cbcvebase.
CVE-2014-3639
published 2014-09-22

CVE-2014-3639: The dbus-daemon in D-Bus before 1.6.24 and 1.8.x before 1.8.8 does not properly close old connections, which allows local users to cause a denial of service…

low2.1CVSS 3.1
AVLACLAuNCNINAP
The dbus-daemon in D-Bus before 1.6.24 and 1.8.x before 1.8.8 does not properly close old connections, which allows local users to cause a denial of service (incomplete connection consumption and prevention of new connections) via a large number of incomplete connections.

Affected

23 ranges
VendorProductVersion rangeFixed in
d-bus_projectd-bus<= 1.6.22
debiandbus< dbus 1.8.8-1 (bookworm)dbus 1.8.8-1 (bookworm)
freedesktopdbus
freedesktopdbus
freedesktopdbus
freedesktopdbus
freedesktopdbus
freedesktopdbus
freedesktopdbus
freedesktopdbus
freedesktopdbus
freedesktopdbus
freedesktopdbus
freedesktopdbus
freedesktopdbus
freedesktopdbus
freedesktopdbus
freedesktopdbus>= 0 < 1.8.8-11.8.8-1
freedesktopdbus>= 0 < 1.8.8-11.8.8-1
freedesktopdbus>= 0 < 1.8.8-11.8.8-1
freedesktopdbus>= 0 < 1.8.8-11.8.8-1
freedesktopdbus>= 0 < 1.6.18-0ubuntu4.21.6.18-0ubuntu4.2
opensuseopensuse

CVSS provenance

nvd2.1LOWAV:L/AC:L/Au:N/C:N/I:N/A:P
osv4.4MEDIUM