PT-2017-19438 · D-Bus · Dbus-Daemon

Published 2017-08-26 · Updated 2017-08-26

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions dbus-daemon (affected versions not specified)

Description A format string vulnerability in the reference bus implementation could potentially allow local users to cause arbitrary code execution or denial of service. Additionally, there are symlink attacks in the nonce-tcp transport and unit tests.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

MGASA-2017-0310

Affected Products

Dbus-Daemon

References · 5

• https://advisories.mageia.org/MGASA-2017-0310.html · Security Note
• https://lists.fedoraproject.org/archives/list/[e-mail]/thread/YNEU3UPG7YBLXGQ4E4XVZ74PLHP4ZG56 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2017-0310 · Vendor Advisory
• https://lists.opensuse.org/opensuse-updates/2017-03/msg00091.html · Note
• https://bugs.mageia.org/show_bug.cgi?id=19561 · Note