Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2008-3834
HistoryOct 07, 2008 - 9:01 p.m.

CVE-2008-3834

2008-10-0721:01:52
CWE-20
[email protected]
web.nvd.nist.gov
58
cve-2008-3834
dbus
d-bus library
libdbus
denial of service
nvd
remote attackers
assertion error

2.1 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:N/I:N/A:P

5.2 Medium

AI Score

Confidence

High

0.011 Low

EPSS

Percentile

84.7%

JSON

The dbus_signature_validate function in the D-bus library (libdbus) before 1.2.4 allows remote attackers to cause a denial of service (application abort) via a message containing a malformed signature, which triggers a failed assertion error.

Affected configurations

NVD
Node
freedesktopdbusRange≀1.1.4
OR
freedesktopdbusMatch0.1
OR
freedesktopdbusMatch0.2
OR
freedesktopdbusMatch0.3
OR
freedesktopdbusMatch0.4
OR
freedesktopdbusMatch0.5
OR
freedesktopdbusMatch0.6
OR
freedesktopdbusMatch0.7
OR
freedesktopdbusMatch0.8
OR
freedesktopdbusMatch0.9
OR
freedesktopdbusMatch0.10
OR
freedesktopdbusMatch0.11
OR
freedesktopdbusMatch0.12
OR
freedesktopdbusMatch0.13
OR
freedesktopdbusMatch0.20
OR
freedesktopdbusMatch0.21
OR
freedesktopdbusMatch0.22
OR
freedesktopdbusMatch0.23
OR
freedesktopdbusMatch0.23.1
OR
freedesktopdbusMatch0.23.2
OR
freedesktopdbusMatch0.23.3
OR
freedesktopdbusMatch0.31
OR
freedesktopdbusMatch0.32
OR
freedesktopdbusMatch0.33
OR
freedesktopdbusMatch0.34
OR
freedesktopdbusMatch0.35
OR
freedesktopdbusMatch0.35.1
OR
freedesktopdbusMatch0.35.2
OR
freedesktopdbusMatch0.36
OR
freedesktopdbusMatch0.36.1
OR
freedesktopdbusMatch0.36.2
OR
freedesktopdbusMatch0.50
OR
freedesktopdbusMatch0.61
OR
freedesktopdbusMatch0.62
OR
freedesktopdbusMatch0.90
OR
freedesktopdbusMatch0.91
OR
freedesktopdbusMatch0.92
OR
freedesktopdbusMatch1.0.2
OR
freedesktopdbusMatch1.1.1
OR
freedesktopdbusMatch1.1.2
OR
freedesktopdbus1.0Matchrc1
OR
freedesktopdbus1.0Matchrc2
OR
freedesktopdbus1.0Matchrc3
OR
freedesktopdbus1.1.0

References

Related

nessus 21
packetstorm 1
openvas 28
exploitpack 1
gentoo 1
seebug 4
debian 1
veracode 1
osv 1
nvd 2
centos 1
prion 2
redhat 1
fedora 1
cvelist 2
oraclelinux 2
ubuntucve 2
debiancve 2
exploitdb 1
ubuntu 1
cve 1
nessus
nessus
Debian DSA-1658-1 : dbus - programming error
2008-10-24 00:00:00
openSUSE 10 Security Update : dbus-1 (dbus-1-5683)
2008-10-17 00:00:00
Scientific Linux Security Update : dbus on SL5.x i386/x86_64
2012-08-01 00:00:00
packetstorm
packetstorm
D-Bus Daemon Denial Of Service
2009-01-20 00:00:00
openvas
openvas
CentOS Security Advisory CESA-2009:0008 (dbus)
2009-01-13 00:00:00
CentOS Security Advisory CESA-2009:0008 (dbus)
2009-01-13 00:00:00
SLES10: Security update for dbus
2009-10-13 00:00:00
exploitpack
exploitpack
D-Bus Daemon 1.2.4 - libdbus Denial of Service
2009-01-19 00:00:00
gentoo
gentoo
D-Bus: Denial of service
2009-01-11 00:00:00
seebug
seebug
D-Bus 'dbus_signature_validate()'η±»εž‹η­Ύεζ‹’η»ζœεŠ‘ζΌζ΄ž
2008-10-08 00:00:00
D-Bus Daemon < 1.2.4 - (libdbus) Denial of Service Exploit
2014-07-01 00:00:00
D-Bus dbus_signature_validate()η±»εž‹η­Ύεζ‹’η»ζœεŠ‘ζΌζ΄ž
2008-10-10 00:00:00
debian
debian
[SECURITY] [DSA 1658-1] New dbus packages fix denial of service
2008-10-22 19:50:25
veracode
veracode
Denial Of Service (DoS)
2020-04-10 00:30:36
osv
osv
dbus - denial of service
2008-10-22 00:00:00
nvd
nvd
CVE-2008-3834
2008-10-07 21:01:52
CVE-2009-1189
2009-04-27 18:00:00
centos
centos
dbus security update
2009-01-08 16:06:24
prion
prion
Design/Logic Flaw
2008-10-07 21:01:00
Design/Logic Flaw
2009-04-27 18:00:00
redhat
redhat
(RHSA-2009:0008) Moderate: dbus security update
2009-01-07 00:00:00
fedora
fedora
[SECURITY] Fedora 9 Update: dbus-1.2.4-1.fc9
2008-10-09 21:35:00
cvelist
cvelist
CVE-2008-3834
2008-10-07 19:00:00
CVE-2009-1189
2009-04-27 17:43:00
oraclelinux
oraclelinux
dbus security update
2009-01-07 00:00:00
dbus security update
2010-01-07 00:00:00
ubuntucve
ubuntucve
CVE-2008-3834
2008-10-07 00:00:00
CVE-2009-1189
2009-04-27 00:00:00
debiancve
debiancve
CVE-2008-3834
2008-10-07 21:01:52
CVE-2009-1189
2009-04-27 18:00:00
exploitdb
exploitdb
D-Bus Daemon &lt; 1.2.4 - &#039;libdbus&#039; Denial of Service
2009-01-19 00:00:00
ubuntu
ubuntu
D-Bus vulnerabilities
2008-10-14 00:00:00
cve
cve
CVE-2009-1189
2009-04-27 18:00:00

2.1 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:N/I:N/A:P

5.2 Medium

AI Score

Confidence

High

0.011 Low

EPSS

Percentile

84.7%

JSON
Related for CVE-2008-3834
nessus21packetstorm1openvas28exploitpack1gentoo1seebug4debian1veracode1osv1nvd2centos1prion2redhat1fedora1cvelist2oraclelinux2ubuntucve2debiancve2exploitdb1ubuntu1cve1