CVE-2014-3532
Low
Description
dbus 1.3.0 before 1.6.22 and 1.8.x before 1.8.6, when running on Linux 2.6.37-rc4 or later, allows local users to cause a denial of service (system-bus disconnect of other services or applications) by sending a message containing a file descriptor, then exceeding the maximum recursion depth before the initial message is forwarded.
SeverityLow
CVSS2.1
Exploit probability—
Product
Freedesktop Dbus
PublishedJul 19, 2014
First seenJul 19, 2014
How to fix
Update
- freedesktop dbus1.6.22, 1.8.6 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| freedesktop dbus | 1.3.0 ≤ v < 1.6.22, 1.8.0 ≤ v < 1.8.6 | 1.6.22, 1.8.6 |
| opensuse opensuse | 12.3 | — |
| debian debian_linux | 7.0 | — |
| mageia mageia | 3.0, 4.0 | — |
| oracle solaris | 11.3 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.