D-Bus before 1.15.6 sometimes allows unprivileged users to crash dbus-daemon. If a privileged user with control over the dbus-daemon is using the org.freedesktop.DBus.Monitoring interface to monitor message bus traffic, then an unprivileged user with the ability to connect to the same dbus-daemon can cause a dbus-daemon crash under some circumstances via an unreplyable message. When done on the well-known system bus, this is a denial-of-service vulnerability. The fixed versions are 1.12.28, 1.14.8, and 1.15.6.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-dbusalma-upgrade-dbus-commonalma-upgrade-dbus-daemonalma-upgrade-dbus-develalma-upgrade-dbus-libsalma-upgrade-dbus-toolsalma-upgrade-dbus-x11 | Aug 9, 2023 | Jun 8, 2023 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-dbusamazon-linux-ami-2-upgrade-dbus-debuginfoamazon-linux-ami-2-upgrade-dbus-develamazon-linux-ami-2-upgrade-dbus-docamazon-linux-ami-2-upgrade-dbus-libsamazon-linux-ami-2-upgrade-dbus-testsamazon-linux-ami-2-upgrade-dbus-x11 | Jan 23, 2024 | Jun 8, 2023 | |
| Amazon_linux_2023 | amazon-linux-2023-upgrade-dbusamazon-linux-2023-upgrade-dbus-commonamazon-linux-2023-upgrade-dbus-daemonamazon-linux-2023-upgrade-dbus-daemon-debuginfoamazon-linux-2023-upgrade-dbus-debuginfoamazon-linux-2023-upgrade-dbus-debugsourceamazon-linux-2023-upgrade-dbus-develamazon-linux-2023-upgrade-dbus-docamazon-linux-2023-upgrade-dbus-libsamazon-linux-2023-upgrade-dbus-libs-debuginfoamazon-linux-2023-upgrade-dbus-testsamazon-linux-2023-upgrade-dbus-tests-debuginfoamazon-linux-2023-upgrade-dbus-toolsamazon-linux-2023-upgrade-dbus-tools-debuginfoamazon-linux-2023-upgrade-dbus-x11amazon-linux-2023-upgrade-dbus-x11-debuginfo | Feb 17, 2025 | Jun 6, 2023 | |
| Centos_linux | — | centos-upgrade-dbuscentos-upgrade-dbus-commoncentos-upgrade-dbus-daemoncentos-upgrade-dbus-daemon-debuginfocentos-upgrade-dbus-debuginfocentos-upgrade-dbus-debugsourcecentos-upgrade-dbus-develcentos-upgrade-dbus-libscentos-upgrade-dbus-libs-debuginfocentos-upgrade-dbus-tests-debuginfocentos-upgrade-dbus-toolscentos-upgrade-dbus-tools-debuginfocentos-upgrade-dbus-x11centos-upgrade-dbus-x11-debuginfo | Aug 8, 2023 | Jun 8, 2023 |
| Debian | debian-upgrade-dbus | Oct 25, 2023 | Jun 8, 2023 | |
| Huawei Euleros 2_0_sp10 | huawei-euleros-2_0_sp10-upgrade-dbushuawei-euleros-2_0_sp10-upgrade-dbus-commonhuawei-euleros-2_0_sp10-upgrade-dbus-daemonhuawei-euleros-2_0_sp10-upgrade-dbus-libshuawei-euleros-2_0_sp10-upgrade-dbus-tools | Jan 10, 2024 | Jun 8, 2023 | |
| Huawei Euleros 2_0_sp11 | huawei-euleros-2_0_sp11-upgrade-dbushuawei-euleros-2_0_sp11-upgrade-dbus-commonhuawei-euleros-2_0_sp11-upgrade-dbus-daemonhuawei-euleros-2_0_sp11-upgrade-dbus-libshuawei-euleros-2_0_sp11-upgrade-dbus-tools | Jan 10, 2024 | Jun 8, 2023 | |
| Huawei Euleros 2_0_sp8 | huawei-euleros-2_0_sp8-upgrade-dbushuawei-euleros-2_0_sp8-upgrade-dbus-commonhuawei-euleros-2_0_sp8-upgrade-dbus-daemonhuawei-euleros-2_0_sp8-upgrade-dbus-develhuawei-euleros-2_0_sp8-upgrade-dbus-libshuawei-euleros-2_0_sp8-upgrade-dbus-toolshuawei-euleros-2_0_sp8-upgrade-dbus-x11 | Jan 10, 2024 | Jun 8, 2023 | |
| Huawei Euleros 2_0_sp9 | huawei-euleros-2_0_sp9-upgrade-dbushuawei-euleros-2_0_sp9-upgrade-dbus-commonhuawei-euleros-2_0_sp9-upgrade-dbus-daemonhuawei-euleros-2_0_sp9-upgrade-dbus-libshuawei-euleros-2_0_sp9-upgrade-dbus-tools | Aug 9, 2023 | Jun 8, 2023 | |
| Nutanix Ahv | nutanix-ahv-upgrade-latest | Jun 5, 2026 | Sep 22, 2023 | |
| Oracle_linux | — | oracle-linux-upgrade-dbusoracle-linux-upgrade-dbus-commonoracle-linux-upgrade-dbus-daemonoracle-linux-upgrade-dbus-develoracle-linux-upgrade-dbus-libsoracle-linux-upgrade-dbus-toolsoracle-linux-upgrade-dbus-x11 | Aug 8, 2023 | Jun 6, 2023 |
| Redhat_linux | redhat-upgrade-dbusredhat-upgrade-dbus-commonredhat-upgrade-dbus-daemonredhat-upgrade-dbus-daemon-debuginforedhat-upgrade-dbus-debuginforedhat-upgrade-dbus-debugsourceredhat-upgrade-dbus-develredhat-upgrade-dbus-libsredhat-upgrade-dbus-libs-debuginforedhat-upgrade-dbus-tests-debuginforedhat-upgrade-dbus-toolsredhat-upgrade-dbus-tools-debuginforedhat-upgrade-dbus-x11redhat-upgrade-dbus-x11-debuginfo | Aug 8, 2023 | Jun 8, 2023 | |
| Rocky_linux | rocky-upgrade-dbusrocky-upgrade-dbus-daemonrocky-upgrade-dbus-daemon-debuginforocky-upgrade-dbus-debuginforocky-upgrade-dbus-debugsourcerocky-upgrade-dbus-develrocky-upgrade-dbus-libsrocky-upgrade-dbus-libs-debuginforocky-upgrade-dbus-toolsrocky-upgrade-dbus-tools-debuginforocky-upgrade-dbus-x11rocky-upgrade-dbus-x11-debuginfo | Mar 5, 2024 | Jun 8, 2023 | |
| Suse | — | suse-upgrade-dbus-1suse-upgrade-dbus-1-develsuse-upgrade-dbus-1-devel-32bitsuse-upgrade-dbus-1-devel-docsuse-upgrade-dbus-1-x11suse-upgrade-libdbus-1-3suse-upgrade-libdbus-1-3-32bit | Jul 20, 2023 | Jun 8, 2023 |
| Ubuntu | ubuntu-pro-upgrade-dbusubuntu-pro-upgrade-libdbus-1-3 | Sep 18, 2023 | Jun 8, 2023 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | Jun 8, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub