CVEvulnerability

CVE-2014-3532

2.1 LOW Published 2014-07-19 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2014-07-19
Last modified
2026-06-17
Assigner
[email protected]
CVSS 2.0 ([email protected])
2.1 LOW — AV:L/AC:L/Au:N/C:N/I:N/A:P
Weaknesses
CWE-20

Description

dbus 1.3.0 before 1.6.22 and 1.8.x before 1.8.6, when running on Linux 2.6.37-rc4 or later, allows local users to cause a denial of service (system-bus disconnect of other services or applications) by sending a message containing a file descriptor, then exceeding the maximum recursion depth before the initial message is forwarded.

Affected configurations

• freedesktop dbus (>= 1.3.0 < 1.6.22) • freedesktop dbus (>= 1.8.0 < 1.8.6) • opensuse opensuse 12.3 • debian debian linux 7.0 • mageia mageia 3.0 • mageia mageia 4.0 • oracle solaris 11.3

Related

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References