IT

Tracker / CVE-2014-3532

CVE-2014-3532

Low 2.1

dbus 1.3.0 before 1.6.22 and 1.8.x before 1.8.6, when running on Linux 2.6.37-rc4 or later, allows local users to cause a denial of service (system-bus disconnect of other services or applications) by sending a message containing a file descriptor, then exceeding the maximum recursion depth before the initial message is forwarded.

Affected products and versions

debian debian_linux
freedesktop dbus · 1.3.0 → 1.6.22
freedesktop dbus · 1.8.0 → 1.8.6
mageia mageia
opensuse opensuse
oracle solaris

Analysis

This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.

References