A flaw was discovered in ibus in versions before 1.5.22 that allows any unprivileged user to monitor and send method calls to the ibus bus of another user due to a misconfiguration in the DBus server setup. A local attacker may use this flaw to intercept all keystrokes of a victim user who is using the graphical interface, change the input method engine, or modify other input related configurations of the victim user.
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade glib2-docUpgrade glib2-static | May 4, 2022 | Nov 25, 2019 |
| Amazon Linux Ami 2 | — | Upgrade ibus-setupUpgrade ibus-debuginfoUpgrade ibus-libsUpgrade ibusUpgrade ibus-pygtk2Upgrade ibus-develUpgrade ibus-gtk3Upgrade ibus-devel-docsUpgrade ibus-gtk2 | Nov 12, 2020 | Nov 25, 2019 |
| Centos_linux | — | Upgrade ibus-gtk2Upgrade ibus-gtk3Upgrade ibus-debugsourceUpgrade ibus-libsUpgrade ibus-gtk3-debuginfoUpgrade ibus-devel-docsUpgrade glib2-staticUpgrade glib2-tests-debuginfoUpgrade glib2-develUpgrade glib2-devel-debuginfoUpgrade ibus-develUpgrade glib2-famUpgrade ibus-wayland-debuginfoUpgrade glib2-debugsourceUpgrade ibus-pygtk2Upgrade glib2-fam-debuginfoUpgrade ibusUpgrade glib2Upgrade ibus-libs-debuginfoUpgrade glib2-docUpgrade ibus-gtk2-debuginfoUpgrade ibus-debuginfoUpgrade ibus-waylandUpgrade ibus-setupUpgrade ibus-tests-debuginfoUpgrade glib2-testsUpgrade glib2-debuginfo | Apr 29, 2020 | Nov 25, 2019 |
| Debian | — | Upgrade ibus | Sep 20, 2019 | Sep 20, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade ibus-setupUpgrade ibus-gtk3Upgrade ibusUpgrade ibus-libsUpgrade ibus-gtk2 | Sep 16, 2021 | Nov 25, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade ibus-setupUpgrade ibusUpgrade ibus-gtk2Upgrade ibus-libsUpgrade ibus-gtk3 | Apr 30, 2021 | Nov 25, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade ibus-setupUpgrade ibus-libsUpgrade ibus-gtk3Upgrade ibusUpgrade ibus-gtk2 | Mar 24, 2021 | Nov 25, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade ibus-libsUpgrade ibus-gtk3Upgrade ibus-setupUpgrade ibusUpgrade ibus-gtk2 | Aug 31, 2020 | Nov 25, 2019 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Sep 19, 2022 |
| Oracle Solaris | — | Upgrade system/input-method/ibus to version 1.5.19-11.4.42.0.1.113.0 on Solaris 11.4 | Feb 17, 2022 | Nov 25, 2019 |
| Oracle_linux | — | Upgrade ibus-pygtk2Upgrade ibus-setupUpgrade ibus-develUpgrade glib2-famUpgrade glib2-docUpgrade ibus-gtk3Upgrade ibusUpgrade ibus-gtk2Upgrade glib2-testsUpgrade ibus-devel-docsUpgrade glib2-develUpgrade glib2Upgrade ibus-libsUpgrade glib2-static | Oct 7, 2020 | Sep 13, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Nov 25, 2019 |
| Redhat_linux | — | Upgrade ibus-wayland-debuginfoUpgrade ibus-develUpgrade ibus-gtk3-debuginfoUpgrade glib2-staticUpgrade ibus-gtk3Upgrade glib2-debugsourceUpgrade ibus-gtk2-debuginfoUpgrade glib2-tests-debuginfoUpgrade ibus-debugsourceUpgrade glib2-develUpgrade glib2-testsUpgrade ibus-tests-debuginfoUpgrade ibusUpgrade glib2-devel-debuginfoUpgrade glib2-debuginfoUpgrade ibus-waylandUpgrade glib2-fam-debuginfoUpgrade ibus-pygtk2Upgrade ibus-devel-docsUpgrade ibus-setupUpgrade glib2-famNo solution existsUpgrade ibus-gtk2Upgrade glib2-docUpgrade ibus-libs-debuginfoUpgrade ibus-debuginfoUpgrade ibus-libsUpgrade glib2 | Apr 29, 2020 | Nov 25, 2019 |
| Suse | — | Upgrade ibus-gtk3Upgrade python-ibusUpgrade libibus-1_0-5Upgrade ibus-langUpgrade ibus-gtk3-32bitUpgrade ibus-dict-emojiUpgrade python3-ibusUpgrade typelib-1_0-IBus-1_0Upgrade ibus-develUpgrade libibus-1_0-5-32bitUpgrade ibus-gtkUpgrade ibus-gtk-32bitUpgrade ibus-branding-openSUSE-KDEUpgrade ibus | Sep 18, 2019 | Sep 16, 2019 |
| Ubuntu | — | Upgrade ibus | Sep 16, 2019 | Sep 16, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub