CVE-2014-3638: Low severity dbus vulnerability
Published Sep 22, 2014
·Updated
The busconnectionscheckreply function in config-parser.c in D-Bus before 1.6.24 and 1.8.x before 1.8.8 allows local users to cause a denial of service (CPU consumption) via a large number of method calls.
Affected Software
32 affected components
D-bus Project D-bus<=1.6.22
Freedesktop dbus=1.6.0
Freedesktop dbus=1.6.2
Freedesktop dbus=1.6.4
Freedesktop dbus=1.6.6
Freedesktop dbus=1.6.8
Freedesktop dbus=1.6.10
Freedesktop dbus=1.6.12
Freedesktop dbus=1.6.14
Freedesktop dbus=1.6.16
Freedesktop dbus=1.6.18
Freedesktop dbus=1.6.20
Freedesktop dbus=1.8.0
Freedesktop dbus=1.8.2
Freedesktop dbus=1.8.4
Freedesktop dbus=1.8.6
openSUSE openSUSE=12.3
D-bus Project D-bus=1.6.0
D-bus Project D-bus=1.6.2
D-bus Project D-bus=1.6.4
D-bus Project D-bus=1.6.6
D-bus Project D-bus=1.6.8
D-bus Project D-bus=1.6.10
D-bus Project D-bus=1.6.12
D-bus Project D-bus=1.6.14
D-bus Project D-bus=1.6.16
D-bus Project D-bus=1.6.18
D-bus Project D-bus=1.6.20
D-bus Project D-bus=1.8.0
D-bus Project D-bus=1.8.2
D-bus Project D-bus=1.8.4
D-bus Project D-bus=1.8.6
Remediation
Patch Available
Event History
Sep 22, 2014
CVE Published
via MITRE·03:00 PM
Data Sourced
via MITRE·03:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2014-3638?
CVE-2014-3638 has a severity rating that indicates it may cause a denial of service due to excessive CPU consumption.
2
How do I fix CVE-2014-3638?
To fix CVE-2014-3638, update D-Bus to version 1.6.24 or later, or 1.8.8 or later.
3
What versions of D-Bus are affected by CVE-2014-3638?
CVE-2014-3638 affects D-Bus versions prior to 1.6.24 and 1.8.x prior to 1.8.8.
4
Can CVE-2014-3638 be exploited remotely?
CVE-2014-3638 is a local vulnerability and cannot be exploited remotely.
5
What impact does CVE-2014-3638 have on systems?
The impact of CVE-2014-3638 includes potential denial of service due to increased CPU consumption from method calls.