Every CVESearch/Get API key

CVE-2010-4352

Stack consumption vulnerability in D-Bus (aka DBus) before 1.4.1 allows local users to cause a...

2.1 LowFix available

CVE-2010-4352 is a low vulnerability (CVSS 2.1) in D-bus Project D-bus, published December 30, 2010. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.58%, the 48th percentile. Fixed in dbus 1.2.24-4.

What does this mean?
Severity
2.1 LowCVSS 2.0, NVD
Exploit chance
0.58%EPSS, 48th percentile
Exploitation
None knownNot on CISA’s or ENISA’s lists
Fixed in
1.2.24-4dbus +40 more

Description

Stack consumption vulnerability in D-Bus (aka DBus) before 1.4.1 allows local users to cause a denial of service (daemon crash) via a message containing many nested variants.

Exploit likelihood

0.58%Down 1.0 points since Feb 4, 2022
90%50%10%1%

Affected products

Affected packages

Affected packages
PackageAffectedFixed
dbus
Debian:12
before 1.2.24-4
1.2.24-4
dbus
Debian:13
before 1.2.24-4
1.2.24-4
dbus
Debian:14
before 1.2.24-4
1.2.24-4
dbus
Debian:5.0
before 1.2.1-5+lenny2, plus listed versions
1.2.1-51.2.1-5+lenny1
1.2.1-5+lenny2
dbus
Red Hat:enterprise_linux:5::client_workstation
before 0:1.1.2-15.el5_6
0:1.1.2-15.el5_6
dbus-debuginfo
Red Hat:enterprise_linux:5::client_workstation
before 0:1.1.2-15.el5_6
0:1.1.2-15.el5_6
dbus-devel
Red Hat:enterprise_linux:5::client_workstation
before 0:1.1.2-15.el5_6
0:1.1.2-15.el5_6
dbus
Red Hat:enterprise_linux:5::client
before 0:1.1.2-15.el5_6
0:1.1.2-15.el5_6
dbus-debuginfo
Red Hat:enterprise_linux:5::client
before 0:1.1.2-15.el5_6
0:1.1.2-15.el5_6
dbus-libs
Red Hat:enterprise_linux:5::client
before 0:1.1.2-15.el5_6
0:1.1.2-15.el5_6
Show 31 moreShow less
Affected packages
PackageAffectedFixed
dbus-x11
Red Hat:enterprise_linux:5::client
before 0:1.1.2-15.el5_6
0:1.1.2-15.el5_6
dbus
Red Hat:enterprise_linux:5::server
before 0:1.1.2-15.el5_6
0:1.1.2-15.el5_6
dbus-debuginfo
Red Hat:enterprise_linux:5::server
before 0:1.1.2-15.el5_6
0:1.1.2-15.el5_6
dbus-devel
Red Hat:enterprise_linux:5::server
before 0:1.1.2-15.el5_6
0:1.1.2-15.el5_6
dbus-libs
Red Hat:enterprise_linux:5::server
before 0:1.1.2-15.el5_6
0:1.1.2-15.el5_6
dbus-x11
Red Hat:enterprise_linux:5::server
before 0:1.1.2-15.el5_6
0:1.1.2-15.el5_6
dbus
Red Hat:enterprise_linux:6::client
before 1:1.2.24-4.el6_0
1:1.2.24-4.el6_0
dbus-debuginfo
Red Hat:enterprise_linux:6::client
before 1:1.2.24-4.el6_0
1:1.2.24-4.el6_0
dbus-devel
Red Hat:enterprise_linux:6::client
before 1:1.2.24-4.el6_0
1:1.2.24-4.el6_0
dbus-doc
Red Hat:enterprise_linux:6::client
before 1:1.2.24-4.el6_0
1:1.2.24-4.el6_0
dbus-libs
Red Hat:enterprise_linux:6::client
before 1:1.2.24-4.el6_0
1:1.2.24-4.el6_0
dbus-x11
Red Hat:enterprise_linux:6::client
before 1:1.2.24-4.el6_0
1:1.2.24-4.el6_0
dbus
Red Hat:enterprise_linux:6::computenode
before 1:1.2.24-4.el6_0
1:1.2.24-4.el6_0
dbus-debuginfo
Red Hat:enterprise_linux:6::computenode
before 1:1.2.24-4.el6_0
1:1.2.24-4.el6_0
dbus-devel
Red Hat:enterprise_linux:6::computenode
before 1:1.2.24-4.el6_0
1:1.2.24-4.el6_0
dbus-doc
Red Hat:enterprise_linux:6::computenode
before 1:1.2.24-4.el6_0
1:1.2.24-4.el6_0
dbus-libs
Red Hat:enterprise_linux:6::computenode
before 1:1.2.24-4.el6_0
1:1.2.24-4.el6_0
dbus-x11
Red Hat:enterprise_linux:6::computenode
before 1:1.2.24-4.el6_0
1:1.2.24-4.el6_0
dbus
Red Hat:enterprise_linux:6::server
before 1:1.2.24-4.el6_0
1:1.2.24-4.el6_0
dbus-doc
Red Hat:enterprise_linux:6::server
before 1:1.2.24-4.el6_0
1:1.2.24-4.el6_0
dbus-debuginfo
Red Hat:enterprise_linux:6::server
before 1:1.2.24-4.el6_0
1:1.2.24-4.el6_0
dbus-devel
Red Hat:enterprise_linux:6::server
before 1:1.2.24-4.el6_0
1:1.2.24-4.el6_0
dbus-libs
Red Hat:enterprise_linux:6::server
before 1:1.2.24-4.el6_0
1:1.2.24-4.el6_0
dbus-x11
Red Hat:enterprise_linux:6::server
before 1:1.2.24-4.el6_0
1:1.2.24-4.el6_0
dbus
Red Hat:enterprise_linux:6::workstation
before 1:1.2.24-4.el6_0
1:1.2.24-4.el6_0
dbus-doc
Red Hat:enterprise_linux:6::workstation
before 1:1.2.24-4.el6_0
1:1.2.24-4.el6_0
dbus-debuginfo
Red Hat:enterprise_linux:6::workstation
before 1:1.2.24-4.el6_0
1:1.2.24-4.el6_0
dbus-devel
Red Hat:enterprise_linux:6::workstation
before 1:1.2.24-4.el6_0
1:1.2.24-4.el6_0
dbus-libs
Red Hat:enterprise_linux:6::workstation
before 1:1.2.24-4.el6_0
1:1.2.24-4.el6_0
dbus-x11
Red Hat:enterprise_linux:6::workstation
before 1:1.2.24-4.el6_0
1:1.2.24-4.el6_0
dbus-1
openSUSE:Tumbleweed
From an advisory covering 14 CVEs
before 1.10.12-2.1
1.10.12-2.1

What each source reports

NVD Score used2.1

Stack consumption vulnerability in D-Bus (aka DBus) before 1.4.1 allows local users to cause a denial of service (daemon crash) via a message containing many nested variants.

Record
CVE-2010-4352
CVSS 2.0
2.1 LowAV:L/AC:L/Au:N/C:N/I:N/A:P
Weakness
CWE-399
Updated
2026-11-02
CVE ListNo score

Stack consumption vulnerability in D-Bus (aka DBus) before 1.4.1 allows local users to cause a denial of service (daemon crash) via a message containing many nested variants.

Record
CVE-2010-4352
Updated
2026-11-02
EUVDEUVD-2010-4321No score

Stack consumption vulnerability in D-Bus (aka DBus) before 1.4.1 allows local users to cause a denial of service (daemon crash) via a message containing many nested variants.

Record
EUVD-2010-4321
Updated
2026-11-03
GitHub AdvisoriesGHSA-47vh-r2fv-pgcxNo score

Stack consumption vulnerability in D-Bus (aka DBus) before 1.4.1 allows local users to cause a...

Stack consumption vulnerability in D-Bus (aka DBus) before 1.4.1 allows local users to cause a denial of service (daemon crash) via a message containing many nested variants.

Record
GHSA-47vh-r2fv-pgcx
Updated
2026-11-02
OSVNo score

Stack consumption vulnerability in D-Bus (aka DBus) before 1.4.1 allows local users to cause a denial of service (daemon crash) via a message containing many nested variants.

Record
CVE-2010-4352
Updated
2026-11-02
OSVDEBIAN-CVE-2010-4352No score

Stack consumption vulnerability in D-Bus (aka DBus) before 1.4.1 allows local users to cause a denial of service (daemon crash) via a message containing many nested variants.

Record
DEBIAN-CVE-2010-4352
Updated
2026-11-02
OSVopenSUSE-SU-2024:10517-1No score

dbus-1-1.10.12-2.1 on GA media

These are all security issues fixed in the dbus-1-1.10.12-2.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10517-1
Updated
2026-11-02

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

Show 38 moreShow less
PagesAll vulnerabilitiesBrowseDocsSourcesGuideGet API key
MoveEnter Open