DBus-GLib 0.73 disregards the access flag of exported GObject properties, which allows local users to bypass intended access restrictions and possibly cause a denial of service by modifying properties, as demonstrated by properties of the (1) DeviceKit-Power, (2) NetworkManager, and (3) ModemManager services.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade dbus-glibUpgrade NetworkManager-gnomeUpgrade NetworkManager-glib-develUpgrade dbus-glib-develUpgrade NetworkManager-glibUpgrade NetworkManager-develUpgrade NetworkManager | Dec 1, 2016 | Aug 20, 2010 |
| Debian | — | Upgrade dbus-glib | Jul 30, 2024 | Aug 20, 2010 |
| Oracle_linux | — | Upgrade NetworkManager-develUpgrade dbus-glib-develUpgrade NetworkManagerUpgrade NetworkManager-glibUpgrade dbus-glibUpgrade NetworkManager-glib-develUpgrade NetworkManager-gnome | Oct 16, 2024 | Aug 20, 2010 |
| Suse | — | Upgrade gdmUpgrade dbus-1-glib-toolUpgrade dbus-1-glib-docUpgrade dbus-1-glib-x86Upgrade gdm-branding-upstreamUpgrade NetworkManager-glibUpgrade libdbus-glib-1-2Upgrade dbus-1-glib-32bitUpgrade gdm-langUpgrade dbus-1-glib-bash-completionUpgrade NetworkManagerUpgrade dbus-1-glib-develUpgrade dbus-1-glib | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade libdbus-glib-1-2 | Nov 8, 2024 | Aug 20, 2010 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub