First published: Mon Sep 22 2014(Updated: )
Off-by-one error in D-Bus 1.3.0 through 1.6.x before 1.6.24 and 1.8.x before 1.8.8, when running on a 64-bit system and the max_message_unix_fds limit is set to an odd number, allows local users to cause a denial of service (dbus-daemon crash) or possibly execute arbitrary code by sending one more file descriptor than the limit, which triggers a heap-based buffer overflow or an assertion failure.
Credit: secalert@redhat.com secalert@redhat.com
Affected Software | Affected Version | How to fix |
---|---|---|
D-bus Project D-bus | <=1.6.22 | |
Freedesktop Dbus | =1.6.0 | |
Freedesktop Dbus | =1.6.2 | |
Freedesktop Dbus | =1.6.4 | |
Freedesktop Dbus | =1.6.6 | |
Freedesktop Dbus | =1.6.8 | |
Freedesktop Dbus | =1.6.10 | |
Freedesktop Dbus | =1.6.12 | |
Freedesktop Dbus | =1.6.14 | |
Freedesktop Dbus | =1.6.16 | |
Freedesktop Dbus | =1.6.18 | |
Freedesktop Dbus | =1.6.20 | |
Freedesktop Dbus | =1.8.0 | |
Freedesktop Dbus | =1.8.2 | |
Freedesktop Dbus | =1.8.4 | |
Freedesktop Dbus | =1.8.6 | |
openSUSE openSUSE | =12.3 | |
D-bus Project D-bus | =1.6.0 | |
D-bus Project D-bus | =1.6.2 | |
D-bus Project D-bus | =1.6.4 | |
D-bus Project D-bus | =1.6.6 | |
D-bus Project D-bus | =1.6.8 | |
D-bus Project D-bus | =1.6.10 | |
D-bus Project D-bus | =1.6.12 | |
D-bus Project D-bus | =1.6.14 | |
D-bus Project D-bus | =1.6.16 | |
D-bus Project D-bus | =1.6.18 | |
D-bus Project D-bus | =1.6.20 | |
D-bus Project D-bus | =1.8.0 | |
D-bus Project D-bus | =1.8.2 | |
D-bus Project D-bus | =1.8.4 | |
D-bus Project D-bus | =1.8.6 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.