Lucene search

Gentoo FoundationGLSA-201110-14

HistoryOct 21, 2011 - 12:00 a.m.

D-Bus: Multiple vulnerabilities

2011-10-2100:00:00

Gentoo Foundation

security.gentoo.org

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

EPSS

Percentile

10.1%

JSON

Background

D-Bus is a message bus system, a simple way for applications to talk to each other.

Description

Multiple vulnerabilities have been discovered in D-Bus. Please review the CVE identifiers referenced below for details.

Impact

The vulnerabilities allow for local Denial of Service (daemon crash), or arbitrary file overwriting.

Workaround

There is no known workaround at this time.

Resolution

All D-Bus users should upgrade to the latest version:

 # emerge --sync
 # emerge --ask --oneshot --verbose "&gt;=sys-apps/dbus-1.4.12"

OSVersionArchitecturePackageVersionFilename
Gentooanyallsys-apps/dbus< 1.4.12UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Gentoo	any	all	sys-apps/dbus	< 1.4.12	UNKNOWN

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

EPSS

Percentile

10.1%

JSON

Related for GLSA-201110-14