PT-2014-1928 · Freedesktop.Org+3 · D-Bus+3

Published 2014-11-11 · Updated 2024-06-15 · CVE-2014-7824

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions D-Bus versions 1.3.0 through 1.6.x before 1.6.26 D-Bus versions 1.8.x before 1.8.10 D-Bus versions 1.9.x before 1.9.2

Description The issue allows local users to cause a denial of service by queuing the maximum number of file descriptors, preventing new connections and causing connection drops. This is due to an incomplete fix for a previous issue. Additionally, multiple vulnerabilities in the dbus package may lead to breaches of confidentiality, integrity, and availability of protected information, potentially exploitable remotely.

Recommendations For D-Bus versions 1.3.0 through 1.6.x before 1.6.26, update to version 1.6.26 or later. For D-Bus versions 1.8.x before 1.8.10, update to version 1.8.10 or later. For D-Bus versions 1.9.x before 1.9.2, update to version 1.9.2 or later.

Exploit

Fix

DoS

Weakness Enumeration

CWE-399

Related Identifiers

ALT-PU-2014-2339

BDU:2015-09788

CVE-2014-7824

DSA-3099-1

MGASA-2014-0457

OPENSUSE-SU-2024:10517-1

SUSE-SU-2017:2699-1

SUSE-SU-2017:2700-1

USN-2425-1

Affected Products

Alt Linux

D-Bus

Suse

Ubuntu

References · 44

• 🔥 https://bugs.freedesktop.org/show_bug.cgi?id=85105 · Exploit
• 🔥 http://openwall.com/lists/oss-security/2014/11/10/2 · Exploit
• https://osv.dev/vulnerability/openSUSE-SU-2024:10517-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2014-7824 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2014-7824 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2014-7824 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2014-7824 · Security Note
• https://ubuntu.com/security/notices/USN-2425-1 · Vendor Advisory
• http://ubuntu.com/usn/USN-2425-1 · Vendor Advisory
• http://debian.org/security/2014/dsa-3099 · Vendor Advisory
• https://advisories.mageia.org/MGAA-2014-0182.html · Security Note
• https://ubuntu.com/security/CVE-2014-7824 · Vendor Advisory
• https://errata.altlinux.org/ALT-PU-2014-2339 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2014-0457.html · Security Note
• https://bdu.fstec.ru/vul/2015-09788 · Security Note