CVE-2010-4352
published 2010-12-30CVE-2010-4352: Stack consumption vulnerability in D-Bus (aka DBus) before 1.4.1 allows local users to cause a denial of service (daemon crash) via a message containing many…
PriorityP46low2.1CVSS 2.0
AVLACLAuNCNINAP
EPSS
0.58%
44.1th percentile
Stack consumption vulnerability in D-Bus (aka DBus) before 1.4.1 allows local users to cause a denial of service (daemon crash) via a message containing many nested variants.
Affected
6 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| d-bus_project | d-bus | <= 1.4.0 | — |
| debian | dbus | < dbus 1.2.24-4 (bookworm) | dbus 1.2.24-4 (bookworm) |
| freedesktop | dbus | >= 0 < 1.2.24-4 | 1.2.24-4 |
| freedesktop | dbus | >= 0 < 1.2.24-4 | 1.2.24-4 |
| freedesktop | dbus | >= 0 < 1.2.24-4 | 1.2.24-4 |
| freedesktop | dbus | >= 0 < 1.2.24-4 | 1.2.24-4 |
CVSS provenance
nvdv2.02.1LOWAV:L/AC:L/Au:N/C:N/I:N/A:P
osv2.1LOW
vendor_debian2.1LOW
vendor_redhat2.1LOW
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Ubuntu
D-Bus vulnerability
vendor_ubuntu·2011-01-18
CVE-2010-4352 D-Bus vulnerability
Title: D-Bus vulnerability
Summary: A local attacker could send crafted input to D-Bus and cause it to crash.
Remi Denis-Courmont discovered that D-Bus did not properly validate the
number of nested variants when validating D-Bus messages. A local attacker
could exploit this to cause a denial of service.
Instructions: After a standard system update you need to reboot your computer to make
all the necessary changes.
Red Hat
D-BUS: Stack overflow by validating message with excessive number of nested variants
vendor_redhat·2010-12-11·CVSS 2.1
CVE-2010-4352 [LOW] D-BUS: Stack overflow by validating message with excessive number of nested variants
D-BUS: Stack overflow by validating message with excessive number of nested variants
Stack consumption vulnerability in D-Bus (aka DBus) before 1.4.1 allows local users to cause a denial of service (daemon crash) via a message containing many nested variants.
Package: dbus (Red Hat Enterprise Linux 4) - Not affected
Debian
CVE-2010-4352: dbus - Stack consumption vulnerability in D-Bus (aka DBus) before 1.4.1 allows local us...
vendor_debian·2010·CVSS 2.1
CVE-2010-4352 [LOW] CVE-2010-4352: dbus - Stack consumption vulnerability in D-Bus (aka DBus) before 1.4.1 allows local us...
Stack consumption vulnerability in D-Bus (aka DBus) before 1.4.1 allows local users to cause a denial of service (daemon crash) via a message containing many nested variants.
Scope: local
bookworm: resolved (fixed in 1.2.24-4)
bullseye: resolved (fixed in 1.2.24-4)
forky: resolved (fixed in 1.2.24-4)
sid: resolved (fixed in 1.2.24-4)
trixie: resolved (fixed in 1.2.24-4)
GHSA
GHSA-47vh-r2fv-pgcx: Stack consumption vulnerability in D-Bus (aka DBus) before 1
ghsa_unreviewed·2022-05-17
CVE-2010-4352 [LOW] GHSA-47vh-r2fv-pgcx: Stack consumption vulnerability in D-Bus (aka DBus) before 1
Stack consumption vulnerability in D-Bus (aka DBus) before 1.4.1 allows local users to cause a denial of service (daemon crash) via a message containing many nested variants.
OSV
CVE-2010-4352: Stack consumption vulnerability in D-Bus (aka DBus) before 1
osv·2010-12-30·CVSS 2.1
CVE-2010-4352 [LOW] CVE-2010-4352: Stack consumption vulnerability in D-Bus (aka DBus) before 1
Stack consumption vulnerability in D-Bus (aka DBus) before 1.4.1 allows local users to cause a denial of service (daemon crash) via a message containing many nested variants.
No detection rules found.
No public exploits indexed.
http://cgit.freedesktop.org/dbus/dbus/commit/?id=7d65a3a6ed8815e34a99c680ac3869fde49dbbd4http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052550.htmlhttp://lists.opensuse.org/opensuse-security-announce/2011-02/msg00004.htmlhttp://lists.opensuse.org/opensuse-updates/2012-10/msg00094.htmlhttp://openwall.com/lists/oss-security/2010/12/16/3http://openwall.com/lists/oss-security/2010/12/16/6http://openwall.com/lists/oss-security/2010/12/21/3http://secunia.com/advisories/42580http://secunia.com/advisories/42760http://secunia.com/advisories/42911http://secunia.com/advisories/42960http://www.debian.org/security/2011/dsa-2149http://www.remlab.net/op/dbus-variant-recursion.shtmlhttp://www.securityfocus.com/bid/45377http://www.ubuntu.com/usn/USN-1044-1http://www.vupen.com/english/advisories/2010/3325http://www.vupen.com/english/advisories/2011/0161http://www.vupen.com/english/advisories/2011/0178http://www.vupen.com/english/advisories/2011/0464https://bugs.freedesktop.org/show_bug.cgi?id=32321https://bugzilla.redhat.com/show_bug.cgi?id=663673http://cgit.freedesktop.org/dbus/dbus/commit/?id=7d65a3a6ed8815e34a99c680ac3869fde49dbbd4http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052550.htmlhttp://lists.opensuse.org/opensuse-security-announce/2011-02/msg00004.htmlhttp://lists.opensuse.org/opensuse-updates/2012-10/msg00094.htmlhttp://openwall.com/lists/oss-security/2010/12/16/3http://openwall.com/lists/oss-security/2010/12/16/6http://openwall.com/lists/oss-security/2010/12/21/3http://secunia.com/advisories/42580http://secunia.com/advisories/42760http://secunia.com/advisories/42911http://secunia.com/advisories/42960http://www.debian.org/security/2011/dsa-2149http://www.remlab.net/op/dbus-variant-recursion.shtmlhttp://www.securityfocus.com/bid/45377http://www.ubuntu.com/usn/USN-1044-1http://www.vupen.com/english/advisories/2010/3325http://www.vupen.com/english/advisories/2011/0161http://www.vupen.com/english/advisories/2011/0178http://www.vupen.com/english/advisories/2011/0464https://bugs.freedesktop.org/show_bug.cgi?id=32321https://bugzilla.redhat.com/show_bug.cgi?id=663673
2010-12-30
Published