CVE-2010-4352

概要

参考情報

• cgit.freedesktop.org/dbus/dbus/commit · Patch
• kb.juniper.net/InfoCenter/index
• lists.fedoraproject.org/pipermail/package-announce/2010-December/052550.html · Exploit
• lists.opensuse.org/opensuse-security-announce/2011-02/msg00004.html
• lists.opensuse.org/opensuse-updates/2012-10/msg00094.html
• openwall.com/lists/oss-security/2010/12/16/3 · Exploit
• openwall.com/lists/oss-security/2010/12/16/6 · Exploit
• openwall.com/lists/oss-security/2010/12/21/3
• secunia.com/advisories/42580 · Vendor Advisory
• secunia.com/advisories/42760 · Vendor Advisory
• secunia.com/advisories/42911
• secunia.com/advisories/42960
• debian.org/security/2011/dsa-2149
• remlab.net/op/dbus-variant-recursion.shtml · Vendor Advisory
• securityfocus.com/bid/45377
• ubuntu.com/usn/USN-1044-1
• vupen.com/english/advisories/2010/3325 · Vendor Advisory
• vupen.com/english/advisories/2011/0161
• vupen.com/english/advisories/2011/0178
• vupen.com/english/advisories/2011/0464
• bugs.freedesktop.org/show_bug.cgi · Exploit
• bugzilla.redhat.com/show_bug.cgi · Exploit

d-bus のその他の脆弱性

• CVE-2014-3636低 1.9D-Bus 1.3.0 through 1.6.x before 1.6.24 and 1.8.x before 1.8.8 allows local users to (1) cause a denial of service (prevention of new connec…
• CVE-2014-3639低 2.1The dbus-daemon in D-Bus before 1.6.24 and 1.8.x before 1.8.8 does not properly close old connections, which allows local users to cause a d…
• CVE-2014-3638低 2.1The bus_connections_check_reply function in config-parser.c in D-Bus before 1.6.24 and 1.8.x before 1.8.8 allows local users to cause a deni…
• CVE-2014-3635中 4.4Off-by-one error in D-Bus 1.3.0 through 1.6.x before 1.6.24 and 1.8.x before 1.8.8, when running on a 64-bit system and the max_message_unix…
• CVE-2014-3477中 4.0The dbus-daemon in D-Bus 1.2.x through 1.4.x, 1.6.x before 1.6.20, and 1.8.x before 1.8.4, sends an AccessDenied error to the service instea…