CVE-2011-2200: Input Validation
It was found that D-BUS message bus service / messaging facility did not update the byte-order flag of the message properly by swapping the byte order of incoming messages into their native endiannes. A local, authenticated user could use this flaw to send a specially-crafted message to a system service (like Avahi or NetworkManager), using the system bus, potentially leading to disconnect of such a service from system bus (denial of service).
References: [1] http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=629938 [2] https://bugs.freedesktop.org/showbug.cgi?id=38120
Upstream patches: [3] http://cgit.freedesktop.org/dbus/dbus/commit/?h=dbus-1.2&id=6519a1f77c61d753d4c97efd6e15630eb275336e (in upstream v1.2.28 version)
[4] http://cgit.freedesktop.org/dbus/dbus/commit/?h=dbus-1.4&id=c3223ba6c401ba81df1305851312a47c485e6cd7 (in upstream v1.4.12 version)
Other sources
The dbusheaderbyteswap function in dbus-marshal-header.c in D-Bus (aka DBus) 1.2.x before 1.2.28, 1.4.x before 1.4.12, and 1.5.x before 1.5.4 does not properly handle a non-native byte order, which allows local users to cause a denial of service (connection loss), obtain potentially sensitive information, or conduct unspecified state-modification attacks via crafted messages.
— MITRE
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2011-2200?
CVE-2011-2200 has a high severity level as it can cause denial of service due to improper handling of non-native byte order.
How do I fix CVE-2011-2200?
To fix CVE-2011-2200, you should update D-Bus to version 1.2.28 or later for the 1.2.x series, 1.4.12 or later for the 1.4.x series, or 1.5.4 or later for the 1.5.x series.
What software versions are affected by CVE-2011-2200?
CVE-2011-2200 affects D-Bus versions prior to 1.2.28, 1.4.12, and 1.5.4.
Can CVE-2011-2200 be exploited remotely?
No, CVE-2011-2200 can only be exploited by local users.
What are the consequences of CVE-2011-2200?
The consequences of CVE-2011-2200 include denial of service, which may result in connection loss.