CVEvulnerability

CVE-2014-3637

2.1 LOW Published 2014-09-22 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2014-09-22
Last modified
2026-06-17
Assigner
[email protected]
CVSS 2.0 ([email protected])
2.1 LOW — AV:L/AC:L/Au:N/C:N/I:N/A:P
Weaknesses
CWE-17

Description

D-Bus 1.3.0 through 1.6.x before 1.6.24 and 1.8.x before 1.8.8 does not properly close connections for processes that have terminated, which allows local users to cause a denial of service via a D-bus message containing a D-Bus connection file descriptor.

Affected configurations

• freedesktop dbus 1.3.0 • freedesktop dbus 1.3.1 • freedesktop dbus 1.4.0 • freedesktop dbus 1.4.1 • freedesktop dbus 1.4.4 • freedesktop dbus 1.4.6 • freedesktop dbus 1.4.8 • freedesktop dbus 1.4.10 • freedesktop dbus 1.4.12 • freedesktop dbus 1.4.14 • freedesktop dbus 1.4.16 • freedesktop dbus 1.4.18 • freedesktop dbus 1.4.20 • freedesktop dbus 1.4.22 • freedesktop dbus 1.4.24 • freedesktop dbus 1.4.26 • freedesktop dbus 1.5.0 • freedesktop dbus 1.5.2 • freedesktop dbus 1.5.4 • freedesktop dbus 1.5.6 • freedesktop dbus 1.5.8 • freedesktop dbus 1.5.10 • freedesktop dbus 1.5.12 • freedesktop dbus 1.6.0 • freedesktop dbus 1.6.2 • freedesktop dbus 1.6.4 • freedesktop dbus 1.6.6 • freedesktop dbus 1.6.8 • freedesktop dbus 1.6.10 • freedesktop dbus 1.6.12 • freedesktop dbus 1.6.14 • freedesktop dbus 1.6.16 • freedesktop dbus 1.6.18 • freedesktop dbus 1.6.20 • freedesktop dbus 1.6.22 • freedesktop dbus 1.8.0 • freedesktop dbus 1.8.2 • freedesktop dbus 1.8.4 • freedesktop dbus 1.8.6 • opensuse opensuse 12.3

Related

Weakness · not in database (1)

References