Fluid Attacks Database

Description

The bus_connections_check_reply function in config-parser.c in D-Bus before 1.6.24 and 1.8.x before 1.8.8 allows local users to cause a denial of service (CPU consumption) via a large number of method calls.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Package	Affected version	Patched versions
debian 11	dbus	>=0 <1.8.8-1	1.8.8-1
debian 14	dbus	>=0 <1.8.8-1	1.8.8-1
debian 13	dbus	>=0 <1.8.8-1	1.8.8-1
debian 12	dbus	>=0 <1.8.8-1	1.8.8-1
rpm rhel5	dbus	-	-
rpm rhel7	dbus	-	-
rpm rhel6	dbus	-	-

Aliases

1. CVE-2014-36382. NVD-2014-36383. OSV-DEBIAN-2014-36384. OSV-2014-36385. SECURITY-TRACKER-CVE-2014-3638

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.