Описание
An issue was discovered in dbus >= 1.3.0 before 1.12.18. The DBusServer in libdbus, as used in dbus-daemon, leaks file descriptors when a message exceeds the per-message file descriptor limit. A local attacker with access to the D-Bus system bus or another system service's private AF_UNIX socket could use this to make the system service reach its file descriptor limit, denying service to subsequent D-Bus clients.
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | released | 1.12.2-1ubuntu1.2 |
| devel | released | 1.12.18-1ubuntu1 |
| eoan | released | 1.12.14-1ubuntu2.1 |
| esm-infra-legacy/trusty | released | 1.6.18-0ubuntu4.5+esm2 |
| esm-infra/bionic | released | 1.12.2-1ubuntu1.2 |
| esm-infra/focal | released | 1.12.16-2ubuntu2.1 |
| esm-infra/xenial | released | 1.10.6-1ubuntu3.6 |
| focal | released | 1.12.16-2ubuntu2.1 |
| precise/esm | not-affected | 1.4.18-1ubuntu1.10 |
| trusty | ignored | end of standard support |
Показывать по
EPSS
4.9 Medium
CVSS2
5.5 Medium
CVSS3
Связанные уязвимости
An issue was discovered in dbus >= 1.3.0 before 1.12.18. The DBusServer in libdbus, as used in dbus-daemon, leaks file descriptors when a message exceeds the per-message file descriptor limit. A local attacker with access to the D-Bus system bus or another system service's private AF_UNIX socket could use this to make the system service reach its file descriptor limit, denying service to subsequent D-Bus clients.
An issue was discovered in dbus >= 1.3.0 before 1.12.18. The DBusServer in libdbus, as used in dbus-daemon, leaks file descriptors when a message exceeds the per-message file descriptor limit. A local attacker with access to the D-Bus system bus or another system service's private AF_UNIX socket could use this to make the system service reach its file descriptor limit, denying service to subsequent D-Bus clients.
An issue was discovered in dbus >= 1.3.0 before 1.12.18. The DBusServe ...
EPSS
4.9 Medium
CVSS2
5.5 Medium
CVSS3