CVE-2015-0245
Fixed in a distro release EPSS <1%
D-Bus 1.4.x through 1.6.x before 1.6.30, 1.8.x before 1.8.16, and 1.9.x before 1.9.10 does not validate the source of ActivationFailure signals, which allows local users to cause a denial of service (activation failure error returned) by leveraging a race condition involving sending an ActivationFailure signal before systemd responds.
Products: freedesktop dbus, opensuse
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | dbus | 1.8.16-1 |
| Debian 13 | dbus | 1.8.16-1 |
| Debian 14 | dbus | 1.8.16-1 |
| Debian 7 | dbus | 1.6.8-1+deb7u6 |
| SUSE Linux Enterprise Desktop 12 | dbus-1 | 1.8.16-14.1 |
| SUSE Linux Enterprise Desktop 12 | dbus-1-x11 | 1.8.16-14.1 |
| SUSE Linux Enterprise Server 12 | dbus-1 | 1.8.16-14.1 |
| SUSE Linux Enterprise Server 12 | dbus-1-x11 | 1.8.16-14.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 | dbus-1 | 1.8.16-14.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 | dbus-1-x11 | 1.8.16-14.1 |
| SUSE Linux Enterprise Software Development Kit 12 | dbus-1 | 1.8.16-14.1 |
| SUSE Linux Enterprise Software Development Kit 12 | dbus-1-x11 | 1.8.16-14.1 |
| Ubuntu 14.04 LTS | dbus | 1.6.18-0ubuntu4.4 |
| Ubuntu 16.04 LTS | dbus | 1.10.6-1ubuntu3.1 |
| openSUSE Tumbleweed | dbus-1 | 1.10.12-2.1 |