Description dbus 1.3.0 before 1.6.22 and 1.8.x before 1.8.6, when running on Linux 2.6.37-rc4 or later, allows local users to cause a denial of service (system-bus disconnect of other services or applications) by sending a message containing a file descriptor, then exceeding the maximum recursion depth before the initial message is forwarded.
CVSS vector AV:L/AC:L/C:N/I:N/A:P Exploitability: 3.9 | Impact: 2.9 Complexity: Low
Confidentiality: None
Integrity: None
Affected Packages6 packages ▶ Ubuntu dbus < 1.6.18-0ubuntu4.1 Show 1 more packages Also affects: Debian Linux 7.0
🔴 Vulnerability Details4 GHSA GHSA-7x26-2rv5-r99f: dbus 1 ↗ 2022-05-13 ▶ OSV CVE-2014-3532: dbus 1 ↗ 2014-07-19 ▶ CVEList CVE-2014-3532: dbus 1 ↗ 2014-07-19 ▶ OSV dbus vulnerabilities ↗ 2014-07-08 ▶
📋 Vendor Advisories3 Ubuntu DBus vulnerabilities ↗ 2014-07-08 ▶ Red Hat dbus: denial of service in file descriptor passing feature ↗ 2014-07-02 ▶ Debian CVE-2014-3532: dbus - dbus 1.3.0 before 1.6.22 and 1.8.x before 1.8.6, when running on Linux 2.6.37-rc... ↗ 2014 ▶
💬 Community4 Bugzilla CVE-2014-3533 CVE-2014-3532 mingw-dbus: various flaws [fedora-all] ↗ 2014-07-02 ▶ Bugzilla CVE-2014-3533 CVE-2014-3532 dbus: various flaws [fedora-all] ↗ 2014-07-02 ▶ Bugzilla CVE-2014-3533 CVE-2014-3532 mingw-dbus: various flaws [epel-7] ↗ 2014-07-02 ▶ Bugzilla CVE-2014-3532 dbus: denial of service in file descriptor passing feature ↗ 2014-06-30 ▶