Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2022-42010

Опубликовано: 10 окт. 2022
Источник: nvd
CVSS3: 6.5
EPSS Низкий

Описание

An issue was discovered in D-Bus before 1.12.24, 1.13.x and 1.14.x before 1.14.4, and 1.15.x before 1.15.2. An authenticated attacker can cause dbus-daemon and other programs that use libdbus to crash when receiving a message with certain invalid type signatures.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:freedesktop:dbus:*:*:*:*:*:*:*:*
Версия до 1.12.24 (исключая)
cpe:2.3:a:freedesktop:dbus:*:*:*:*:*:*:*:*
Версия от 1.13.0 (включая) до 1.14.4 (исключая)
cpe:2.3:a:freedesktop:dbus:*:*:*:*:*:*:*:*
Версия от 1.15.0 (включая) до 1.15.2 (исключая)
Конфигурация 2

Одно из

cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*

EPSS

Процентиль: 14%
0.00046
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-347
CWE-347

Связанные уязвимости

CVSS3: 6.5
ubuntu
почти 3 года назад

An issue was discovered in D-Bus before 1.12.24, 1.13.x and 1.14.x before 1.14.4, and 1.15.x before 1.15.2. An authenticated attacker can cause dbus-daemon and other programs that use libdbus to crash when receiving a message with certain invalid type signatures.

CVSS3: 6.5
redhat
почти 3 года назад

An issue was discovered in D-Bus before 1.12.24, 1.13.x and 1.14.x before 1.14.4, and 1.15.x before 1.15.2. An authenticated attacker can cause dbus-daemon and other programs that use libdbus to crash when receiving a message with certain invalid type signatures.

CVSS3: 6.5
msrc
почти 3 года назад

Описание отсутствует

CVSS3: 6.5
debian
почти 3 года назад

An issue was discovered in D-Bus before 1.12.24, 1.13.x and 1.14.x bef ...

CVSS3: 6.5
github
почти 3 года назад

An issue was discovered in D-Bus before 1.12.24, 1.13.x and 1.14.x before 1.14.4, and 1.15.x before 1.15.2. An authenticated attacker can cause dbus-daemon and other programs that use libdbus to crash when receiving a message with certain invalid type signatures.

EPSS

Процентиль: 14%
0.00046
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-347
CWE-347