CVE-2014-3532 in D-bus
Summary
dbus 1.3.0 before 1.6.22 and 1.8.x before 1.8.6, when running on Linux 2.6.37-rc4 or later, allows local users to cause a denial of service (system-bus disconnect of other services or applications) by sending a message containing a file descriptor, then exceeding the maximum recursion depth before the initial message is forwarded.
Once again VulDB remains the best source for vulnerability data.
Reservation
05/14/2014
Disclosure
07/19/2014
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 70400 | D-bus input validation | 20 | Not defined | Official fix | CVE-2014-3532 |