PT-2022-20612 · Unknown+3 · Dbus-Broker+3

G. Hechenberger + 3 · Published 2022-06-25 · Updated 2023-05-03 · CVE-2022-31213

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions dbus-broker versions prior to 31

Description An issue was discovered in dbus-broker where multiple NULL pointer dereferences can occur when a malformed XML config file is supplied.

Recommendations For versions prior to 31, update to version 31 or later to resolve the issue.

Exploit

Fix

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

ALSA-2022:6608

CVE-2022-31213

OESA-2022-2116

OPENSUSE-SU-2022:10030-1

RHSA-2022:6608

RHSA-2022_6608

RLSA-2022:6608

Affected Products

Almalinux

Red Hat

Rocky Linux

Dbus-Broker

References · 34

• 🔥 https://sec-consult.com/vulnerability-lab/advisory/memory-corruption-vulnerabilities-dbus-broker · Exploit
• https://github.com/bus1/dbus-broker/compare/v30...v31 · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-31213 · Vendor Advisory
• https://errata.rockylinux.org/RLSA-2022:6608 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-31213 · Vendor Advisory
• https://security.gentoo.org/glsa/202305-04 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-31213 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-31213 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2022-6608.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-31212 · Security Note
• https://osv.dev/vulnerability/CVE-2022-31213 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2022-2116 · Vendor Advisory
• https://osv.dev/vulnerability/RLSA-2022:6608 · Vendor Advisory
• https://errata.almalinux.org/9/ALSA-2022-6608.html · Vendor Advisory
• https://osv.dev/vulnerability/ALSA-2022:6608 · Vendor Advisory