SecurityFan score 23 · Tier C
dbus: multiple denial-of-service issues
The Brief
- dbus 1.16.4 was released with fixes for several denial-of-service issues.
- A further local denial-of-service issue, dbus#589, is known and not yet fixed.
- CVE IDs have been requested from Red Hat's CNA and were not yet allocated at publication.
Why it matters
Systems running dbus can be made unavailable by these denial-of-service issues, so upgrading to 1.16.4 closes the fixed ones. dbus#589 remains open in this release.
Who’s affected
- Systems running dbus earlier than 1.16.4
What to do
- Upgrade dbus to 1.16.4
- dbus 1.16.4
- #dbus
- #security
- #denial-of-service
- #linux
- #vulnerability
Posted by Simon McVittie on Nov 12 Today's dbus 1.16.4 release includes fixes for several denial-of-service issues. Another local denial of service, dbus#589 (see below), is known and not yet fixed. CVE IDs have been requested from Red Hat's CNA, please do not allocate…
Timeline
dbus 1.16.4 released with fixes for multiple denial-of-service issues, disclosed on oss-sec
Open Source Security
dbus: multiple denial-of-service issues