| Package | Affected versions | Patched versions |
|---|---|---|
| dbus | = 1.4.0= 1.4.1= 1.4.10= 1.4.12= 1.4.14= 1.4.16= 1.4.18= 1.4.20= 1.4.24= 1.4.26= 1.4.4= 1.4.6= 1.4.8= 1.5.0= 1.5.10= 1.5.12= 1.5.2= 1.5.4= 1.5.6= 1.5.8= 1.6.0= 1.6.10= 1.6.12= 1.6.14= 1.6.16= 1.6.18= 1.6.2= 1.6.20= 1.6.22= 1.6.24= 1.6.26= 1.6.28= 1.6.4= 1.6.6= 1.6.8= 1.8.0= 1.8.10= 1.8.12= 1.8.14= 1.8.2= 1.8.4= 1.8.6= 1.8.8= 1.9.0= 1.9.2= 1.9.4= 1.9.6= 1.9.8 |
D-Bus 1.4.x through 1.6.x before 1.6.30, 1.8.x before 1.8.16, and 1.9.x before 1.9.10 does not validate the source of ActivationFailure signals, which allows local users to cause a denial of service (activation failure error returned) by leveraging a race condition involving sending an ActivationFailure signal before systemd responds.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free