CVE-2020-12049
Fixed in a distro release EPSS <1%
An issue was discovered in dbus >= 1.3.0 before 1.12.18. The DBusServer in libdbus, as used in dbus-daemon, leaks file descriptors when a message exceeds the per-message file descriptor limit. A local attacker with access to the D-Bus system bus or another system service's private AF_UNIX socket could use this to make the system service reach its file descriptor limit, denying service to subsequent D-Bus clients.
Products: freedesktop dbus, canonical ubuntu_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Alpine 3.10 | dbus | 1.12.16-r1 |
| Alpine 3.11 | dbus | 1.12.16-r3 |
| Alpine 3.12 | dbus | 1.12.18-r0 |
| Alpine 3.13 | dbus | 1.12.18-r0 |
| Alpine 3.14 | dbus | 1.12.18-r0 |
| Alpine 3.15 | dbus | 1.12.18-r0 |
| Alpine 3.16 | dbus | 1.12.18-r0 |
| Alpine 3.17 | dbus | 1.12.18-r0 |
| Alpine 3.18 | dbus | 1.12.18-r0 |
| Alpine 3.19 | dbus | 1.12.18-r0 |
| Alpine 3.20 | dbus | 1.12.18-r0 |
| Alpine 3.21 | dbus | 1.12.18-r0 |
| Alpine 3.22 | dbus | 1.12.18-r0 |
| Alpine 3.23 | dbus | 1.12.18-r0 |
| Alpine 3.24 | dbus | 1.12.18-r0 |
| Alpine 3.9 | dbus | 1.12.28-r1 |
| Amazon Linux 2 | dbus | 1:1.10.24-7.amzn2.0.2 |
| Amazon Linux 2 | dbus-devel | 1:1.10.24-7.amzn2.0.2 |
| Amazon Linux 2 | dbus-doc | 1:1.10.24-7.amzn2.0.2 |
| Amazon Linux 2 | dbus-libs | 1:1.10.24-7.amzn2.0.2 |
| Amazon Linux 2 | dbus-tests | 1:1.10.24-7.amzn2.0.2 |
| Amazon Linux 2 | dbus-x11 | 1:1.10.24-7.amzn2.0.2 |
| Arch Linux | dbus | 1.12.18-1 |
| Debian 12 | dbus | 1.12.18-1 |
| Debian 13 | dbus | 1.12.18-1 |
| Debian 14 | dbus | 1.12.18-1 |
| Debian 8 | dbus | 1.8.22-0+deb8u3 |
| Red Hat Enterprise Linux 7 | dbus | 1:1.10.24-14.el7_8 |
| Red Hat Enterprise Linux 7 | dbus-debuginfo | 1:1.10.24-14.el7_8 |
| Red Hat Enterprise Linux 7 | dbus-devel | 1:1.10.24-14.el7_8 |
| Red Hat Enterprise Linux 7 | dbus-doc | 1:1.10.24-14.el7_8 |
| Red Hat Enterprise Linux 7 | dbus-libs | 1:1.10.24-14.el7_8 |
| Red Hat Enterprise Linux 7 | dbus-tests | 1:1.10.24-14.el7_8 |
| Red Hat Enterprise Linux 7 | dbus-x11 | 1:1.10.24-14.el7_8 |
| Red Hat Enterprise Linux 8 | dbus | 1:1.12.8-10.el8_2 |
| Red Hat Enterprise Linux 8 | dbus-common | 1:1.12.8-10.el8_2 |
| Red Hat Enterprise Linux 8 | dbus-daemon | 1:1.12.8-10.el8_2 |
| Red Hat Enterprise Linux 8 | dbus-daemon-debuginfo | 1:1.12.8-10.el8_2 |
| Red Hat Enterprise Linux 8 | dbus-debuginfo | 1:1.12.8-10.el8_2 |
| Red Hat Enterprise Linux 8 | dbus-debugsource | 1:1.12.8-10.el8_2 |
| Red Hat Enterprise Linux 8 | dbus-devel | 1:1.12.8-10.el8_2 |
| Red Hat Enterprise Linux 8 | dbus-libs | 1:1.12.8-10.el8_2 |
| Red Hat Enterprise Linux 8 | dbus-libs-debuginfo | 1:1.12.8-10.el8_2 |
| Red Hat Enterprise Linux 8 | dbus-tests-debuginfo | 1:1.12.8-10.el8_2 |
| Red Hat Enterprise Linux 8 | dbus-tools | 1:1.12.8-10.el8_2 |
| Red Hat Enterprise Linux 8 | dbus-tools-debuginfo | 1:1.12.8-10.el8_2 |
| Red Hat Enterprise Linux 8 | dbus-x11 | 1:1.12.8-10.el8_2 |
| Red Hat Enterprise Linux 8 | dbus-x11-debuginfo | 1:1.12.8-10.el8_2 |
| Red Hat rhel e4s 8.0 | dbus | 1:1.12.8-8.el8_0 |
| Red Hat rhel e4s 8.0 | dbus-common | 1:1.12.8-8.el8_0 |
| Red Hat rhel e4s 8.0 | dbus-daemon | 1:1.12.8-8.el8_0 |
| Red Hat rhel e4s 8.0 | dbus-daemon-debuginfo | 1:1.12.8-8.el8_0 |
| Red Hat rhel e4s 8.0 | dbus-debuginfo | 1:1.12.8-8.el8_0 |
| Red Hat rhel e4s 8.0 | dbus-debugsource | 1:1.12.8-8.el8_0 |
| Red Hat rhel e4s 8.0 | dbus-devel | 1:1.12.8-8.el8_0 |
| Red Hat rhel e4s 8.0 | dbus-libs | 1:1.12.8-8.el8_0 |
| Red Hat rhel e4s 8.0 | dbus-libs-debuginfo | 1:1.12.8-8.el8_0 |
| Red Hat rhel e4s 8.0 | dbus-tests-debuginfo | 1:1.12.8-8.el8_0 |
| Red Hat rhel e4s 8.0 | dbus-tools | 1:1.12.8-8.el8_0 |
| Red Hat rhel e4s 8.0 | dbus-tools-debuginfo | 1:1.12.8-8.el8_0 |
| Red Hat rhel e4s 8.0 | dbus-x11 | 1:1.12.8-8.el8_0 |
| Red Hat rhel e4s 8.0 | dbus-x11-debuginfo | 1:1.12.8-8.el8_0 |
| Red Hat rhel eus 8.1 | dbus | 1:1.12.8-10.el8_1 |
| Red Hat rhel eus 8.1 | dbus-common | 1:1.12.8-10.el8_1 |
| Red Hat rhel eus 8.1 | dbus-daemon | 1:1.12.8-10.el8_1 |
| Red Hat rhel eus 8.1 | dbus-daemon-debuginfo | 1:1.12.8-10.el8_1 |
| Red Hat rhel eus 8.1 | dbus-debuginfo | 1:1.12.8-10.el8_1 |
| Red Hat rhel eus 8.1 | dbus-debugsource | 1:1.12.8-10.el8_1 |
| Red Hat rhel eus 8.1 | dbus-devel | 1:1.12.8-10.el8_1 |
| Red Hat rhel eus 8.1 | dbus-libs | 1:1.12.8-10.el8_1 |
| Red Hat rhel eus 8.1 | dbus-libs-debuginfo | 1:1.12.8-10.el8_1 |
| Red Hat rhel eus 8.1 | dbus-tests-debuginfo | 1:1.12.8-10.el8_1 |
| Red Hat rhel eus 8.1 | dbus-tools | 1:1.12.8-10.el8_1 |
| Red Hat rhel eus 8.1 | dbus-tools-debuginfo | 1:1.12.8-10.el8_1 |
| Red Hat rhel eus 8.1 | dbus-x11 | 1:1.12.8-10.el8_1 |
| Red Hat rhel eus 8.1 | dbus-x11-debuginfo | 1:1.12.8-10.el8_1 |
| SUSE HPE Helion OpenStack 8 | dbus-1 | 1.8.22-29.21.1 |
| SUSE HPE Helion OpenStack 8 | dbus-1-x11 | 1.8.22-29.21.1 |
| SUSE Linux Enterprise High Performance Computing 15-ESPOS | dbus-1 | 1.12.2-3.16.1 |
| SUSE Linux Enterprise High Performance Computing 15-ESPOS | dbus-1-x11 | 1.12.2-3.16.1 |
| SUSE Linux Enterprise High Performance Computing 15-LTSS | dbus-1 | 1.12.2-3.16.1 |
| SUSE Linux Enterprise High Performance Computing 15-LTSS | dbus-1-x11 | 1.12.2-3.16.1 |
| SUSE Linux Enterprise Micro 5.0 | dbus-1 | 1.12.2-8.11.2 |
| SUSE Linux Enterprise Module for Basesystem 15 SP2 | dbus-1 | 1.12.2-8.11.2 |
| SUSE Linux Enterprise Module for Basesystem 15 SP2 | dbus-1-x11 | 1.12.2-8.11.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP3 | dbus-1 | 1.12.2-8.11.2 |
| SUSE Linux Enterprise Module for Basesystem 15 SP3 | dbus-1-x11 | 1.12.2-8.11.1 |
| SUSE Linux Enterprise Server 12 SP3-BCL | dbus-1 | 1.8.22-29.21.1 |
| SUSE Linux Enterprise Server 12 SP3-BCL | dbus-1-x11 | 1.8.22-29.21.1 |
| SUSE Linux Enterprise Server 12 SP3-LTSS | dbus-1 | 1.8.22-29.21.1 |
| SUSE Linux Enterprise Server 12 SP3-LTSS | dbus-1-x11 | 1.8.22-29.21.1 |
| SUSE Linux Enterprise Server 12 SP4-LTSS | dbus-1 | 1.8.22-29.21.1 |
| SUSE Linux Enterprise Server 12 SP4-LTSS | dbus-1-x11 | 1.8.22-29.21.1 |
| SUSE Linux Enterprise Server 12 SP5 | dbus-1 | 1.8.22-35.2 |
| SUSE Linux Enterprise Server 12 SP5 | dbus-1-x11 | 1.8.22-35.2 |
| SUSE Linux Enterprise Server 15-LTSS | dbus-1 | 1.12.2-3.16.1 |
| SUSE Linux Enterprise Server 15-LTSS | dbus-1-x11 | 1.12.2-3.16.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP3 | dbus-1 | 1.8.22-29.21.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP3 | dbus-1-x11 | 1.8.22-29.21.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP4 | dbus-1 | 1.8.22-29.21.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP4 | dbus-1-x11 | 1.8.22-29.21.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | dbus-1 | 1.8.22-35.2 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | dbus-1-x11 | 1.8.22-35.2 |
| SUSE Linux Enterprise Server for SAP Applications 15 | dbus-1 | 1.12.2-3.16.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 | dbus-1-x11 | 1.12.2-3.16.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP5 | dbus-1 | 1.8.22-35.2 |
| SUSE Linux Enterprise Software Development Kit 12 SP5 | dbus-1-x11 | 1.8.22-35.2 |
| SUSE OpenStack Cloud 8 | dbus-1 | 1.8.22-29.21.1 |
| SUSE OpenStack Cloud 8 | dbus-1-x11 | 1.8.22-29.21.1 |
| SUSE OpenStack Cloud 9 | dbus-1 | 1.8.22-29.21.1 |
| SUSE OpenStack Cloud 9 | dbus-1-x11 | 1.8.22-29.21.1 |
| SUSE OpenStack Cloud Crowbar 8 | dbus-1 | 1.8.22-29.21.1 |
| SUSE OpenStack Cloud Crowbar 8 | dbus-1-x11 | 1.8.22-29.21.1 |
| SUSE OpenStack Cloud Crowbar 9 | dbus-1 | 1.8.22-29.21.1 |
| SUSE OpenStack Cloud Crowbar 9 | dbus-1-x11 | 1.8.22-29.21.1 |
| Ubuntu 16.04 LTS | dbus | 1.10.6-1ubuntu3.6 |
| Ubuntu 18.04 LTS | dbus | 1.12.2-1ubuntu1.2 |
| Ubuntu 20.04 LTS | dbus | 1.12.16-2ubuntu2.1 |
| Ubuntu Pro 14.04 LTS | dbus | 1.6.18-0ubuntu4.5+esm2 |
| openSUSE Leap 15.2 | dbus-1 | 1.12.2-lp152.6.6.1 |
| openSUSE Leap 15.2 | dbus-1-x11 | 1.12.2-lp152.6.6.1 |
| openSUSE Leap 15.3 | dbus-1 | 1.12.2-8.11.2 |
| openSUSE Leap 15.3 | dbus-1-x11 | 1.12.2-8.11.1 |
| openSUSE Tumbleweed | dbus-1 | 1.12.20-5.5 |