The _dbus_printf_string_upper_bound function in dbus/dbus-sysdeps-unix.c in D-Bus (aka DBus) 1.4.x before 1.4.26, 1.6.x before 1.6.12, and 1.7.x before 1.7.4 allows local users to cause a denial of service (service crash) via a crafted message.
CVSS Details
- CVSS 3.1 Base Score: 3.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade dbus | Jul 30, 2024 | Jul 3, 2013 |
| Freebsd | — | Upgrade dbus | Dec 10, 2025 | Jun 13, 2013 |
| Gentoo Linux | — | Upgrade sys-apps/dbus. | Oct 30, 2017 | Jul 3, 2013 |
| Oracle Solaris | — | Upgrade entire/ to version 11.4-11.4.0.0.1.15.0 on Solaris 11.4Upgrade consolidation/desktop/desktop-incorporation to version 0.5.11-0.175.2.0.0.42.0 on Solaris 11.2Upgrade entire to version 0.5.11-0.175.2.0.0.42.0 on Solaris 11.2 | May 29, 2017 | Jul 3, 2013 |
| Suse | — | Upgrade dbus-1Upgrade dbus-1-devel-32bitUpgrade dbus-1-develUpgrade dbus-1-devel-docUpgrade libdbus-1-3Upgrade dbus-1-32bitUpgrade dbus-1-x11Upgrade libdbus-1-3-32bit | Dec 12, 2013 | Jul 3, 2013 |
| Ubuntu | — | Upgrade libdbus-1-3 | Nov 8, 2024 | Jul 3, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub