CVE-2014-3532

 

Published at: - 19-07-2014 09:55

Last modified: - 23-01-2023 07:44

Total changes: - 8

Description

dbus 1.3.0 before 1.6.22 and 1.8.x before 1.8.6, when running on Linux 2.6.37-rc4 or later, allows local users to cause a denial of service (system-bus disconnect of other services or applications) by sending a message containing a file descriptor, then exceeding the maximum recursion depth before the initial message is forwarded.

Common Vulnerability Scoring System (CVSS)

AV:L/AC:L/Au:N/C:N/I:N/A:P

 

Verification logic

 

Reference

• DSA-2971-Third Party Advisory
• https://bugs.freedesktop.org/show_bug.cgi?id=80163
• 59611-Third Party Advisory
• [oss-security] 20140702 CVE-2014-3532, -3533: two local DoS vulnerabilities in dbus-daemon-Mailing List, Third Party Advisory
• 59798-Third Party Advisory
• 60236-Third Party Advisory
• openSUSE-SU-2014:1239-Mailing List, Third Party Advisory
• MDVSA-2015:176-Third Party Advisory
• http://advisories.mageia.org/MGASA-2014-0294.html
• http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html

 

Keywords

NVD

 

CVE-2014-3532

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures