CVE-2023-34969
Medium
Description
D-Bus before 1.15.6 sometimes allows unprivileged users to crash dbus-daemon. If a privileged user with control over the dbus-daemon is using the org.freedesktop.DBus.Monitoring interface to monitor message bus traffic, then an unprivileged user with the ability to connect to the same dbus-daemon can cause a dbus-daemon crash under some circumstances via an unreplyable message. When done on the well-known system bus, this is a denial-of-service vulnerability. The fixed versions are 1.12.28, 1.14.8, and 1.15.6.
SeverityMedium
CVSS6.5
Exploit probability75. percentile1.5%
Product
Freedesktop Dbus
PublishedJun 8, 2023
First seenJun 8, 2023
Weakness typeCWE-404CWE-404
How to fix
Update
- freedesktop dbus1.12.28, 1.14.8, 1.15.6 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| freedesktop dbus | 1.12.0 ≤ v < 1.12.28, 1.14.0 ≤ v < 1.14.8, 1.15.0 ≤ v < 1.15.6 | 1.12.28, 1.14.8, 1.15.6 |
| fedoraproject fedora | 38 | — |
| debian debian_linux | 10.0 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.