PT-2017-19438 · D-Bus · Dbus-Daemon

Publicado 2017-08-26 · Atualizado 2017-08-26

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions dbus-daemon (affected versions not specified)

Description A format string vulnerability in the reference bus implementation could potentially allow local users to cause arbitrary code execution or denial of service. Additionally, there are symlink attacks in the nonce-tcp transport and unit tests.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

MGASA-2017-0310

Produtos afetados

Dbus-Daemon

Referências · 5

• https://advisories.mageia.org/MGASA-2017-0310.html · Nota de Segurança
• https://lists.fedoraproject.org/archives/list/[e-mail]/thread/YNEU3UPG7YBLXGQ4E4XVZ74PLHP4ZG56 · Aviso do Fabricante
• https://lists.opensuse.org/opensuse-updates/2017-03/msg00091.html · Nota
• https://osv.dev/vulnerability/MGASA-2017-0310 · Aviso do Fabricante
• https://bugs.mageia.org/show_bug.cgi?id=19561 · Nota