D-Bus 1.3.0 through 1.6.x before 1.6.24 and 1.8.x before 1.8.8 does not properly close connections for processes that have terminated, which allows local users to cause a denial of service via a D-bus message containing a D-Bus connection file descriptor.
References
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Information
Published : 2014-09-22 08:55
Updated : 2019-06-24 14:15
NVD link : CVE-2014-3637
Mitre link : CVE-2014-3637
JSON object : View
CWE
CWE-17
DEPRECATED: Code
Products Affected
d-bus_project
- d-bus
opensuse
- opensuse