An issue was discovered in D-Bus before 1.12.24, 1.13.x and 1.14.x before 1.14.4, and 1.15.x before 1.15.2. An authenticated attacker can cause dbus-daemon and other programs that use libdbus to crash when receiving a message where an array length is inconsistent with the size of the element type.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade dbus-commonUpgrade dbus-develUpgrade dbus-libsUpgrade dbus-x11Upgrade dbus-toolsUpgrade dbus-daemonUpgrade dbus | Jan 16, 2023 | Oct 10, 2022 |
| Alpine Linux | — | Upgrade dbus | Mar 26, 2024 | Oct 9, 2022 |
| Amazon Linux Ami 2 | — | Upgrade dbus-x11Upgrade dbus-libsUpgrade dbus-docUpgrade dbus-develUpgrade dbus-debuginfoUpgrade dbusUpgrade dbus-tests | Apr 6, 2023 | Oct 10, 2022 |
| Amazon_linux | — | Upgrade dbus | Apr 21, 2023 | Oct 10, 2022 |
| Amazon_linux_2023 | — | Upgrade dbus-docUpgrade dbus-daemon-debuginfoUpgrade dbus-x11Upgrade dbus-daemonUpgrade dbus-toolsUpgrade dbus-libsUpgrade dbusUpgrade dbus-x11-debuginfoUpgrade dbus-commonUpgrade dbus-debuginfoUpgrade dbus-develUpgrade dbus-tests-debuginfoUpgrade dbus-libs-debuginfoUpgrade dbus-debugsourceUpgrade dbus-testsUpgrade dbus-tools-debuginfo | Feb 17, 2025 | Oct 5, 2022 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Oct 9, 2022 |
| Centos_linux | — | Upgrade dbus-daemon-debuginfoUpgrade dbus-develUpgrade dbus-x11-debuginfoUpgrade dbus-x11Upgrade dbus-debugsourceUpgrade dbus-debuginfoUpgrade dbusUpgrade dbus-commonUpgrade dbus-libs-debuginfoUpgrade dbus-tools-debuginfoUpgrade dbus-libsUpgrade dbus-toolsUpgrade dbus-daemonUpgrade dbus-tests-debuginfo | Jan 13, 2023 | Oct 10, 2022 |
| Debian | — | Upgrade dbus | Oct 12, 2022 | Oct 10, 2022 |
| Dell Powerstore Dsa2023366 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Oct 5, 2023 |
| Gentoo Linux | — | Upgrade sys-apps/dbus. | May 4, 2023 | Oct 10, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade dbus-daemonUpgrade dbus-toolsUpgrade dbus-libsUpgrade dbusUpgrade dbus-common | Feb 13, 2023 | Oct 10, 2022 |
| Huawei Euleros 2_0_sp11 | — | Upgrade dbus-commonUpgrade dbus-daemonUpgrade dbus-libsUpgrade dbusUpgrade dbus-tools | Jan 6, 2023 | Oct 10, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade dbus-libsUpgrade dbus-x11Upgrade dbus-develUpgrade dbus | Mar 9, 2023 | Oct 10, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade dbusUpgrade dbus-libsUpgrade dbus-toolsUpgrade dbus-daemonUpgrade dbus-commonUpgrade dbus-develUpgrade dbus-x11 | Dec 9, 2022 | Oct 10, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade dbus-commonUpgrade dbus-libsUpgrade dbus-toolsUpgrade dbusUpgrade dbus-daemon | Jan 9, 2023 | Oct 10, 2022 |
| Oracle_linux | — | Upgrade dbus-daemonUpgrade dbus-toolsUpgrade dbusUpgrade dbus-commonUpgrade dbus-develUpgrade dbus-libsUpgrade dbus-x11 | Jan 13, 2023 | Oct 5, 2022 |
| Redhat_linux | — | Upgrade dbus-debugsourceUpgrade dbus-daemon-debuginfoUpgrade dbusUpgrade dbus-libsUpgrade dbus-x11Upgrade dbus-daemonUpgrade dbus-toolsUpgrade dbus-tests-debuginfoNo solution existsUpgrade dbus-tools-debuginfoUpgrade dbus-develUpgrade dbus-libs-debuginfoUpgrade dbus-debuginfoUpgrade dbus-x11-debuginfoUpgrade dbus-common | Dec 7, 2022 | Oct 10, 2022 |
| Rocky_linux | — | Upgrade dbus-toolsUpgrade dbus-debugsourceUpgrade dbus-x11-debuginfoUpgrade dbus-libsUpgrade dbus-develUpgrade dbusUpgrade dbus-x11Upgrade dbus-debuginfoUpgrade dbus-daemon-debuginfoUpgrade dbus-daemonUpgrade dbus-libs-debuginfoUpgrade dbus-tools-debuginfo | Mar 12, 2024 | Oct 10, 2022 |
| Suse | — | Upgrade libdbus-1-3-32bitUpgrade dbus-1-devel-docUpgrade dbus-1-develUpgrade dbus-1-x11Upgrade libdbus-1-3Upgrade dbus-1-devel-32bitUpgrade dbus-1 | Oct 28, 2022 | Oct 10, 2022 |
| Ubuntu | — | Upgrade libdbus-1-3 (Ubuntu Pro)Upgrade dbus (Ubuntu Pro)Upgrade dbusUpgrade libdbus-1-3 | Oct 28, 2022 | Oct 10, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Oct 9, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub