CVE-2014-3533: Input Validation
Published Jul 19, 2014
·Updated
dbus 1.3.0 before 1.6.22 and 1.8.x before 1.8.6 allows local users to cause a denial of service (disconnect) via a certain sequence of crafted messages that cause the dbus-daemon to forward a message containing an invalid file descriptor.
Affected Software
72 affected components
Debian Debian Linux=7.0
Freedesktop dbus=1.3.0
Freedesktop dbus=1.3.1
Freedesktop dbus=1.4.0
Freedesktop dbus=1.4.1
Freedesktop dbus=1.4.4
Freedesktop dbus=1.4.6
Freedesktop dbus=1.4.8
Freedesktop dbus=1.4.10
Freedesktop dbus=1.4.12
Freedesktop dbus=1.4.14
Freedesktop dbus=1.4.16
Freedesktop dbus=1.4.18
Freedesktop dbus=1.4.20
Freedesktop dbus=1.4.22
Freedesktop dbus=1.4.24
Freedesktop dbus=1.4.26
Freedesktop dbus=1.5.0
Freedesktop dbus=1.5.2
Freedesktop dbus=1.5.4
Freedesktop dbus=1.5.6
Freedesktop dbus=1.5.8
Freedesktop dbus=1.5.10
Freedesktop dbus=1.5.12
Freedesktop dbus=1.6.0
Freedesktop dbus=1.6.2
Freedesktop dbus=1.6.10
Freedesktop dbus=1.6.12
Freedesktop dbus=1.6.14
Freedesktop dbus=1.6.16
Freedesktop dbus=1.6.18
Freedesktop dbus=1.6.20
Freedesktop dbus=1.8.0
Freedesktop dbus=1.8.2
Freedesktop dbus=1.8.4
Mageia Project Mageia=3
Mageia Project Mageia=4
openSUSE openSUSE=12.3
D-bus Project D-bus=1.3.0
D-bus Project D-bus=1.3.1
D-bus Project D-bus=1.4.0
D-bus Project D-bus=1.4.1
D-bus Project D-bus=1.4.4
D-bus Project D-bus=1.4.6
D-bus Project D-bus=1.4.8
D-bus Project D-bus=1.4.10
D-bus Project D-bus=1.4.12
D-bus Project D-bus=1.4.14
D-bus Project D-bus=1.4.16
D-bus Project D-bus=1.4.18
D-bus Project D-bus=1.4.20
D-bus Project D-bus=1.4.22
D-bus Project D-bus=1.4.24
D-bus Project D-bus=1.4.26
D-bus Project D-bus=1.5.0
D-bus Project D-bus=1.5.2
D-bus Project D-bus=1.5.4
D-bus Project D-bus=1.5.6
D-bus Project D-bus=1.5.8
D-bus Project D-bus=1.5.10
D-bus Project D-bus=1.5.12
D-bus Project D-bus=1.6.0
D-bus Project D-bus=1.6.2
D-bus Project D-bus=1.6.10
D-bus Project D-bus=1.6.12
D-bus Project D-bus=1.6.14
D-bus Project D-bus=1.6.16
D-bus Project D-bus=1.6.18
D-bus Project D-bus=1.6.20
D-bus Project D-bus=1.8.0
D-bus Project D-bus=1.8.2
D-bus Project D-bus=1.8.4
Event History
Jul 19, 2014
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2014-3533?
CVE-2014-3533 is classified as a denial of service vulnerability.
2
How do I fix CVE-2014-3533?
To fix CVE-2014-3533, update your D-Bus software to version 1.6.22 or later.
3
Who is affected by CVE-2014-3533?
CVE-2014-3533 affects local users of D-Bus versions before 1.6.22 and 1.8.x before 1.8.6.
4
What impact does CVE-2014-3533 have?
The impact of CVE-2014-3533 is that it can cause the D-Bus daemon to crash and disconnect users.
5
Is CVE-2014-3533 exploitable remotely?
CVE-2014-3533 is not remotely exploitable as it requires local user access.