CVE-2014-3639

Fixed in a distro release EPSS <1%

The dbus-daemon in D-Bus before 1.6.24 and 1.8.x before 1.8.8 does not properly close old connections, which allows local users to cause a denial of service (incomplete connection consumption and prevention of new connections) via a large number of incomplete connections.

Published 2014-09-22 · CVE record · OSV

Products: opensuse, d-bus_project d-bus, freedesktop dbus

Distro releases