Lucene search

PRIOn knowledge basePRION:CVE-2014-3637

HistorySep 22, 2014 - 3:55 p.m.

Design/Logic Flaw

2014-09-2215:55:00

PRIOn knowledge base

www.prio-n.com

6.5 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

D-Bus 1.3.0 through 1.6.x before 1.6.24 and 1.8.x before 1.8.8 does not properly close connections for processes that have terminated, which allows local users to cause a denial of service via a D-bus message containing a D-Bus connection file descriptor.

CPENameOperatorVersion
dbuseq1.6.4
dbuseq1.4.18
dbuseq1.6.0
dbuseq1.4.22
dbuseq1.5.6
dbuseq1.8.0
dbuseq1.5.8
dbuseq1.5.4
dbuseq1.5.10
dbuseq1.4.24

Name	Operator	Version
dbus	eq	1.6.4
dbus	eq	1.4.18
dbus	eq	1.6.0
dbus	eq	1.4.22
dbus	eq	1.5.6
dbus	eq	1.8.0
dbus	eq	1.5.8
dbus	eq	1.5.4
dbus	eq	1.5.10
dbus	eq	1.4.24

Rows per page:

1-10 of 401

References

advisories.mageia.org/MGASA-2014-0395.html

lists.opensuse.org/opensuse-updates/2014-09/msg00049.html

secunia.com/advisories/61378

www.debian.org/security/2014/dsa-3026

www.mandriva.com/security/advisories?name=MDVSA-2015:176

www.openwall.com/lists/oss-security/2014/09/16/9

www.openwall.com/lists/oss-security/2019/06/24/13

www.openwall.com/lists/oss-security/2019/06/24/14

www.securitytracker.com/id/1030864

www.ubuntu.com/usn/USN-2352-1

bugs.freedesktop.org/show_bug.cgi?id=80559