CVE-2011-2200

Published: Jun 22, 2011Modified: Apr 29, 2026

4.6

Vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 3.9 / Impact: 6.4

Source: NVD

Description

The _dbus_header_byteswap function in dbus-marshal-header.c in D-Bus (aka DBus) 1.2.x before 1.2.28, 1.4.x before 1.4.12, and 1.5.x before 1.5.4 does not properly handle a non-native byte order, which allows local users to cause a denial of service (connection loss), obtain potentially sensitive information, or conduct unspecified state-modification attacks via crafted messages.

Affected (26)

Products: Freedesktop: Dbus · D Bus Project: D Bus

1 product

1 product

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Freedesktop Dbus	Version 1.5.0
Freedesktop Dbus	Version 1.5.2

Configuration B

6 vulnerable

Vulnerable Software	Affected Versions
Freedesktop Dbus	Version 1.4.0
Freedesktop Dbus	Version 1.4.10
Freedesktop Dbus	Version 1.4.1
Freedesktop Dbus	Version 1.4.4
Freedesktop Dbus	Version 1.4.6
Freedesktop Dbus	Version 1.4.8

Configuration C

18 vulnerable

Vulnerable Software	Affected Versions
D Bus Project D Bus	Version 1.2.4.2
D Bus Project D Bus	Version 1.2.4.4
D Bus Project D Bus	Version 1.2.4.6
Freedesktop Dbus	Version 1.2.10
Freedesktop Dbus	Version 1.2.12
Freedesktop Dbus	Version 1.2.14
Freedesktop Dbus	Version 1.2.16
Freedesktop Dbus	Version 1.2.18
Freedesktop Dbus	Version 1.2.1
Freedesktop Dbus	Version 1.2.20
Freedesktop Dbus	Version 1.2.22
Freedesktop Dbus	Version 1.2.24
Freedesktop Dbus	Version 1.2.26
Freedesktop Dbus	Version 1.2.2
Freedesktop Dbus	Version 1.2.3
Freedesktop Dbus	Version 1.2.4
Freedesktop Dbus	Version 1.2.6
Freedesktop Dbus	Version 1.2.8

Related CWEs

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (32)

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=629938

Source: secalert@redhat.com

http://cgit.freedesktop.org/dbus/dbus/commit/?h=dbus-1.2&id=6519a1f77c61d753d4c97efd6e15630eb275336e

Source: secalert@redhat.com

Patch

http://cgit.freedesktop.org/dbus/dbus/commit/?h=dbus-1.4&id=c3223ba6c401ba81df1305851312a47c485e6cd7

Source: secalert@redhat.com

Patch

http://cgit.freedesktop.org/dbus/dbus/tree/NEWS?h=dbus-1.2

Source: secalert@redhat.com

Patch

http://cgit.freedesktop.org/dbus/dbus/tree/NEWS?h=dbus-1.4

Source: secalert@redhat.com

http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705

Source: secalert@redhat.com

http://lists.freedesktop.org/archives/dbus/2007-March/007357.html

Source: secalert@redhat.com

http://lists.freedesktop.org/archives/dbus/2011-May/014408.html

Source: secalert@redhat.com

http://openwall.com/lists/oss-security/2011/06/12/1

Source: secalert@redhat.com

Patch

http://openwall.com/lists/oss-security/2011/06/12/2

Source: secalert@redhat.com

http://openwall.com/lists/oss-security/2011/06/13/12

Source: secalert@redhat.com

Patch

http://secunia.com/advisories/44896

Source: secalert@redhat.com

Vendor Advisory

http://www.redhat.com/support/errata/RHSA-2011-1132.html

Source: secalert@redhat.com

https://bugs.freedesktop.org/show_bug.cgi?id=38120

Source: secalert@redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=712676

Source: secalert@redhat.com

Patch

https://exchange.xforce.ibmcloud.com/vulnerabilities/67974

Source: secalert@redhat.com

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=629938

Source: af854a3a-2127-422b-91ae-364da2661108

http://cgit.freedesktop.org/dbus/dbus/commit/?h=dbus-1.2&id=6519a1f77c61d753d4c97efd6e15630eb275336e

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://cgit.freedesktop.org/dbus/dbus/commit/?h=dbus-1.4&id=c3223ba6c401ba81df1305851312a47c485e6cd7

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://cgit.freedesktop.org/dbus/dbus/tree/NEWS?h=dbus-1.2

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://cgit.freedesktop.org/dbus/dbus/tree/NEWS?h=dbus-1.4

Source: af854a3a-2127-422b-91ae-364da2661108

http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.freedesktop.org/archives/dbus/2007-March/007357.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.freedesktop.org/archives/dbus/2011-May/014408.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://openwall.com/lists/oss-security/2011/06/12/1

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://openwall.com/lists/oss-security/2011/06/12/2

Source: af854a3a-2127-422b-91ae-364da2661108

http://openwall.com/lists/oss-security/2011/06/13/12

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://secunia.com/advisories/44896

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.redhat.com/support/errata/RHSA-2011-1132.html

Source: af854a3a-2127-422b-91ae-364da2661108

https://bugs.freedesktop.org/show_bug.cgi?id=38120

Source: af854a3a-2127-422b-91ae-364da2661108

https://bugzilla.redhat.com/show_bug.cgi?id=712676

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

https://exchange.xforce.ibmcloud.com/vulnerabilities/67974

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.