Description
dbus 1.3.0 before 1.6.22 and 1.8.x before 1.8.6, when running on Linux 2.6.37-rc4 or later, allows local users to cause a denial of service (system-bus disconnect of other services or applications) by sending a message containing a file descriptor, then exceeding the maximum recursion depth before the initial message is forwarded.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- http://secunia.com/advisories/59798 ↗
- http://secunia.com/advisories/59611 ↗
- http://lists.opensuse.org/opensuse-updates/2014-09/msg00049.html ↗
- http://secunia.com/advisories/60236 ↗
- http://advisories.mageia.org/MGASA-2014-0294.html ↗
- https://bugs.freedesktop.org/show_bug.cgi?id=80163 ↗
- http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html ↗
- http://www.debian.org/security/2014/dsa-2971 ↗
- http://openwall.com/lists/oss-security/2014/07/02/4 ↗
- http://www.mandriva.com/security/advisories?name=MDVSA-2015:176 ↗