Описание
ELSA-2023-4498: dbus security update (MODERATE)
[1:1.12.8-24.0.1.1]
- Fix CVE-2023-34969 (#2213166)
Обновленные пакеты
Oracle Linux 8
Oracle Linux aarch64
dbus
1.12.8-24.0.1.el8_8.1
dbus-common
1.12.8-24.0.1.el8_8.1
dbus-daemon
1.12.8-24.0.1.el8_8.1
dbus-devel
1.12.8-24.0.1.el8_8.1
dbus-libs
1.12.8-24.0.1.el8_8.1
dbus-tools
1.12.8-24.0.1.el8_8.1
dbus-x11
1.12.8-24.0.1.el8_8.1
Oracle Linux x86_64
dbus
1.12.8-24.0.1.el8_8.1
dbus-common
1.12.8-24.0.1.el8_8.1
dbus-daemon
1.12.8-24.0.1.el8_8.1
dbus-devel
1.12.8-24.0.1.el8_8.1
dbus-libs
1.12.8-24.0.1.el8_8.1
dbus-tools
1.12.8-24.0.1.el8_8.1
dbus-x11
1.12.8-24.0.1.el8_8.1
Связанные CVE
Связанные уязвимости
D-Bus before 1.15.6 sometimes allows unprivileged users to crash dbus-daemon. If a privileged user with control over the dbus-daemon is using the org.freedesktop.DBus.Monitoring interface to monitor message bus traffic, then an unprivileged user with the ability to connect to the same dbus-daemon can cause a dbus-daemon crash under some circumstances via an unreplyable message. When done on the well-known system bus, this is a denial-of-service vulnerability. The fixed versions are 1.12.28, 1.14.8, and 1.15.6.
D-Bus before 1.15.6 sometimes allows unprivileged users to crash dbus-daemon. If a privileged user with control over the dbus-daemon is using the org.freedesktop.DBus.Monitoring interface to monitor message bus traffic, then an unprivileged user with the ability to connect to the same dbus-daemon can cause a dbus-daemon crash under some circumstances via an unreplyable message. When done on the well-known system bus, this is a denial-of-service vulnerability. The fixed versions are 1.12.28, 1.14.8, and 1.15.6.
D-Bus before 1.15.6 sometimes allows unprivileged users to crash dbus-daemon. If a privileged user with control over the dbus-daemon is using the org.freedesktop.DBus.Monitoring interface to monitor message bus traffic, then an unprivileged user with the ability to connect to the same dbus-daemon can cause a dbus-daemon crash under some circumstances via an unreplyable message. When done on the well-known system bus, this is a denial-of-service vulnerability. The fixed versions are 1.12.28, 1.14.8, and 1.15.6.
D-Bus before 1.15.6 sometimes allows unprivileged users to crash dbus- ...