ALT-PU-2014-2148-1
Closed vulnerabilities
BDU:2015-04278
Уязвимость операционной системы SUSE Linux Enterprise, позволяющая злоумышленнику нарушить доступность защищаемой информации
BDU:2015-04279
Уязвимость операционной системы SUSE Linux Enterprise, позволяющая злоумышленнику нарушить доступность защищаемой информации
BDU:2015-04280
Уязвимость операционной системы SUSE Linux Enterprise, позволяющая злоумышленнику нарушить доступность защищаемой информации
BDU:2015-04281
Уязвимость операционной системы SUSE Linux Enterprise, позволяющая злоумышленнику нарушить доступность защищаемой информации
BDU:2015-04282
Уязвимость операционной системы SUSE Linux Enterprise, позволяющая злоумышленнику нарушить доступность защищаемой информации
BDU:2015-09788
Уязвимости операционной системы Gentoo Linux, позволяющие удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации
Modified: 2024-11-21
CVE-2014-3635
Off-by-one error in D-Bus 1.3.0 through 1.6.x before 1.6.24 and 1.8.x before 1.8.8, when running on a 64-bit system and the max_message_unix_fds limit is set to an odd number, allows local users to cause a denial of service (dbus-daemon crash) or possibly execute arbitrary code by sending one more file descriptor than the limit, which triggers a heap-based buffer overflow or an assertion failure.
- http://advisories.mageia.org/MGASA-2014-0395.html
- http://advisories.mageia.org/MGASA-2014-0395.html
- openSUSE-SU-2014:1239
- openSUSE-SU-2014:1239
- 61378
- 61378
- DSA-3026
- DSA-3026
- MDVSA-2015:176
- MDVSA-2015:176
- [oss-security] 20140916 CVE-2014-3635 to 3639: security issues in D-Bus < 1.8.8
- [oss-security] 20140916 CVE-2014-3635 to 3639: security issues in D-Bus < 1.8.8
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- 1030864
- 1030864
- USN-2352-1
- USN-2352-1
- https://bugs.freedesktop.org/show_bug.cgi?id=83622
- https://bugs.freedesktop.org/show_bug.cgi?id=83622
Modified: 2024-11-21
CVE-2014-3636
D-Bus 1.3.0 through 1.6.x before 1.6.24 and 1.8.x before 1.8.8 allows local users to (1) cause a denial of service (prevention of new connections and connection drop) by queuing the maximum number of file descriptors or (2) cause a denial of service (disconnect) via multiple messages that combine to have more than the allowed number of file descriptors for a single sendmsg call.
- http://advisories.mageia.org/MGASA-2014-0395.html
- http://advisories.mageia.org/MGASA-2014-0395.html
- openSUSE-SU-2014:1239
- openSUSE-SU-2014:1239
- 61378
- 61378
- DSA-3026
- DSA-3026
- MDVSA-2015:176
- MDVSA-2015:176
- [oss-security] 20140916 CVE-2014-3635 to 3639: security issues in D-Bus < 1.8.8
- [oss-security] 20140916 CVE-2014-3635 to 3639: security issues in D-Bus < 1.8.8
- 1030864
- 1030864
- USN-2352-1
- USN-2352-1
- https://bugs.freedesktop.org/show_bug.cgi?id=82820
- https://bugs.freedesktop.org/show_bug.cgi?id=82820
Modified: 2024-11-21
CVE-2014-3637
D-Bus 1.3.0 through 1.6.x before 1.6.24 and 1.8.x before 1.8.8 does not properly close connections for processes that have terminated, which allows local users to cause a denial of service via a D-bus message containing a D-Bus connection file descriptor.
- http://advisories.mageia.org/MGASA-2014-0395.html
- http://advisories.mageia.org/MGASA-2014-0395.html
- openSUSE-SU-2014:1239
- openSUSE-SU-2014:1239
- 61378
- 61378
- DSA-3026
- DSA-3026
- MDVSA-2015:176
- MDVSA-2015:176
- [oss-security] 20140916 CVE-2014-3635 to 3639: security issues in D-Bus < 1.8.8
- [oss-security] 20140916 CVE-2014-3635 to 3639: security issues in D-Bus < 1.8.8
- [oss-security] 20190624 Re: Thousands of vulnerabilities, almost no CVEs: OSS-Fuzz
- [oss-security] 20190624 Re: Thousands of vulnerabilities, almost no CVEs: OSS-Fuzz
- [oss-security] 20190624 Re: Thousands of vulnerabilities, almost no CVEs: OSS-Fuzz
- [oss-security] 20190624 Re: Thousands of vulnerabilities, almost no CVEs: OSS-Fuzz
- 1030864
- 1030864
- USN-2352-1
- USN-2352-1
- https://bugs.freedesktop.org/show_bug.cgi?id=80559
- https://bugs.freedesktop.org/show_bug.cgi?id=80559
Modified: 2024-11-21
CVE-2014-3638
The bus_connections_check_reply function in config-parser.c in D-Bus before 1.6.24 and 1.8.x before 1.8.8 allows local users to cause a denial of service (CPU consumption) via a large number of method calls.
- http://advisories.mageia.org/MGASA-2014-0395.html
- http://advisories.mageia.org/MGASA-2014-0395.html
- SUSE-SU-2014:1146
- SUSE-SU-2014:1146
- openSUSE-SU-2014:1239
- openSUSE-SU-2014:1239
- 61378
- 61378
- 61431
- 61431
- DSA-3026
- DSA-3026
- MDVSA-2015:176
- MDVSA-2015:176
- [oss-security] 20140916 CVE-2014-3635 to 3639: security issues in D-Bus < 1.8.8
- [oss-security] 20140916 CVE-2014-3635 to 3639: security issues in D-Bus < 1.8.8
- 1030864
- 1030864
- USN-2352-1
- USN-2352-1
- https://bugs.freedesktop.org/show_bug.cgi?id=81053
- https://bugs.freedesktop.org/show_bug.cgi?id=81053
Modified: 2024-11-21
CVE-2014-3639
The dbus-daemon in D-Bus before 1.6.24 and 1.8.x before 1.8.8 does not properly close old connections, which allows local users to cause a denial of service (incomplete connection consumption and prevention of new connections) via a large number of incomplete connections.
- http://advisories.mageia.org/MGASA-2014-0395.html
- http://advisories.mageia.org/MGASA-2014-0395.html
- SUSE-SU-2014:1146
- SUSE-SU-2014:1146
- openSUSE-SU-2014:1239
- openSUSE-SU-2014:1239
- 61378
- 61378
- 61431
- 61431
- DSA-3026
- DSA-3026
- MDVSA-2015:176
- MDVSA-2015:176
- [oss-security] 20140916 CVE-2014-3635 to 3639: security issues in D-Bus < 1.8.8
- [oss-security] 20140916 CVE-2014-3635 to 3639: security issues in D-Bus < 1.8.8
- 1030864
- 1030864
- USN-2352-1
- USN-2352-1
- https://bugs.freedesktop.org/show_bug.cgi?id=80919
- https://bugs.freedesktop.org/show_bug.cgi?id=80919
Closed bugs
теряет все сессии при обновлении пакета