USN-6372-1: DBus vulnerability
Published Sep 14, 2023
·Updated
It was discovered that DBus incorrectly handled certain invalid messages. A local attacker could possibly use this issue to cause DBus to crash, resulting in a denial of service.
Affected Software
4 affected componentsFixes available
All of the following
ubuntu/dbus<1.10.6-1ubuntu3.6+esm3
1.10.6-1ubuntu3.6+esm3
Ubuntu Ubuntu=16.04
All of the following
ubuntu/libdbus-1-3<1.10.6-1ubuntu3.6+esm3
1.10.6-1ubuntu3.6+esm3
Ubuntu Ubuntu=16.04
Event History
Sep 14, 2023
Advisory Published
via Ubuntu·12:00 AM
Frequently Asked Questions
1
What is the vulnerability ID for this DBus vulnerability?
The vulnerability ID for this DBus vulnerability is USN-6372-1.
2
What is the description of the DBus vulnerability?
DBus incorrectly handles certain invalid messages, which can allow a local attacker to cause a denial of service by crashing the DBus service.
3
What software is affected by this DBus vulnerability?
DBus version 1.10.6-1ubuntu3.6+esm3 and libdbus-1-3 version 1.10.6-1ubuntu3.6+esm3 on Ubuntu 16.04 are affected.
4
How can an attacker exploit this DBus vulnerability?
An attacker can exploit this vulnerability by sending certain invalid messages to the DBus service.
5
How can I fix the DBus vulnerability?
To fix the DBus vulnerability, update to version 1.10.6-1ubuntu3.6+esm3 or higher for DBus and libdbus-1-3.