CVE-2008-3834

Published: Oct 7, 2008Modified: Apr 23, 2026

2.1

Vector

AV:L/AC:L/Au:N/C:N/I:N/A:P

Exploitability: 3.9 / Impact: 2.9

Source: NVD

Description

The dbus_signature_validate function in the D-bus library (libdbus) before 1.2.4 allows remote attackers to cause a denial of service (application abort) via a message containing a malformed signature, which triggers a failed assertion error.

Affected (44)

Products: Freedesktop: Dbus, Dbus1.0, Dbus1.1.0

3 products

Configuration A

44 vulnerable

Vulnerable Software	Affected Versions
Freedesktop Dbus	Up to 1.1.4
Freedesktop Dbus	Version 0.10
Freedesktop Dbus	Version 0.11
Freedesktop Dbus	Version 0.12
Freedesktop Dbus	Version 0.13
Freedesktop Dbus	Version 0.1
Freedesktop Dbus	Version 0.20
Freedesktop Dbus	Version 0.21
Freedesktop Dbus	Version 0.22
Freedesktop Dbus	Version 0.23.1
Freedesktop Dbus	Version 0.23.2
Freedesktop Dbus	Version 0.23.3
Freedesktop Dbus	Version 0.23
Freedesktop Dbus	Version 0.2
Freedesktop Dbus	Version 0.31
Freedesktop Dbus	Version 0.32
Freedesktop Dbus	Version 0.33
Freedesktop Dbus	Version 0.34
Freedesktop Dbus	Version 0.35.1
Freedesktop Dbus	Version 0.35.2
Freedesktop Dbus	Version 0.35
Freedesktop Dbus	Version 0.36.1
Freedesktop Dbus	Version 0.36.2
Freedesktop Dbus	Version 0.36
Freedesktop Dbus	Version 0.3
Freedesktop Dbus	Version 0.4
Freedesktop Dbus	Version 0.50
Freedesktop Dbus	Version 0.5
Freedesktop Dbus	Version 0.61
Freedesktop Dbus	Version 0.62
Freedesktop Dbus	Version 0.6
Freedesktop Dbus	Version 0.7
Freedesktop Dbus	Version 0.8
Freedesktop Dbus	Version 0.90
Freedesktop Dbus	Version 0.91
Freedesktop Dbus	Version 0.92
Freedesktop Dbus	Version 0.9
Freedesktop Dbus	Version 1.0.2
Freedesktop Dbus	Version 1.1.1
Freedesktop Dbus	Version 1.1.2
Freedesktop Dbus1.0	Version rc1
Freedesktop Dbus1.0	Version rc2
Freedesktop Dbus1.0	Version rc3
Freedesktop Dbus1.1.0	All versions

Related CWEs

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (44)

http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2008-12/msg00002.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-updates/2012-10/msg00094.html

Source: secalert@redhat.com

http://secunia.com/advisories/32127

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/32230

Source: secalert@redhat.com

http://secunia.com/advisories/32281

Source: secalert@redhat.com

http://secunia.com/advisories/32385

Source: secalert@redhat.com

http://secunia.com/advisories/33396

Source: secalert@redhat.com

http://www.debian.org/security/2008/dsa-1658

Source: secalert@redhat.com

http://www.freedesktop.org/wiki/Software/dbus#head-dad0dab297a44f1d7a3b1259cfc06b583fd6a88a

Source: secalert@redhat.com

http://www.mandriva.com/security/advisories?name=MDVSA-2008:213

Source: secalert@redhat.com

http://www.redhat.com/support/errata/RHSA-2009-0008.html

Source: secalert@redhat.com

http://www.securityfocus.com/bid/31602

Source: secalert@redhat.com

http://www.securitytracker.com/id?1021063

Source: secalert@redhat.com

http://www.ubuntu.com/usn/usn-653-1

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2008/2762

Source: secalert@redhat.com

https://bugs.freedesktop.org/show_bug.cgi?id=17803

Source: secalert@redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2008-3834

Source: secalert@redhat.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/45701

Source: secalert@redhat.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10253

Source: secalert@redhat.com

https://www.exploit-db.com/exploits/7822

Source: secalert@redhat.com

https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00298.html

Source: secalert@redhat.com

http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2008-12/msg00002.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-updates/2012-10/msg00094.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/32127

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/32230

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/32281

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/32385

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/33396

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.debian.org/security/2008/dsa-1658

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.freedesktop.org/wiki/Software/dbus#head-dad0dab297a44f1d7a3b1259cfc06b583fd6a88a

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mandriva.com/security/advisories?name=MDVSA-2008:213

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.redhat.com/support/errata/RHSA-2009-0008.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/31602

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securitytracker.com/id?1021063

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/usn-653-1

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2008/2762

Source: af854a3a-2127-422b-91ae-364da2661108

https://bugs.freedesktop.org/show_bug.cgi?id=17803

Source: af854a3a-2127-422b-91ae-364da2661108

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2008-3834

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/45701

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10253

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.exploit-db.com/exploits/7822

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00298.html

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.