Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2014-3636

Опубликовано: 25 окт. 2014
Источник: nvd
CVSS2: 1.9
EPSS Низкий

Описание

D-Bus 1.3.0 through 1.6.x before 1.6.24 and 1.8.x before 1.8.8 allows local users to (1) cause a denial of service (prevention of new connections and connection drop) by queuing the maximum number of file descriptors or (2) cause a denial of service (disconnect) via multiple messages that combine to have more than the allowed number of file descriptors for a single sendmsg call.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:d-bus_project:d-bus:*:*:*:*:*:*:*:*
Версия до 1.6.22 (включая)
cpe:2.3:a:freedesktop:dbus:1.8.0:*:*:*:*:*:*:*
cpe:2.3:a:freedesktop:dbus:1.8.2:*:*:*:*:*:*:*
cpe:2.3:a:freedesktop:dbus:1.8.4:*:*:*:*:*:*:*
cpe:2.3:a:freedesktop:dbus:1.8.6:*:*:*:*:*:*:*
Конфигурация 2
cpe:2.3:o:opensuse:opensuse:12.3:*:*:*:*:*:*:*

EPSS

Процентиль: 27%
0.00096
Низкий

1.9 Low

CVSS2

Дефекты

CWE-399

Связанные уязвимости

ubuntu
больше 11 лет назад

D-Bus 1.3.0 through 1.6.x before 1.6.24 and 1.8.x before 1.8.8 allows local users to (1) cause a denial of service (prevention of new connections and connection drop) by queuing the maximum number of file descriptors or (2) cause a denial of service (disconnect) via multiple messages that combine to have more than the allowed number of file descriptors for a single sendmsg call.

redhat
больше 11 лет назад

D-Bus 1.3.0 through 1.6.x before 1.6.24 and 1.8.x before 1.8.8 allows local users to (1) cause a denial of service (prevention of new connections and connection drop) by queuing the maximum number of file descriptors or (2) cause a denial of service (disconnect) via multiple messages that combine to have more than the allowed number of file descriptors for a single sendmsg call.

debian
больше 11 лет назад

D-Bus 1.3.0 through 1.6.x before 1.6.24 and 1.8.x before 1.8.8 allows ...

github
больше 3 лет назад

D-Bus 1.3.0 through 1.6.x before 1.6.24 and 1.8.x before 1.8.8 allows local users to (1) cause a denial of service (prevention of new connections and connection drop) by queuing the maximum number of file descriptors or (2) cause a denial of service (disconnect) via multiple messages that combine to have more than the allowed number of file descriptors for a single sendmsg call.

fstec
около 11 лет назад

Уязвимости операционной системы Gentoo Linux, позволяющие удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации

EPSS

Процентиль: 27%
0.00096
Низкий

1.9 Low

CVSS2

Дефекты

CWE-399