CVE-2011-2200
Fixed in a distro release EPSS <1%
The _dbus_header_byteswap function in dbus-marshal-header.c in D-Bus (aka DBus) 1.2.x before 1.2.28, 1.4.x before 1.4.12, and 1.5.x before 1.5.4 does not properly handle a non-native byte order, which allows local users to cause a denial of service (connection loss), obtain potentially sensitive information, or conduct unspecified state-modification attacks via crafted messages.
Products: freedesktop dbus, d-bus_project d-bus
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | dbus | 1.4.12-1 |
| Debian 13 | dbus | 1.4.12-1 |
| Debian 14 | dbus | 1.4.12-1 |
| Red Hat Enterprise Linux 5 | dbus | 0:1.1.2-16.el5_7 |
| Red Hat Enterprise Linux 5 | dbus-debuginfo | 0:1.1.2-16.el5_7 |
| Red Hat Enterprise Linux 5 | dbus-devel | 0:1.1.2-16.el5_7 |
| Red Hat Enterprise Linux 5 | dbus-libs | 0:1.1.2-16.el5_7 |
| Red Hat Enterprise Linux 5 | dbus-x11 | 0:1.1.2-16.el5_7 |
| Red Hat Enterprise Linux 6 | dbus | 1:1.2.24-5.el6_1 |
| Red Hat Enterprise Linux 6 | dbus-debuginfo | 1:1.2.24-5.el6_1 |
| Red Hat Enterprise Linux 6 | dbus-devel | 1:1.2.24-5.el6_1 |
| Red Hat Enterprise Linux 6 | dbus-doc | 1:1.2.24-5.el6_1 |
| Red Hat Enterprise Linux 6 | dbus-libs | 1:1.2.24-5.el6_1 |
| Red Hat Enterprise Linux 6 | dbus-x11 | 1:1.2.24-5.el6_1 |