CVEvulnerability
CVE-2015-0245
1.9 LOW
Official page ↗
- Status
- Modified
- Published
- 2015-02-13
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 1.9 LOW — AV:L/AC:M/Au:N/C:N/I:N/A:P
- Weaknesses
- CWE-362
Description
D-Bus 1.4.x through 1.6.x before 1.6.30, 1.8.x before 1.8.16, and 1.9.x before 1.9.10 does not validate the source of ActivationFailure signals, which allows local users to cause a denial of service (activation failure error returned) by leveraging a race condition involving sending an ActivationFailure signal before systemd responds.
Affected configurations
• freedesktop dbus 1.4.0
• freedesktop dbus 1.4.1
• freedesktop dbus 1.4.4
• freedesktop dbus 1.4.6
• freedesktop dbus 1.4.8
• freedesktop dbus 1.4.10
• freedesktop dbus 1.4.12
• freedesktop dbus 1.4.14
• freedesktop dbus 1.4.16
• freedesktop dbus 1.4.18
• freedesktop dbus 1.4.20
• freedesktop dbus 1.4.24
• freedesktop dbus 1.4.26
• freedesktop dbus 1.5.0
• freedesktop dbus 1.5.2
• freedesktop dbus 1.5.4
• freedesktop dbus 1.5.6
• freedesktop dbus 1.5.8
• freedesktop dbus 1.5.10
• freedesktop dbus 1.5.12
• freedesktop dbus 1.6.0
• freedesktop dbus 1.6.2
• freedesktop dbus 1.6.4
• freedesktop dbus 1.6.6
• freedesktop dbus 1.6.8
• freedesktop dbus 1.6.10
• freedesktop dbus 1.6.12
• freedesktop dbus 1.6.14
• freedesktop dbus 1.6.16
• freedesktop dbus 1.6.18
• freedesktop dbus 1.6.20
• freedesktop dbus 1.6.22
• freedesktop dbus 1.6.24
• freedesktop dbus 1.6.26
• freedesktop dbus 1.6.28
• freedesktop dbus 1.8.0
• freedesktop dbus 1.8.2
• freedesktop dbus 1.8.4
• freedesktop dbus 1.8.6
• freedesktop dbus 1.8.8
• freedesktop dbus 1.8.10
• freedesktop dbus 1.8.12
• freedesktop dbus 1.8.14
• freedesktop dbus 1.9.0
• freedesktop dbus 1.9.2
• freedesktop dbus 1.9.4
• freedesktop dbus 1.9.6
• freedesktop dbus 1.9.8
• opensuse opensuse 13.1
• opensuse opensuse 13.2
Related
Weakness · CWE (1)
- CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization weakness
References
- http://advisories.mageia.org/MGASA-2015-0071.html advisories.mageia.org
- http://lists.opensuse.org/opensuse-updates/2015-02/msg00066.html lists.opensuse.org
- http://www.debian.org/security/2015/dsa-3161 www.debian.org
- http://www.mandriva.com/security/advisories?name=MDVSA-2015:176 www.mandriva.com
- http://www.openwall.com/lists/oss-security/2015/02/09/6 www.openwall.com
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html www.oracle.com
- http://advisories.mageia.org/MGASA-2015-0071.html advisories.mageia.org
- http://lists.opensuse.org/opensuse-updates/2015-02/msg00066.html lists.opensuse.org
- http://www.debian.org/security/2015/dsa-3161 www.debian.org
- http://www.mandriva.com/security/advisories?name=MDVSA-2015:176 www.mandriva.com
- http://www.openwall.com/lists/oss-security/2015/02/09/6 www.openwall.com
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html www.oracle.com