CVE-2014-3638
Fixed in a distro release EPSS <1%
The bus_connections_check_reply function in config-parser.c in D-Bus before 1.6.24 and 1.8.x before 1.8.8 allows local users to cause a denial of service (CPU consumption) via a large number of method calls.
Products: d-bus_project d-bus, freedesktop dbus, opensuse
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | dbus | 1.8.8-1 |
| Debian 13 | dbus | 1.8.8-1 |
| Debian 14 | dbus | 1.8.8-1 |
| Debian 6.0 | dbus | 1.2.24-4+squeeze3 |
| Debian 7 | dbus | 1.6.8-1+deb7u4 |
| Ubuntu 14.04 LTS | dbus | 1.6.18-0ubuntu4.2 |
| openSUSE Tumbleweed | dbus-1 | 1.10.12-2.1 |