CVE-2008-3834
Fixed in a distro release EPSS 5%
The dbus_signature_validate function in the D-bus library (libdbus) before 1.2.4 allows remote attackers to cause a denial of service (application abort) via a message containing a malformed signature, which triggers a failed assertion error.
Products: freedesktop dbus, freedesktop dbus1.0, freedesktop dbus1.1.0
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | dbus | 1.2.1-4 |
| Debian 13 | dbus | 1.2.1-4 |
| Debian 14 | dbus | 1.2.1-4 |
| Debian 4.0 | dbus | 1.0.2-1+etch2 |
| Red Hat Enterprise Linux 5 | dbus | 0:1.0.0-7.el5_2.1 |
| Red Hat Enterprise Linux 5 | dbus-debuginfo | 0:1.0.0-7.el5_2.1 |
| Red Hat Enterprise Linux 5 | dbus-devel | 0:1.0.0-7.el5_2.1 |
| Red Hat Enterprise Linux 5 | dbus-x11 | 0:1.0.0-7.el5_2.1 |
| openSUSE Tumbleweed | dbus-1 | 1.12.20-5.5 |