CVE-2014-7824

CWE-39912 documents8 sources
Severity
2.1LOW
EPSS
0.1%
top 73.97%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
4
Canonical Ubuntu LinuxDebian Debian LinuxFreedesktop Dbus+1 more
Timeline
PublishedNov 18
Latest updateMay 17

Description

D-Bus 1.3.0 through 1.6.x before 1.6.26, 1.8.x before 1.8.10, and 1.9.x before 1.9.2 allows local users to cause a denial of service (prevention of new connections and connection drop) by queuing the maximum number of file descriptors. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-3636.1.

CVSS vector

AV:L/AC:L/C:N/I:N/A:PExploitability: 3.9 | Impact: 2.9

Affected Packages4 packages

▶Debiandbus< 1.8.10-1+3
▶Ubuntudbus< 1.6.18-0ubuntu4.3
▶NVDfreedesktop/dbus19 versions+18

Also affects: Debian Linux 7.0, 8.0, Ubuntu Linux 12.04, 14.04, 14.10

🔴Vulnerability Details

4
GHSA
GHSA-2vxr-xm37-7x29: D-Bus 1↗2022-05-17
▶
OSV
dbus vulnerability↗2014-11-27
▶
CVEList
CVE-2014-7824: D-Bus 1↗2014-11-18
▶
OSV
CVE-2014-7824: D-Bus 1↗2014-11-18
▶

📋Vendor Advisories

3
Ubuntu
DBus vulnerability↗2014-11-27
▶
Red Hat
dbus: local denial of service via incomplete fix for CVE-2014-3636↗2014-11-10
▶
Debian
CVE-2014-7824: dbus - D-Bus 1.3.0 through 1.6.x before 1.6.26, 1.8.x before 1.8.10, and 1.9.x before 1...↗2014
▶

💬Community

4
Bugzilla
CVE-2014-7824 dbus: local denial of service via incomplete fix for CVE-2014-3636 [fedora-all]↗2014-12-12
▶
Bugzilla
CVE-2014-7824 mingw-dbus: dbus: local denial of service via incomplete fix for CVE-2014-3636 [fedora-all]↗2014-12-12
▶
Bugzilla
CVE-2014-7824 dbus: local denial of service via incomplete fix for CVE-2014-3636↗2014-12-12
▶
Bugzilla
CVE-2014-7824 mingw-dbus: dbus: local denial of service via incomplete fix for CVE-2014-3636 [epel-7]↗2014-12-12
▶