Patchwire CVEs, their patch status, and feeds to follow them

CVE-2010-4352

Fixed in a distro release EPSS <1%

Stack consumption vulnerability in D-Bus (aka DBus) before 1.4.1 allows local users to cause a denial of service (daemon crash) via a message containing many nested variants.

Published 2010-12-30 · CVE record · OSV

Products: d-bus_project d-bus

Distro releases

ReleasePackageFixed in
Debian 12dbus1.2.24-4
Debian 13dbus1.2.24-4
Debian 14dbus1.2.24-4
Debian 5.0dbus1.2.1-5+lenny2
Red Hat Enterprise Linux 5dbus0:1.1.2-15.el5_6
Red Hat Enterprise Linux 5dbus-debuginfo0:1.1.2-15.el5_6
Red Hat Enterprise Linux 5dbus-devel0:1.1.2-15.el5_6
Red Hat Enterprise Linux 5dbus-libs0:1.1.2-15.el5_6
Red Hat Enterprise Linux 5dbus-x110:1.1.2-15.el5_6
Red Hat Enterprise Linux 6dbus1:1.2.24-4.el6_0
Red Hat Enterprise Linux 6dbus-debuginfo1:1.2.24-4.el6_0
Red Hat Enterprise Linux 6dbus-devel1:1.2.24-4.el6_0
Red Hat Enterprise Linux 6dbus-doc1:1.2.24-4.el6_0
Red Hat Enterprise Linux 6dbus-libs1:1.2.24-4.el6_0
Red Hat Enterprise Linux 6dbus-x111:1.2.24-4.el6_0
openSUSE Tumbleweeddbus-11.10.12-2.1