{"id":"CVE-2026-128987","aliases":["DEBIAN-CVE-2026-128987","EUVD-2026-125774","GHSA-4734-9v83-3gjc"],"status":"published","title":"Dbus: infinite cpu-spin loop in libdbus socket transport when epipe is received during write operations","description":"A flaw was found in dbus. A local attacker can exploit this vulnerability by connecting to an affected service, requesting a response, and stopping socket reads while keeping the connection open. Because the socket transport handles broken pipe write errors as retryable, the application enters a continuous retry loop. This can lead to excessive CPU consumption, resulting in a denial of service (DoS) for the target process.","severity":{"version":"3.1","score":6.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"cna","from":"cve"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-835"],"published":"2026-11-13T21:06:55Z","modified":"2026-11-13T22:00:06Z","affected":[{"source":"osv","ecosystem":"Debian:12","package":"dbus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.14.10-1","1.14.10-1~deb12u1","1.14.10-2","1.14.10-3","1.14.10-4","1.14.10-5","1.14.10-6","1.14.6-1","1.14.8-1","1.14.8-1+loong64","1.14.8-1~deb12u1","1.14.8-2","1.14.8-2~deb12u1","1.14.99~git20220715-1","1.15.0-1","1.15.10-1","1.15.12-1","1.15.2-1","1.15.4-1","1.15.6-1","1.15.6-2","1.15.8-1","1.15.8-2","1.15.8-3","1.15.8-4","1.15.90-1","1.15.92-1","1.16.0-1","1.16.2-1","1.16.2-2","1.16.2-3","1.16.2-4","1.16.2-5","1.16.2-6","1.16.2-7","1.16.2-8","1.16.4-1"]},{"source":"osv","ecosystem":"Debian:13","package":"dbus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.16.2-2","1.16.2-3","1.16.2-4","1.16.2-5","1.16.2-6","1.16.2-7","1.16.2-8","1.16.4-1"]},{"source":"osv","ecosystem":"Debian:14","package":"dbus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.16.2-2","1.16.2-3","1.16.2-4","1.16.2-5","1.16.2-6","1.16.2-7","1.16.2-8","1.16.4-1"]}],"products":[{"vendor":"red hat","product":"red hat enterprise linux 10"}],"references":[{"url":"https://access.redhat.com/security/cve/CVE-2026-128987","tags":["vdb-entry","x_refsource_REDHAT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2462869","tags":["issue-tracking","x_refsource_REDHAT"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-128987"},{"url":"https://github.com/advisories/GHSA-4734-9v83-3gjc"},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-128987","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2026-128987","title":"Dbus: infinite cpu-spin loop in libdbus socket transport when epipe is received during write operations","description":"A flaw was found in dbus. A local attacker can exploit this vulnerability by connecting to an affected service, requesting a response, and stopping socket reads while keeping the connection open. Because the socket transport handles broken pipe write errors as retryable, the application enters a continuous retry loop. This can lead to excessive CPU consumption, resulting in a denial of service (DoS) for the target process.","status":"published","published":"2026-11-13T21:06:55.82Z","modified":"2026-11-13T21:06:55.82Z","cvss":[{"version":"3.1","score":6.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"cna"}],"cwes":["CWE-835"],"updated_at":"2026-11-13T22:36:58.333409Z"}],"euvd":[{"id":"EUVD-2026-125774","description":"A flaw was found in dbus. A local attacker can exploit this vulnerability by connecting to an affected service, requesting a response, and stopping socket reads while keeping the connection open. Because the socket transport handles broken pipe write errors as retryable, the application enters a continuous retry loop. This can lead to excessive CPU consumption, resulting in a denial of service (DoS) for the target process.","status":"published","published":"2026-11-13T21:06:55Z","modified":"2026-11-13T21:06:55Z","cvss":[{"version":"3.1","score":6.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-13T23:41:01.805585Z"}],"ghsa":[{"id":"GHSA-4734-9v83-3gjc","title":"A flaw was found in dbus. A local attacker can exploit this vulnerability by connecting to an...","description":"A flaw was found in dbus. A local attacker can exploit this vulnerability by connecting to an affected service, requesting a response, and stopping socket reads while keeping the connection open. Because the socket transport handles broken pipe write errors as retryable, the application enters a continuous retry loop. This can lead to excessive CPU consumption, resulting in a denial of service (DoS) for the target process.","status":"published","published":"2026-11-13T21:32:01Z","modified":"2026-11-13T21:32:08Z","cvss":[{"version":"3.1","score":6.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-835"],"updated_at":"2026-11-13T21:53:56.324277Z"}],"nvd":[{"id":"CVE-2026-128987","description":"A flaw was found in dbus. A local attacker can exploit this vulnerability by connecting to an affected service, requesting a response, and stopping socket reads while keeping the connection open. Because the socket transport handles broken pipe write errors as retryable, the application enters a continuous retry loop. This can lead to excessive CPU consumption, resulting in a denial of service (DoS) for the target process.","status":"published","published":"2026-11-13T21:17:45.977Z","modified":"2026-11-13T21:17:46.09Z","cvss":[{"version":"3.1","score":6.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"}],"cwes":["CWE-835"],"updated_at":"2026-11-13T23:38:08.103555Z"}],"osv":[{"id":"DEBIAN-CVE-2026-128987","status":"published","published":"2026-11-13T21:17:45.977Z","modified":"2026-11-14T02:00:08.362061236Z","cvss":[{"version":"3.1","score":6.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-14T02:08:24.139305Z"}]}}