inconsistent with the size of the element type.","status":"published","published":"2022-10-10T00:15:09.573Z","modified":"2026-06-17T05:04:14.323Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"},{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"secondary"}],"cwes":["CWE-129"],"updated_at":"2026-11-02T14:07:29.026521Z"}],"osv":[{"id":"ALPINE-CVE-2022-42011","description":"An issue was discovered in D-Bus before 1.12.24, 1.13.x and 1.14.x before 1.14.4, and 1.15.x before 1.15.2. An authenticated attacker can cause dbus-daemon and other programs that use libdbus to crash when receiving a message where an array length is inconsistent with the size of the element type.","status":"published","published":"2022-10-10T00:15:09.573Z","modified":"2026-11-03T07:18:33.739115062Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-03T07:50:38.973973Z"},{"id":"AZL-11092","title":"CVE-2022-42011 affecting package dbus for versions less than 1.15.2-2","description":"An issue was discovered in D-Bus before 1.12.24, 1.13.x and 1.14.x before 1.14.4, and 1.15.x before 1.15.2. An authenticated attacker can cause dbus-daemon and other programs that use libdbus to crash when receiving a message where an array length is inconsistent with the size of the element type.","status":"published","published":"2022-10-10T00:15:09Z","modified":"2026-04-21T04:21:48.328752Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:28:02.368326Z"},{"id":"BELL-CVE-2022-42011","title":"CVE-2022-42011 does not affect BellSoft software","status":"withdrawn","published":"2023-08-31T12:16:17.973056Z","modified":"2026-01-26T09:48:27.501455Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:28:17.151188Z"},{"id":"CVE-2022-42011","description":"An issue was discovered in D-Bus before 1.12.24, 1.13.x and 1.14.x before 1.14.4, and 1.15.x before 1.15.2. An authenticated attacker can cause dbus-daemon and other programs that use libdbus to crash when receiving a message where an array length is inconsistent with the size of the element type.","status":"published","published":"2022-10-09T00:00:00Z","modified":"2026-10-28T02:31:06.032503625Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:44:27.186787Z"},{"id":"DEBIAN-CVE-2022-42011","description":"An issue was discovered in D-Bus before 1.12.24, 1.13.x and 1.14.x before 1.14.4, and 1.15.x before 1.15.2. An authenticated attacker can cause dbus-daemon and other programs that use libdbus to crash when receiving a message where an array length is inconsistent with the size of the element type.","status":"published","published":"2022-10-10T00:15:09.573Z","modified":"2026-11-03T08:04:10.825755852Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-03T08:23:07.763774Z"},{"id":"JLSEC-2025-20","title":"An issue was discovered in D-Bus before 1.12.24, 1.13.x and 1.14.x before 1.14.4, and 1.15.x before...","description":"An issue was discovered in D-Bus before 1.12.24, 1.13.x and 1.14.x before 1.14.4, and 1.15.x before 1.15.2. An authenticated attacker can cause dbus-daemon and other programs that use libdbus to crash when receiving a message where an array length is inconsistent with the size of the element type.","status":"published","published":"2025-10-10T14:27:45.619Z","modified":"2026-07-23T22:30:18.513448335Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:47:17.805107Z"},{"id":"OESA-2022-2000","title":"dbus security update","description":"\r\n\r\nSecurity Fix(es):\r\n\r\nAn issue was discovered in D-Bus before 1.12.24, 1.13.x and 1.14.x before 1.14.4, and 1.15.x before 1.15.2. An authenticated attacker can cause dbus-daemon and other programs that use libdbus to crash when receiving a message with certain invalid type signatures.(CVE-2022-42010)\r\n\r\nAn issue was discovered in D-Bus before 1.12.24, 1.13.x and 1.14.x before 1.14.4, and 1.15.x before 1.15.2. An authenticated attacker can cause dbus-daemon and other programs that use libdbus to crash when receiving a message where an array length is inconsistent with the size of the element type.(CVE-2022-42011)\r\n\r\nAn issue was discovered in D-Bus before 1.12.24, 1.13.x and 1.14.x before 1.14.4, and 1.15.x before 1.15.2. An authenticated attacker can cause dbus-daemon and other programs that use libdbus to crash by sending a message with attached file descriptors in an unexpected format.(CVE-2022-42012)","status":"published","published":"2022-10-21T11:05:18Z","modified":"2026-08-18T01:17:20.210293464Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:39.528805Z"},{"id":"OESA-2022-2001","title":"dbus security update","description":"\r\n\r\nSecurity Fix(es):\r\n\r\nAn issue was discovered in D-Bus before 1.12.24, 1.13.x and 1.14.x before 1.14.4, and 1.15.x before 1.15.2. An authenticated attacker can cause dbus-daemon and other programs that use libdbus to crash when receiving a message with certain invalid type signatures.(CVE-2022-42010)\r\n\r\nAn issue was discovered in D-Bus before 1.12.24, 1.13.x and 1.14.x before 1.14.4, and 1.15.x before 1.15.2. An authenticated attacker can cause dbus-daemon and other programs that use libdbus to crash when receiving a message where an array length is inconsistent with the size of the element type.(CVE-2022-42011)\r\n\r\nAn issue was discovered in D-Bus before 1.12.24, 1.13.x and 1.14.x before 1.14.4, and 1.15.x before 1.15.2. An authenticated attacker can cause dbus-daemon and other programs that use libdbus to crash by sending a message with attached file descriptors in an unexpected format.(CVE-2022-42012)","status":"published","published":"2022-10-21T11:05:19Z","modified":"2026-08-18T01:17:21.39514006Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:39.934788Z"},{"id":"OESA-2022-2051","title":"dbus security update","description":"\r\n\r\nSecurity Fix(es):\r\n\r\nAn issue was discovered in D-Bus before 1.12.24, 1.13.x and 1.14.x before 1.14.4, and 1.15.x before 1.15.2. An authenticated attacker can cause dbus-daemon and other programs that use libdbus to crash when receiving a message with certain invalid type signatures.(CVE-2022-42010)\r\n\r\nAn issue was discovered in D-Bus before 1.12.24, 1.13.x and 1.14.x before 1.14.4, and 1.15.x before 1.15.2. An authenticated attacker can cause dbus-daemon and other programs that use libdbus to crash when receiving a message where an array length is inconsistent with the size of the element type.(CVE-2022-42011)\r\n\r\nAn issue was discovered in D-Bus before 1.12.24, 1.13.x and 1.14.x before 1.14.4, and 1.15.x before 1.15.2. An authenticated attacker can cause dbus-daemon and other programs that use libdbus to crash by sending a message with attached file descriptors in an unexpected format.(CVE-2022-42012)","status":"published","published":"2022-11-11T11:05:22Z","modified":"2026-08-18T01:17:21.003663298Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:39.934788Z"},{"id":"RHSA-2022:8812","title":"Red Hat Security Advisory: dbus security update","status":"published","published":"2024-09-16T09:40:59Z","modified":"2026-06-26T12:22:30.124624529Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:10.139266Z"},{"id":"RHSA-2022:8977","title":"Red Hat Security Advisory: dbus security update","status":"published","published":"2024-09-16T09:41:08Z","modified":"2026-06-26T12:22:10.742274264Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:10.139266Z"},{"id":"RHSA-2023:0096","title":"Red Hat Security Advisory: dbus security update","status":"published","published":"2024-09-16T09:41:16Z","modified":"2026-06-26T12:22:10.828047613Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:10.139266Z"},{"id":"RHSA-2023:0335","title":"Red Hat Security Advisory: dbus security update","status":"published","published":"2024-09-16T09:41:26Z","modified":"2026-06-26T12:22:30.056042385Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:10.611604Z"},{"id":"RLSA-2023:0096","title":"Moderate: dbus security update","description":"D-Bus is a system for sending messages between applications. It is used both for the system-wide message bus service, and as a per-user-login-session messaging facility.\n\nSecurity Fix(es):\n\n* dbus: dbus-daemon crashes when receiving message with incorrectly nested parentheses and curly brackets (CVE-2022-42010)\n\n* dbus: dbus-daemon can be crashed by messages with array length inconsistent with element type (CVE-2022-42011)\n\n* dbus: `_dbus_marshal_byteswap` doesn't process fds in messages with \"foreign\" endianness correctly (CVE-2022-42012)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2023-01-12T08:25:26Z","modified":"2026-02-04T19:00:07.24824Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:24.322216Z"},{"id":"RLSA-2023:0335","title":"Moderate: dbus security update","description":"D-Bus is a system for sending messages between applications. It is used both for the system-wide message bus service, and as a per-user-login-session messaging facility.\n\nSecurity Fix(es):\n\n* dbus: dbus-daemon crashes when receiving message with incorrectly nested parentheses and curly brackets (CVE-2022-42010)\n\n* dbus: dbus-daemon can be crashed by messages with array length inconsistent with element type (CVE-2022-42011)\n\n* dbus: `_dbus_marshal_byteswap` doesn't process fds in messages with \"foreign\" endianness correctly (CVE-2022-42012)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2023-01-23T14:30:24Z","modified":"2026-02-05T12:00:00.957627Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:24.322216Z"},{"id":"UBUNTU-CVE-2022-42011","description":"An issue was discovered in D-Bus before 1.12.24, 1.13.x and 1.14.x before 1.14.4, and 1.15.x before 1.15.2. An authenticated attacker can cause dbus-daemon and other programs that use libdbus to crash when receiving a message where an array length is inconsistent with the size of the element type.","status":"published","published":"2022-10-10T00:15:00Z","modified":"2026-04-22T13:28:11.771043Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"},{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T16:53:55.502114Z"},{"id":"ALSA-2023:0096","title":"Moderate: dbus security update","description":"D-Bus is a system for sending messages between applications. It is used both for the system-wide message bus service, and as a per-user-login-session messaging facility.\n\nSecurity Fix(es):\n\n* dbus: dbus-daemon crashes when receiving message with incorrectly nested parentheses and curly brackets (CVE-2022-42010)\n* dbus: dbus-daemon can be crashed by messages with array length inconsistent with element type (CVE-2022-42011)\n* dbus: `_dbus_marshal_byteswap` doesn't process fds in messages with \"foreign\" endianness correctly (CVE-2022-42012)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2023-01-12T00:00:00Z","modified":"2026-10-29T11:01:55.017469248Z","updated_at":"2026-11-02T15:27:51.655726Z"},{"id":"ALSA-2023:0335","title":"Moderate: dbus security update","description":"D-Bus is a system for sending messages between applications. It is used both for the system-wide message bus service, and as a per-user-login-session messaging facility.\n\nSecurity Fix(es):\n\n* dbus: dbus-daemon crashes when receiving message with incorrectly nested parentheses and curly brackets (CVE-2022-42010)\n* dbus: dbus-daemon can be crashed by messages with array length inconsistent with element type (CVE-2022-42011)\n* dbus: `_dbus_marshal_byteswap` doesn't process fds in messages with \"foreign\" endianness correctly (CVE-2022-42012)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2023-01-23T00:00:00Z","modified":"2026-10-29T11:31:22.159567046Z","updated_at":"2026-11-02T15:27:51.655726Z"},{"id":"CLSA-2022-1669241224","title":"Fix CVE(s): CVE-2022-42012, CVE-2022-42011, CVE-2022-42010, CVE-2020-35512","description":"\n   * SECURITY UPDATE: Use-after-free in access control-related hash tables\n     - debian/patches/CVE-2020-35512.patch: use reference counting for\n       DBusUserInfo and DBusGroupInfo structures.\n     - CVE-2020-35512\n   * SECURITY UPDATE: Crash or incorrect parsing a signature with wrongly\n     nested '()' and '{}'\n     - debian/patches/CVE-2022-42010.patch: add extra checking for brackets.\n     - CVE-2022-42010\n   * SECURITY UPDATE: Out-of-bounds accesses during processing of arrays\n     made up of an integer number of items\n     - debian/patches/CVE-2022-42011.patch: validate length of arrays of\n       fixed-length items.\n     - CVE-2022-42011\n   * SECURITY UPDATE: Crash when message type and the pointer into its\n     contents goes out of sync\n     - debian/patches/CVE-2022-42012.patch: byte-swap Unix fd indexes\n       if needed.\n     - CVE-2022-42012","status":"published","published":"2022-11-23T22:07:04Z","modified":"2026-06-04T10:04:06.590806344Z","updated_at":"2026-11-02T15:43:40.176048Z"},{"id":"DLA-3142-1","title":"dbus - security update","status":"published","published":"2022-10-10T00:00:00Z","modified":"2026-03-09T01:21:21.351807Z","updated_at":"2026-11-02T15:46:11.189256Z"},{"id":"DSA-5250-1","title":"dbus - security update","status":"published","published":"2022-10-06T00:00:00Z","modified":"2026-03-09T02:11:09.971103Z","updated_at":"2026-11-02T15:46:17.543497Z"},{"id":"MGASA-2022-0365","title":"Updated dbus packages fix security vulnerability","description":"A syntactically invalid type signature with incorrectly nested parentheses\nand curly brackets would cause an assertion failure in debug builds.\nSimilar messages could potentially result in a crash or incorrect message\nprocessing in a production build, although we are not aware of a practical\nexample. (CVE-2022-42010)\n\nAn invalid array of fixed-length elements where the length of the array is\nnot a multiple of the length of the element would cause an assertion\nfailure in debug builds or an out-of-bounds read in production builds.\n(CVE-2022-42011)\n\nA message in non-native endianness with out-of-band Unix file descriptors\nwould cause a use-after-free and possible memory corruption in production\nbuilds, or an assertion failure in debug builds. (CVE-2022-42012)\n","status":"published","published":"2022-10-08T20:22:22Z","modified":"2026-04-16T04:41:00.568157442Z","updated_at":"2026-11-02T15:49:42.263076Z"},{"id":"openSUSE-SU-2024:12448-1","title":"dbus-1-1.14.4-1.1 on GA media","description":"These are all security issues fixed in the dbus-1-1.14.4-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:43:05.479035Z","updated_at":"2026-11-02T16:58:35.751245Z"},{"id":"SUSE-SU-2022:3804-1","title":"Security update for dbus-1","description":"This update for dbus-1 fixes the following issues:\n\n  - CVE-2022-42010: Fixed potential crash that could be triggered by an invalid signature (bsc#1204111).\n  - CVE-2022-42011: Fixed an out of bounds read caused by a fixed length array (bsc#1204112).\n  - CVE-2022-42012: Fixed a use-after-free that could be trigged by a message in non-native endianness with out-of-band Unix file descriptor (bsc#1204113).\n\n  Bugfixes:\n\n  - Disable asserts (bsc#1087072).\n\n","status":"published","published":"2022-10-27T15:17:56Z","modified":"2025-05-02T04:33:41.00122Z","updated_at":"2026-11-02T15:53:51.440565Z"},{"id":"SUSE-SU-2022:3805-1","title":"Security update for dbus-1","description":"This update for dbus-1 fixes the following issues:\n\n  - CVE-2022-42010: Fixed potential crash that could be triggered by an invalid signature (bsc#1204111).\n  - CVE-2022-42011: Fixed an out of bounds read caused by a fixed length array (bsc#1204112).\n  - CVE-2022-42012: Fixed a use-after-free that could be trigged by a message in non-native endianness with out-of-band Unix file descriptor (bsc#1204113).\n\n  Bugfixes:\n\n  - Disable asserts (bsc#1087072).\n\n","status":"published","published":"2022-10-27T15:20:01Z","modified":"2026-02-04T03:33:37.836912Z","updated_at":"2026-11-02T15:53:51.440565Z"},{"id":"SUSE-SU-2022:3806-1","title":"Security update for dbus-1","description":"This update for dbus-1 fixes the following issues:\n\n  - CVE-2022-42010: Fixed potential crash that could be triggered by an invalid signature (bsc#1204111).\n  - CVE-2022-42011: Fixed an out of bounds read caused by a fixed length array (bsc#1204112).\n  - CVE-2022-42012: Fixed a use-after-free that could be trigged by a message in non-native endianness with out-of-band Unix file descriptor (bsc#1204113).\n\n  Bugfixes:\n\n  - Disable asserts (bsc#1087072).\n\n","status":"published","published":"2022-10-27T15:21:19Z","modified":"2026-02-04T02:15:54.756277Z","updated_at":"2026-11-02T15:53:51.440565Z"},{"id":"SUSE-SU-2022:4295-1","title":"Security update for dbus-1","description":"This update for dbus-1 fixes the following issues:\n\n- CVE-2022-42010: Fixed a potential crash that could be triggered by an invalid signature (bsc#1204111).\n- CVE-2022-42011: Fixed an out of bounds read caused by a fixed length array (bsc#1204112).\n- CVE-2022-42012: Fixed use-after-free and possible memory corruption via a message in non-native endianness with out-of-band Unix file descriptors (bsc#1204113).\n\n- Disable assertions to prevent unexpected DDoS attacks (bsc#1087072).\n","status":"published","published":"2022-11-29T15:02:24Z","modified":"2026-02-04T02:45:46.284469Z","updated_at":"2026-11-02T15:53:51.853735Z"},{"id":"USN-5704-1","title":"dbus vulnerabilities","description":"It was discovered that DBus incorrectly handled messages with invalid type\nsignatures. A local attacker could possibly use this issue to cause DBus to\ncrash, resulting in a denial of service. (CVE-2022-42010)\n\nIt was discovered that DBus was incorrectly validating the length of arrays of\nfixed-length items. A local attacker could possibly use this issue to cause\nDBus to crash, resulting in a denial of service. (CVE-2022-42011)\n\nIt was discovered that DBus incorrectly handled the body DBus message with\nattached file descriptors. A local attacker could possibly use this issue to\ncause DBus to crash, resulting in a denial of service. (CVE-2022-42012)\n","status":"published","published":"2022-10-27T13:00:09Z","modified":"2026-06-29T13:49:42.612872327Z","updated_at":"2026-11-02T16:58:16.20937Z"}]}}
