Freedesktop Dbus vulnerabilities

• freedesktop dbus, debian linux, fedoraproject fedora +3 more +5 more D-Bus before 1.15.6 sometimes allows unprivileged users to crash dbus-daemon. If a privileged... CVE-2023-34969 Fix available 6.5 MediumJune 8, 2023
• freedesktop dbus, fedoraproject fedora +1 more An issue was discovered in D-Bus before 1.12.24, 1.13.x and 1.14.x before 1.14.4, and 1.15.x... CVE-2022-42012 Fix available 6.5 MediumOctober 6, 2022
• freedesktop dbus, fedoraproject fedora +1 more An issue was discovered in D-Bus before 1.12.24, 1.13.x and 1.14.x before 1.14.4, and 1.15.x... CVE-2022-42011 Fix available 6.5 MediumOctober 6, 2022
• freedesktop dbus, fedoraproject fedora +1 more An issue was discovered in D-Bus before 1.12.24, 1.13.x and 1.14.x before 1.14.4, and 1.15.x... CVE-2022-42010 Fix available 6.5 MediumOctober 6, 2022
• freedesktop dbus A use-after-free flaw was found in D-Bus 1.12.20 when a system has multiple usernames sharing the... CVE-2020-35512 Fix available 7.8 HighFebruary 15, 2021
• freedesktop dbus, canonical ubuntu linux +1 more CVE-2020-12049 does not affect BellSoft software CVE-2020-12049 Fix available 5.5 MediumJune 5, 2020
• freedesktop dbus, canonical ubuntu linux +1 more dbus before 1.10.28, 1.12.x before 1.12.16, and 1.13.x before 1.13.12, as used in DBusServer in... CVE-2019-12749 Fix available 7.1 HighJune 11, 2019
• freedesktop dbus, opensuse +1 more D-Bus 1.4.x through 1.6.x before 1.6.30, 1.8.x before 1.8.16, and 1.9.x before 1.9.10 does not... CVE-2015-0245 Fix available 1.9 LowFebruary 11, 2015
• canonical ubuntu linux, debian linux, freedesktop dbus +1 more +3 more D-Bus 1.3.0 through 1.6.x before 1.6.26, 1.8.x before 1.8.10, and 1.9.x before 1.9.2 allows local... CVE-2014-7824 Fix available 2.1 LowNovember 15, 2014
• d-bus project d-bus, freedesktop dbus, opensuse +2 more The dbus-daemon in D-Bus before 1.6.24 and 1.8.x before 1.8.8 does not properly close old... CVE-2014-3639 Fix available 2.1 LowSeptember 16, 2014
• d-bus project d-bus, freedesktop dbus, opensuse +2 more The bus_connections_check_reply function in config-parser.c in D-Bus before 1.6.24 and 1.8.x... CVE-2014-3638 Fix available 2.1 LowSeptember 16, 2014
• freedesktop dbus, opensuse +1 more D-Bus 1.3.0 through 1.6.x before 1.6.24 and 1.8.x before 1.8.8 does not properly close... CVE-2014-3637 Fix available 2.1 LowSeptember 16, 2014
• d-bus project d-bus, freedesktop dbus, opensuse +2 more D-Bus 1.3.0 through 1.6.x before 1.6.24 and 1.8.x before 1.8.8 allows local users to (1) cause a... CVE-2014-3636 Fix available 1.9 LowSeptember 16, 2014
• d-bus project d-bus, freedesktop dbus, opensuse +2 more Off-by-one error in D-Bus 1.3.0 through 1.6.x before 1.6.24 and 1.8.x before 1.8.8, when running... CVE-2014-3635 Fix available 4.4 MediumSeptember 16, 2014
• freedesktop dbus, debian linux, mageia project mageia +1 more +3 more dbus 1.3.0 before 1.6.22 and 1.8.x before 1.8.6 allows local users to cause a denial of service ... CVE-2014-3533 Fix available 2.1 LowJuly 2, 2014
• debian linux, freedesktop dbus, mageia +2 more +4 more dbus 1.3.0 before 1.6.22 and 1.8.x before 1.8.6, when running on Linux 2.6.37-rc4 or later,... CVE-2014-3532 Fix available 2.1 LowJuly 2, 2014
• d-bus project d-bus, freedesktop dbus +1 more The dbus-daemon in D-Bus 1.2.x through 1.4.x, 1.6.x before 1.6.20, and 1.8.x before 1.8.4, sends... CVE-2014-3477 Fix available 2.1 LowJune 18, 2014
• freedesktop dbus, opensuse +1 more The _dbus_printf_string_upper_bound function in dbus/dbus-sysdeps-unix.c in D-Bus (aka DBus) 1.4... CVE-2013-2168 Fix available 1.9 LowJune 13, 2013
• freedesktop dbus-glib The dbus_g_proxy_manager_filter function in dbus-gproxy in Dbus-glib before 0.100.1 does not... CVE-2013-0292 Public exploitFix available 7.2 HighMarch 4, 2013
• freedesktop libdbus libdbus 1.5.x and earlier, when used in setuid or other privileged programs in X.org and possibly... CVE-2012-3524 Public exploitFix available 6.9 MediumSeptember 18, 2012
• freedesktop dbus The configure script in D-Bus (aka DBus) 1.2.x before 1.2.28 allows local users to overwrite... CVE-2011-2533 Fix available 3.3 LowJune 22, 2011
• d-bus project d-bus, freedesktop dbus +1 more The _dbus_header_byteswap function in dbus-marshal-header.c in D-Bus (aka DBus) 1.2.x before 1.2... CVE-2011-2200 Fix available 4.6 MediumJune 22, 2011
• freedesktop dbus-glib DBus-GLib 0.73 disregards the access flag of exported GObject properties, which allows local... CVE-2010-1172 Fix available 3.6 LowAugust 20, 2010
• freedesktop dbus The _dbus_validate_signature_with_reason function (dbus-marshal-validate.c) in D-Bus (aka DBus)... CVE-2009-1189 Fix available 3.6 LowApril 27, 2009
• freedesktop dbus The default configuration of system.conf in D-Bus (aka DBus) before 1.2.6 omits the send_type... CVE-2008-4311 Fix available 4.6 MediumDecember 10, 2008
• freedesktop dbus, dbus1.0, dbus1.1.0 +2 more The dbus_signature_validate function in the D-bus library (libdbus) before 1.2.4 allows remote... CVE-2008-3834 Public exploitFix available 2.1 LowOctober 7, 2008
• freedesktop dbus, fedoraproject fedora, mandrakesoft mandrake linux +1 more +3 more dbus-daemon in D-Bus before 1.0.3, and 1.1.x before 1.1.20, recognizes send_interface attributes... CVE-2008-0595 Fix available 4.6 MediumFebruary 29, 2008