An issue was discovered in dbus >= 1.3.0 before 1.12.18. The DBusServer in libdbus, as used in dbus-daemon, leaks file descriptors when a message exceeds the per-message file descriptor limit. A local attacker with access to the D-Bus system bus or another system service's private AF_UNIX socket could use this to make the system service reach its file descriptor limit, denying service to subsequent D-Bus clients.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade dbus | Mar 26, 2024 | Jun 8, 2020 |
| Amazon Linux Ami 2 | — | Upgrade dbus-debuginfoUpgrade dbus-testsUpgrade dbusUpgrade dbus-docUpgrade dbus-libsUpgrade dbus-develUpgrade dbus-x11 | Nov 10, 2022 | Jun 8, 2020 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jun 8, 2020 |
| Centos_linux | — | Upgrade dbus-debuginfoUpgrade dbusUpgrade dbus-daemonUpgrade dbus-testsUpgrade dbus-daemon-debuginfoUpgrade dbus-toolsUpgrade dbus-tests-debuginfoUpgrade dbus-tools-debuginfoUpgrade dbus-docUpgrade dbus-develUpgrade dbus-libs-debuginfoUpgrade dbus-x11-debuginfoUpgrade dbus-libsUpgrade dbus-debugsourceUpgrade dbus-commonUpgrade dbus-x11 | Jul 14, 2020 | Jun 8, 2020 |
| Debian | — | Upgrade dbus | Jun 8, 2020 | Jun 8, 2020 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Apr 12, 2021 |
| Freebsd | — | Upgrade dbus | Jul 4, 2020 | Jul 3, 2020 |
| Gentoo Linux | — | Upgrade sys-apps/dbus. | Jul 28, 2020 | Jun 8, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade dbus-develUpgrade dbus-libsUpgrade dbusUpgrade dbus-x11 | Nov 3, 2020 | Jun 8, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade dbus-x11Upgrade dbusUpgrade dbus-libsUpgrade dbus-devel | Sep 28, 2020 | Jun 8, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade dbus-libsUpgrade dbus-x11Upgrade dbusUpgrade dbus-devel | Nov 2, 2020 | Jun 8, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade dbus-commonUpgrade dbus-develUpgrade dbus-libsUpgrade dbus-toolsUpgrade dbus-daemonUpgrade dbus-x11Upgrade dbus | Jul 31, 2020 | Jun 8, 2020 |
| Oracle Solaris | — | Upgrade system/library/dbus to version 1.10.32-11.4.27.0.1.82.0 on Solaris 11.4Upgrade system/library/libdbus to version 1.10.32-11.4.27.0.1.82.0 on Solaris 11.4Upgrade system/library/dbus/dbus-x11 to version 1.10.32-11.4.27.0.1.82.0 on Solaris 11.4 | Jan 19, 2021 | Jun 8, 2020 |
| Oracle_linux | — | Upgrade dbus-toolsUpgrade dbus-daemonUpgrade dbus-testsUpgrade dbus-libsUpgrade dbusUpgrade dbus-docUpgrade dbus-x11Upgrade dbus-develUpgrade dbus-common | Jul 22, 2020 | Jun 4, 2020 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Jun 8, 2020 |
| Redhat_linux | — | Upgrade dbus-tools-debuginfoUpgrade dbus-commonUpgrade dbus-tests-debuginfoUpgrade dbus-daemon-debuginfoUpgrade dbus-testsUpgrade dbus-daemonUpgrade dbus-libs-debuginfoUpgrade dbusUpgrade dbus-debuginfoUpgrade dbus-toolsUpgrade dbus-develUpgrade dbus-x11Upgrade dbus-x11-debuginfoUpgrade dbus-debugsourceUpgrade dbus-libsUpgrade dbus-doc | Jul 14, 2020 | Jun 8, 2020 |
| Suse | — | Upgrade dbus-1Upgrade libdbus-1-3-32bitUpgrade libdbus-1-3Upgrade dbus-1-develUpgrade dbus-1-x11Upgrade dbus-1-devel-32bitUpgrade dbus-1-devel-doc | Jul 22, 2021 | Jun 8, 2020 |
| Ubuntu | — | Upgrade libdbus-1-3 (Ubuntu Pro)Upgrade dbusUpgrade libdbus-1-3 | Jun 17, 2020 | Jun 8, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jun 8, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub