CVE-2014-3635: Buffer Overflow
Off-by-one error in D-Bus 1.3.0 through 1.6.x before 1.6.24 and 1.8.x before 1.8.8, when running on a 64-bit system and the maxmessageunixfds limit is set to an odd number, allows local users to cause a denial of service (dbus-daemon crash) or possibly execute arbitrary code by sending one more file descriptor than the limit, which triggers a heap-based buffer overflow or an assertion failure.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2014-3635?
CVE-2014-3635 is classified as a high-severity vulnerability due to its potential to cause a denial of service and execute arbitrary code.
How do I fix CVE-2014-3635?
To fix CVE-2014-3635, you should update D-Bus to version 1.6.24 or later if using the 1.6.x series or to version 1.8.8 or later if using the 1.8.x series.
Who is affected by CVE-2014-3635?
CVE-2014-3635 affects local users on systems running vulnerable versions of D-Bus, specifically 1.3.0 through 1.6.x prior to 1.6.24 and 1.8.x prior to 1.8.8.
What is the nature of the flaw in CVE-2014-3635?
The flaw in CVE-2014-3635 is an off-by-one error that can lead to a crash of the dbus-daemon or potentially allow arbitrary code execution.
Can CVE-2014-3635 lead to remote exploitation?
CVE-2014-3635 is a local vulnerability, meaning it cannot be exploited remotely and requires local access to the vulnerable systems.