CVE-2014-3639: Low severity opensuse vulnerability
The dbus-daemon in D-Bus before 1.6.24 and 1.8.x before 1.8.8 does not properly close old connections, which allows local users to cause a denial of service (incomplete connection consumption and prevention of new connections) via a large number of incomplete connections.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2014-3639?
CVE-2014-3639 is classified as a denial of service vulnerability which allows local users to disrupt service by exhausting connection resources.
How do I fix CVE-2014-3639?
To fix CVE-2014-3639, update D-Bus to version 1.6.24 or later, or 1.8.8 or later.
Who is affected by CVE-2014-3639?
CVE-2014-3639 affects systems running D-Bus versions prior to 1.6.24 and 1.8.8 across several distributions.
What kind of attack can be conducted using CVE-2014-3639?
An attacker can exploit CVE-2014-3639 by opening numerous incomplete connections, leading to a denial of service.
What software versions are vulnerable to CVE-2014-3639?
Vulnerable versions include D-Bus versions 1.6.22 and below, and 1.8.6 and below.