fkie_cve-2014-3637
Vulnerability from fkie_nvd
Published
2014-09-22 15:55
Modified
2025-04-12 10:46
Severity ?
Summary
D-Bus 1.3.0 through 1.6.x before 1.6.24 and 1.8.x before 1.8.8 does not properly close connections for processes that have terminated, which allows local users to cause a denial of service via a D-bus message containing a D-Bus connection file descriptor.
References
secalert@redhat.comhttp://advisories.mageia.org/MGASA-2014-0395.html
secalert@redhat.comhttp://lists.opensuse.org/opensuse-updates/2014-09/msg00049.html
secalert@redhat.comhttp://secunia.com/advisories/61378
secalert@redhat.comhttp://www.debian.org/security/2014/dsa-3026
secalert@redhat.comhttp://www.mandriva.com/security/advisories?name=MDVSA-2015:176
secalert@redhat.comhttp://www.openwall.com/lists/oss-security/2014/09/16/9
secalert@redhat.comhttp://www.openwall.com/lists/oss-security/2019/06/24/13
secalert@redhat.comhttp://www.openwall.com/lists/oss-security/2019/06/24/14
secalert@redhat.comhttp://www.securitytracker.com/id/1030864
secalert@redhat.comhttp://www.ubuntu.com/usn/USN-2352-1
secalert@redhat.comhttps://bugs.freedesktop.org/show_bug.cgi?id=80559Patch
af854a3a-2127-422b-91ae-364da2661108http://advisories.mageia.org/MGASA-2014-0395.html
af854a3a-2127-422b-91ae-364da2661108http://lists.opensuse.org/opensuse-updates/2014-09/msg00049.html
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/61378
af854a3a-2127-422b-91ae-364da2661108http://www.debian.org/security/2014/dsa-3026
af854a3a-2127-422b-91ae-364da2661108http://www.mandriva.com/security/advisories?name=MDVSA-2015:176
af854a3a-2127-422b-91ae-364da2661108http://www.openwall.com/lists/oss-security/2014/09/16/9
af854a3a-2127-422b-91ae-364da2661108http://www.openwall.com/lists/oss-security/2019/06/24/13
af854a3a-2127-422b-91ae-364da2661108http://www.openwall.com/lists/oss-security/2019/06/24/14
af854a3a-2127-422b-91ae-364da2661108http://www.securitytracker.com/id/1030864
af854a3a-2127-422b-91ae-364da2661108http://www.ubuntu.com/usn/USN-2352-1
af854a3a-2127-422b-91ae-364da2661108https://bugs.freedesktop.org/show_bug.cgi?id=80559Patch
Impacted products
Vendor Product Version
freedesktop dbus 1.3.0
freedesktop dbus 1.3.1
freedesktop dbus 1.4.0
freedesktop dbus 1.4.1
freedesktop dbus 1.4.4
freedesktop dbus 1.4.6
freedesktop dbus 1.4.8
freedesktop dbus 1.4.10
freedesktop dbus 1.4.12
freedesktop dbus 1.4.14
freedesktop dbus 1.4.16
freedesktop dbus 1.4.18
freedesktop dbus 1.4.20
freedesktop dbus 1.4.22
freedesktop dbus 1.4.24
freedesktop dbus 1.4.26
freedesktop dbus 1.5.0
freedesktop dbus 1.5.2
freedesktop dbus 1.5.4
freedesktop dbus 1.5.6
freedesktop dbus 1.5.8
freedesktop dbus 1.5.10
freedesktop dbus 1.5.12
freedesktop dbus 1.6.0
freedesktop dbus 1.6.2
freedesktop dbus 1.6.4
freedesktop dbus 1.6.6
freedesktop dbus 1.6.8
freedesktop dbus 1.6.10
freedesktop dbus 1.6.12
freedesktop dbus 1.6.14
freedesktop dbus 1.6.16
freedesktop dbus 1.6.18
freedesktop dbus 1.6.20
freedesktop dbus 1.6.22
freedesktop dbus 1.8.0
freedesktop dbus 1.8.2
freedesktop dbus 1.8.4
freedesktop dbus 1.8.6
opensuse opensuse 12.3


To clipboard 

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:freedesktop:dbus:1.3.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "96B154C1-28B1-4C8F-8D18-9A015CE81C25",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:freedesktop:dbus:1.3.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "357042A5-6CB3-44FD-AFAA-F626BBBA6747",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:freedesktop:dbus:1.4.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "2D95FA2A-9CFB-4B02-A849-36431874AB7C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:freedesktop:dbus:1.4.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "EE4B9649-3F37-4700-A900-2D0EDFAB1FDB",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:freedesktop:dbus:1.4.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "70C7FEDA-AE1E-4BD9-8998-9A6C01F80277",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:freedesktop:dbus:1.4.6:*:*:*:*:*:*:*",
              "matchCriteriaId": "71648B78-E1D4-4F74-B029-F6ECE65E84A7",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:freedesktop:dbus:1.4.8:*:*:*:*:*:*:*",
              "matchCriteriaId": "AD3C815C-E979-45DF-AA05-1A2CAF4DF910",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:freedesktop:dbus:1.4.10:*:*:*:*:*:*:*",
              "matchCriteriaId": "6E72AD88-640C-4B27-9A56-570151667FD5",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:freedesktop:dbus:1.4.12:*:*:*:*:*:*:*",
              "matchCriteriaId": "3D986A4B-827C-4064-9004-E4D6FA524FFC",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:freedesktop:dbus:1.4.14:*:*:*:*:*:*:*",
              "matchCriteriaId": "F7197910-4381-4D23-85A1-5348D20AAD63",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:freedesktop:dbus:1.4.16:*:*:*:*:*:*:*",
              "matchCriteriaId": "B1059BE8-1044-4DC7-9B41-E76A56225000",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:freedesktop:dbus:1.4.18:*:*:*:*:*:*:*",
              "matchCriteriaId": "2124D0C2-21A6-4C72-97B9-A53BCDA697DD",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:freedesktop:dbus:1.4.20:*:*:*:*:*:*:*",
              "matchCriteriaId": "1646C38B-596F-4614-93FC-0BFB88E9F034",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:freedesktop:dbus:1.4.22:*:*:*:*:*:*:*",
              "matchCriteriaId": "0FB75B1D-CB6D-4152-B4F2-C24A6E6F830B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:freedesktop:dbus:1.4.24:*:*:*:*:*:*:*",
              "matchCriteriaId": "9914C4DF-2B1B-416E-BE8A-274676F8CDA5",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:freedesktop:dbus:1.4.26:*:*:*:*:*:*:*",
              "matchCriteriaId": "A2126812-E627-4514-8895-177F6A139B8C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:freedesktop:dbus:1.5.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "DFC34AF2-60BD-4D52-8704-B0A4E3B9F35E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:freedesktop:dbus:1.5.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "AA8D645B-19A4-4AF5-A667-C95F90B8F282",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:freedesktop:dbus:1.5.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "4E8E5358-8466-4D3A-8AE4-3EE55700140D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:freedesktop:dbus:1.5.6:*:*:*:*:*:*:*",
              "matchCriteriaId": "7B175C3A-44FC-4069-99F4-CFF78DAF6C60",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:freedesktop:dbus:1.5.8:*:*:*:*:*:*:*",
              "matchCriteriaId": "36C6830D-92D2-49EC-BD13-BA7EE7720E61",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:freedesktop:dbus:1.5.10:*:*:*:*:*:*:*",
              "matchCriteriaId": "3E33E9B8-4543-46D0-837B-DCCAC25C47E7",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:freedesktop:dbus:1.5.12:*:*:*:*:*:*:*",
              "matchCriteriaId": "831CFD41-47B0-4920-B118-7AD2CAFBFA85",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:freedesktop:dbus:1.6.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "0A772FA8-668B-45AC-9813-0B5ADCE91DD6",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:freedesktop:dbus:1.6.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "E155EB75-8D98-4469-98CB-81A40ABF0D9C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:freedesktop:dbus:1.6.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "4D6AF8D8-6A4E-4A42-A738-84690B6F9FDC",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:freedesktop:dbus:1.6.6:*:*:*:*:*:*:*",
              "matchCriteriaId": "E598FE36-ABEB-4682-950A-E462CC780F82",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:freedesktop:dbus:1.6.8:*:*:*:*:*:*:*",
              "matchCriteriaId": "EE224CED-410C-43D8-9220-0AEF5EB49C8D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:freedesktop:dbus:1.6.10:*:*:*:*:*:*:*",
              "matchCriteriaId": "A24ED739-0B39-4A70-B7E0-8A859759233D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:freedesktop:dbus:1.6.12:*:*:*:*:*:*:*",
              "matchCriteriaId": "F89DEA95-DFB8-4D75-BE65-A477972D143E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:freedesktop:dbus:1.6.14:*:*:*:*:*:*:*",
              "matchCriteriaId": "76BCD0D9-4F06-46E7-8734-AAEE28DD1631",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:freedesktop:dbus:1.6.16:*:*:*:*:*:*:*",
              "matchCriteriaId": "C22CA4E4-458D-465A-8272-473055A608EB",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:freedesktop:dbus:1.6.18:*:*:*:*:*:*:*",
              "matchCriteriaId": "8133A184-FC2E-41AC-B2C2-EFD819B011FC",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:freedesktop:dbus:1.6.20:*:*:*:*:*:*:*",
              "matchCriteriaId": "2D5009D1-BDA4-4DFC-A629-07144BDAEC93",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:freedesktop:dbus:1.6.22:*:*:*:*:*:*:*",
              "matchCriteriaId": "1A1D15D9-89A1-4742-8613-4CFF215525DB",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:freedesktop:dbus:1.8.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "9AB63C07-1022-4EEE-B419-4E0A80AE64A5",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:freedesktop:dbus:1.8.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "68B161B9-7385-4C0B-AC4D-1145E1004B74",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:freedesktop:dbus:1.8.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "6DD6AAFC-C18F-4AF5-B8D1-82F85F8421DC",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:freedesktop:dbus:1.8.6:*:*:*:*:*:*:*",
              "matchCriteriaId": "A214F572-0572-426B-979C-22EB3A43ED6F",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:opensuse:opensuse:12.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "DFBF430B-0832-44B0-AA0E-BA9E467F7668",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "D-Bus 1.3.0 through 1.6.x before 1.6.24 and 1.8.x before 1.8.8 does not properly close connections for processes that have terminated, which allows local users to cause a denial of service via a D-bus message containing a D-Bus connection file descriptor."
    },
    {
      "lang": "es",
      "value": "D-Bus 1.3.0 hasta 1.6.x anterior a 1.6.24 y 1.8.x anterior a 1.8.8 no cierra correctamente las conexiones para procesos que hayan terminado, lo que permite a usuarios locales causar una denegaci\u00f3n de servicio a trav\u00e9s de un mensaje D-bus que contiene un descriptor de ficheros de conexiones D-Bus."
    }
  ],
  "evaluatorComment": "\u003ca href=\"http://cwe.mitre.org/data/definitions/775.html\"\u003eCWE-775: Missing Release of File Descriptor or Handle after Effective Lifetime\u003c/a\u003e",
  "id": "CVE-2014-3637",
  "lastModified": "2025-04-12T10:46:40.837",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "LOW",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "LOCAL",
          "authentication": "NONE",
          "availabilityImpact": "PARTIAL",
          "baseScore": 2.1,
          "confidentialityImpact": "NONE",
          "integrityImpact": "NONE",
          "vectorString": "AV:L/AC:L/Au:N/C:N/I:N/A:P",
          "version": "2.0"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 2.9,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ]
  },
  "published": "2014-09-22T15:55:08.030",
  "references": [
    {
      "source": "secalert@redhat.com",
      "url": "http://advisories.mageia.org/MGASA-2014-0395.html"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://lists.opensuse.org/opensuse-updates/2014-09/msg00049.html"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://secunia.com/advisories/61378"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://www.debian.org/security/2014/dsa-3026"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:176"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://www.openwall.com/lists/oss-security/2014/09/16/9"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://www.openwall.com/lists/oss-security/2019/06/24/13"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://www.openwall.com/lists/oss-security/2019/06/24/14"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://www.securitytracker.com/id/1030864"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://www.ubuntu.com/usn/USN-2352-1"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Patch"
      ],
      "url": "https://bugs.freedesktop.org/show_bug.cgi?id=80559"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://advisories.mageia.org/MGASA-2014-0395.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://lists.opensuse.org/opensuse-updates/2014-09/msg00049.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/61378"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.debian.org/security/2014/dsa-3026"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:176"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.openwall.com/lists/oss-security/2014/09/16/9"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.openwall.com/lists/oss-security/2019/06/24/13"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.openwall.com/lists/oss-security/2019/06/24/14"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securitytracker.com/id/1030864"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.ubuntu.com/usn/USN-2352-1"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch"
      ],
      "url": "https://bugs.freedesktop.org/show_bug.cgi?id=80559"
    }
  ],
  "sourceIdentifier": "secalert@redhat.com",
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-17"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.