Freedesktop Libdbus vulnerabilities

1 known vulnerability affecting freedesktop/libdbus.

Total CVEs

1

CISA KEV

0

Public exploits

1

Exploited in wild

0

Severity breakdown

MEDIUM1

Vulnerabilities

Page 1 of 1

CVE-2012-3524MEDIUMCVSS 6.9PoC≤ 1.5.12v1.5.0+5 more2012-09-18

CVE-2012-3524 [MEDIUM] CWE-264 CVE-2012-3524: libdbus 1.5.x and earlier, when used in setuid or other privileged programs in X.org and possibly ot libdbus 1.5.x and earlier, when used in setuid or other privileged programs in X.org and possibly other products, allows local users to gain privileges and execute arbitrary code via the DBUS_SYSTEM_BUS_ADDRESS environment variable. NOTE: libdbus maintainers state that this is a vulnerability in the applications that do not cleanse environment variabl