CVEvulnerability

CVE-2014-3639

2.1 LOW Published 2014-09-22 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2014-09-22
Last modified
2026-06-17
Assigner
[email protected]
CVSS 2.0 ([email protected])
2.1 LOW — AV:L/AC:L/Au:N/C:N/I:N/A:P
Weaknesses
CWE-399

Description

The dbus-daemon in D-Bus before 1.6.24 and 1.8.x before 1.8.8 does not properly close old connections, which allows local users to cause a denial of service (incomplete connection consumption and prevention of new connections) via a large number of incomplete connections.

Affected configurations

• opensuse opensuse 12.3 • d-bus project d-bus (<= 1.6.22) • freedesktop dbus 1.6.0 • freedesktop dbus 1.6.2 • freedesktop dbus 1.6.4 • freedesktop dbus 1.6.6 • freedesktop dbus 1.6.8 • freedesktop dbus 1.6.10 • freedesktop dbus 1.6.12 • freedesktop dbus 1.6.14 • freedesktop dbus 1.6.16 • freedesktop dbus 1.6.18 • freedesktop dbus 1.6.20 • freedesktop dbus 1.8.0 • freedesktop dbus 1.8.2 • freedesktop dbus 1.8.4 • freedesktop dbus 1.8.6

Related

Weakness · not in database (1)

References