CVE-2014-3533
Fixed in a distro release EPSS <1%
dbus 1.3.0 before 1.6.22 and 1.8.x before 1.8.6 allows local users to cause a denial of service (disconnect) via a certain sequence of crafted messages that cause the dbus-daemon to forward a message containing an invalid file descriptor.
Products: debian_linux, freedesktop dbus, mageia_project mageia, opensuse
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | dbus | 1.8.6-1 |
| Debian 13 | dbus | 1.8.6-1 |
| Debian 14 | dbus | 1.8.6-1 |
| Debian 7 | dbus | 1.6.8-1+deb7u3 |
| Ubuntu 14.04 LTS | dbus | 1.6.18-0ubuntu4.1 |
| openSUSE Tumbleweed | dbus-1 | 1.10.12-2.1 |