Fluid Attacks Database

Description

D-Bus 1.3.0 through 1.6.x before 1.6.24 and 1.8.x before 1.8.8 does not properly close connections for processes that have terminated, which allows local users to cause a denial of service via a D-bus message containing a D-Bus connection file descriptor.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Package	Affected version	Patched versions
debian 11	dbus	>=0 <1.8.8-1	1.8.8-1
debian 14	dbus	>=0 <1.8.8-1	1.8.8-1
debian 12	dbus	>=0 <1.8.8-1	1.8.8-1
debian 13	dbus	>=0 <1.8.8-1	1.8.8-1
rpm rhel7	dbus	-	-
rpm rhel5	dbus	-	-

Aliases

1. CVE-2014-36372. NVD-2014-36373. OSV-DEBIAN-2014-36374. OSV-2014-36375. SECURITY-TRACKER-CVE-2014-3637

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.