D-Bus before 1.15.6 sometimes allows unprivileged users to crash dbus-daemon. If a privileged user with control over the dbus-daemon is using the org.freedesktop.DBus.Monitoring interface to monitor message bus traffic, then an unprivileged user with the ability to connect to the same dbus-daemon can cause a dbus-daemon crash under some circumstances via an unreplyable message. When done on the well-known system bus, this is a denial-of-service vulnerability. The fixed versions are 1.12.28, 1.14.8, and 1.15.6.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade dbus-commonUpgrade dbus-daemonUpgrade dbus-x11Upgrade dbusUpgrade dbus-libsUpgrade dbus-develUpgrade dbus-tools | Aug 9, 2023 | Jun 8, 2023 |
| Amazon Linux Ami 2 | — | Upgrade dbus-x11Upgrade dbus-docUpgrade dbus-testsUpgrade dbus-develUpgrade dbus-debuginfoUpgrade dbus-libsUpgrade dbus | Jan 23, 2024 | Jun 8, 2023 |
| Amazon_linux_2023 | — | Upgrade dbus-tests-debuginfoUpgrade dbus-daemon-debuginfoUpgrade dbus-libs-debuginfoUpgrade dbus-commonUpgrade dbus-tools-debuginfoUpgrade dbus-debuginfoUpgrade dbus-daemonUpgrade dbus-testsUpgrade dbus-debugsourceUpgrade dbus-toolsUpgrade dbus-docUpgrade dbus-libsUpgrade dbus-x11Upgrade dbus-develUpgrade dbusUpgrade dbus-x11-debuginfo | Feb 17, 2025 | Jun 6, 2023 |
| Centos_linux | — | Upgrade dbus-tools-debuginfoUpgrade dbus-daemonUpgrade dbus-libs-debuginfoUpgrade dbus-tests-debuginfoUpgrade dbus-commonUpgrade dbus-libsUpgrade dbus-toolsUpgrade dbus-daemon-debuginfoUpgrade dbus-develUpgrade dbus-debuginfoUpgrade dbus-debugsourceUpgrade dbus-x11-debuginfoUpgrade dbus-x11Upgrade dbus | Aug 8, 2023 | Jun 8, 2023 |
| Debian | — | Upgrade dbus | Oct 25, 2023 | Jun 8, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade dbus-toolsUpgrade dbusUpgrade dbus-libsUpgrade dbus-daemonUpgrade dbus-common | Jan 10, 2024 | Jun 8, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade dbus-commonUpgrade dbus-daemonUpgrade dbus-libsUpgrade dbus-toolsUpgrade dbus | Jan 10, 2024 | Jun 8, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade dbus-develUpgrade dbusUpgrade dbus-libsUpgrade dbus-commonUpgrade dbus-daemonUpgrade dbus-toolsUpgrade dbus-x11 | Jan 10, 2024 | Jun 8, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade dbus-commonUpgrade dbus-daemonUpgrade dbusUpgrade dbus-libsUpgrade dbus-tools | Aug 9, 2023 | Jun 8, 2023 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Sep 22, 2023 |
| Oracle_linux | — | Upgrade dbus-toolsUpgrade dbus-libsUpgrade dbus-x11Upgrade dbusUpgrade dbus-develUpgrade dbus-commonUpgrade dbus-daemon | Aug 8, 2023 | Jun 6, 2023 |
| Redhat_linux | — | Upgrade dbus-toolsUpgrade dbus-tools-debuginfoUpgrade dbus-tests-debuginfoUpgrade dbus-libsUpgrade dbus-daemonUpgrade dbus-debuginfoUpgrade dbusUpgrade dbus-libs-debuginfoUpgrade dbus-debugsourceUpgrade dbus-commonUpgrade dbus-develNo solution existsUpgrade dbus-daemon-debuginfoUpgrade dbus-x11Upgrade dbus-x11-debuginfo | Aug 8, 2023 | Jun 8, 2023 |
| Rocky_linux | — | Upgrade dbus-tools-debuginfoUpgrade dbus-debuginfoUpgrade dbus-daemonUpgrade dbusUpgrade dbus-x11-debuginfoUpgrade dbus-daemon-debuginfoUpgrade dbus-libs-debuginfoUpgrade dbus-libsUpgrade dbus-toolsUpgrade dbus-develUpgrade dbus-x11Upgrade dbus-debugsource | Mar 5, 2024 | Jun 8, 2023 |
| Suse | — | Upgrade libdbus-1-3Upgrade dbus-1-x11Upgrade libdbus-1-3-32bitUpgrade dbus-1-devel-32bitUpgrade dbus-1-develUpgrade dbus-1-devel-docUpgrade dbus-1 | Jul 20, 2023 | Jun 8, 2023 |
| Ubuntu | — | Upgrade libdbus-1-3 (Ubuntu Pro)Upgrade dbus (Ubuntu Pro) | Sep 18, 2023 | Jun 8, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jun 8, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub