A flaw was discovered in ibus in versions before 1.5.22 that allows any unprivileged user to monitor and send method calls to the ibus bus of another user due to a misconfiguration in the DBus server setup. A local attacker may use this flaw to intercept all keystrokes of a victim user who is using the graphical interface, change the input method engine, or modify other input related configurations of the victim user.
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-glib2-docalma-upgrade-glib2-static | May 4, 2022 | Nov 25, 2019 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-ibusamazon-linux-ami-2-upgrade-ibus-debuginfoamazon-linux-ami-2-upgrade-ibus-develamazon-linux-ami-2-upgrade-ibus-devel-docsamazon-linux-ami-2-upgrade-ibus-gtk2amazon-linux-ami-2-upgrade-ibus-gtk3amazon-linux-ami-2-upgrade-ibus-libsamazon-linux-ami-2-upgrade-ibus-pygtk2amazon-linux-ami-2-upgrade-ibus-setup | Nov 12, 2020 | Nov 25, 2019 | |
| Centos_linux | — | centos-upgrade-glib2centos-upgrade-glib2-debuginfocentos-upgrade-glib2-debugsourcecentos-upgrade-glib2-develcentos-upgrade-glib2-devel-debuginfocentos-upgrade-glib2-doccentos-upgrade-glib2-famcentos-upgrade-glib2-fam-debuginfocentos-upgrade-glib2-staticcentos-upgrade-glib2-testscentos-upgrade-glib2-tests-debuginfocentos-upgrade-ibuscentos-upgrade-ibus-debuginfocentos-upgrade-ibus-debugsourcecentos-upgrade-ibus-develcentos-upgrade-ibus-devel-docscentos-upgrade-ibus-gtk2centos-upgrade-ibus-gtk2-debuginfocentos-upgrade-ibus-gtk3centos-upgrade-ibus-gtk3-debuginfocentos-upgrade-ibus-libscentos-upgrade-ibus-libs-debuginfocentos-upgrade-ibus-pygtk2centos-upgrade-ibus-setupcentos-upgrade-ibus-tests-debuginfocentos-upgrade-ibus-waylandcentos-upgrade-ibus-wayland-debuginfo | Apr 29, 2020 | Nov 25, 2019 |
| Debian | debian-upgrade-ibus | Sep 20, 2019 | Sep 20, 2019 | |
| Huawei Euleros 2_0_sp2 | huawei-euleros-2_0_sp2-upgrade-ibushuawei-euleros-2_0_sp2-upgrade-ibus-gtk2huawei-euleros-2_0_sp2-upgrade-ibus-gtk3huawei-euleros-2_0_sp2-upgrade-ibus-libshuawei-euleros-2_0_sp2-upgrade-ibus-setup | Sep 16, 2021 | Nov 25, 2019 | |
| Huawei Euleros 2_0_sp3 | huawei-euleros-2_0_sp3-upgrade-ibushuawei-euleros-2_0_sp3-upgrade-ibus-gtk2huawei-euleros-2_0_sp3-upgrade-ibus-gtk3huawei-euleros-2_0_sp3-upgrade-ibus-libshuawei-euleros-2_0_sp3-upgrade-ibus-setup | Apr 30, 2021 | Nov 25, 2019 | |
| Huawei Euleros 2_0_sp5 | huawei-euleros-2_0_sp5-upgrade-ibushuawei-euleros-2_0_sp5-upgrade-ibus-gtk2huawei-euleros-2_0_sp5-upgrade-ibus-gtk3huawei-euleros-2_0_sp5-upgrade-ibus-libshuawei-euleros-2_0_sp5-upgrade-ibus-setup | Mar 24, 2021 | Nov 25, 2019 | |
| Huawei Euleros 2_0_sp8 | huawei-euleros-2_0_sp8-upgrade-ibushuawei-euleros-2_0_sp8-upgrade-ibus-gtk2huawei-euleros-2_0_sp8-upgrade-ibus-gtk3huawei-euleros-2_0_sp8-upgrade-ibus-libshuawei-euleros-2_0_sp8-upgrade-ibus-setup | Aug 31, 2020 | Nov 25, 2019 | |
| Nutanix Ahv | nutanix-ahv-upgrade-latest | Jun 5, 2026 | Sep 19, 2022 | |
| Oracle Solaris | oracle-solaris-11-4-upgrade-system-input-method-ibus-1-5-19-11-4-42-0-1-113-0 | Feb 17, 2022 | Nov 25, 2019 | |
| Oracle_linux | — | oracle-linux-upgrade-glib2oracle-linux-upgrade-glib2-develoracle-linux-upgrade-glib2-docoracle-linux-upgrade-glib2-famoracle-linux-upgrade-glib2-staticoracle-linux-upgrade-glib2-testsoracle-linux-upgrade-ibusoracle-linux-upgrade-ibus-develoracle-linux-upgrade-ibus-devel-docsoracle-linux-upgrade-ibus-gtk2oracle-linux-upgrade-ibus-gtk3oracle-linux-upgrade-ibus-libsoracle-linux-upgrade-ibus-pygtk2oracle-linux-upgrade-ibus-setup | Oct 7, 2020 | Sep 13, 2019 |
| Redhat Openshift | linuxrpm-upgrade-redhat-coreos | Dec 29, 2020 | Nov 25, 2019 | |
| Redhat_linux | no-fix-redhat-rpm-packageredhat-upgrade-glib2redhat-upgrade-glib2-debuginforedhat-upgrade-glib2-debugsourceredhat-upgrade-glib2-develredhat-upgrade-glib2-devel-debuginforedhat-upgrade-glib2-docredhat-upgrade-glib2-famredhat-upgrade-glib2-fam-debuginforedhat-upgrade-glib2-staticredhat-upgrade-glib2-testsredhat-upgrade-glib2-tests-debuginforedhat-upgrade-ibusredhat-upgrade-ibus-debuginforedhat-upgrade-ibus-debugsourceredhat-upgrade-ibus-develredhat-upgrade-ibus-devel-docsredhat-upgrade-ibus-gtk2redhat-upgrade-ibus-gtk2-debuginforedhat-upgrade-ibus-gtk3redhat-upgrade-ibus-gtk3-debuginforedhat-upgrade-ibus-libsredhat-upgrade-ibus-libs-debuginforedhat-upgrade-ibus-pygtk2redhat-upgrade-ibus-setupredhat-upgrade-ibus-tests-debuginforedhat-upgrade-ibus-waylandredhat-upgrade-ibus-wayland-debuginfo | Apr 29, 2020 | Nov 25, 2019 | |
| Suse | — | suse-upgrade-ibussuse-upgrade-ibus-branding-opensuse-kdesuse-upgrade-ibus-develsuse-upgrade-ibus-dict-emojisuse-upgrade-ibus-gtksuse-upgrade-ibus-gtk-32bitsuse-upgrade-ibus-gtk3suse-upgrade-ibus-gtk3-32bitsuse-upgrade-ibus-langsuse-upgrade-libibus-1_0-5suse-upgrade-libibus-1_0-5-32bitsuse-upgrade-python-ibussuse-upgrade-python3-ibussuse-upgrade-typelib-1_0-ibus-1_0 | Sep 18, 2019 | Sep 16, 2019 |
| Ubuntu | ubuntu-upgrade-ibus | Sep 16, 2019 | Sep 16, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub