← Back

Dbus

dbus

Vendor: Freedesktop • 24 CVEs

CVEs (24)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2009-1189
1Freedesktop
1Dbus
Apr 23, 2026
Apr 27, 2009
N/A· v4
N/A· v3
3.6 LOW· v2
The _dbus_validate_signature_with_reason function (dbus-marshal-validate.c) in D-Bus (aka DBus) before 1.2.14 uses incorrect logic to validate a basic type, which allows remote attackers to spoof a signature via a crafte...Show more
The _dbus_validate_signature_with_reason function (dbus-marshal-validate.c) in D-Bus (aka DBus) before 1.2.14 uses incorrect logic to validate a basic type, which allows remote attackers to spoof a signature via a crafted key. NOTE: this is due to an incorrect fix for CVE-2008-3834.Show less
CVE-2008-4311
1Freedesktop
1Dbus
Apr 23, 2026
Dec 10, 2008
N/A· v4
N/A· v3
4.6 MEDIUM· v2
The default configuration of system.conf in D-Bus (aka DBus) before 1.2.6 omits the send_type attribute in certain rules, which allows local users to bypass intended access restrictions by (1) sending messages, related t...Show more
The default configuration of system.conf in D-Bus (aka DBus) before 1.2.6 omits the send_type attribute in certain rules, which allows local users to bypass intended access restrictions by (1) sending messages, related to send_requested_reply; and possibly (2) receiving messages, related to receive_requested_reply.Show less
CVE-2008-3834
1Freedesktop
3Dbus
Dbus1.0Dbus1.1.0
Apr 23, 2026
Oct 7, 2008
N/A· v4
N/A· v3
2.1 LOW· v2
The dbus_signature_validate function in the D-bus library (libdbus) before 1.2.4 allows remote attackers to cause a denial of service (application abort) via a message containing a malformed signature, which triggers a f...Show more
The dbus_signature_validate function in the D-bus library (libdbus) before 1.2.4 allows remote attackers to cause a denial of service (application abort) via a message containing a malformed signature, which triggers a failed assertion error.Show less
CVE-2008-0595
4Fedoraproject
FreedesktopMandrakesoft+1 more
4Dbus
Enterprise LinuxFedora+1 more
Apr 23, 2026
Feb 29, 2008
N/A· v4
N/A· v3
4.6 MEDIUM· v2
dbus-daemon in D-Bus before 1.0.3, and 1.1.x before 1.1.20, recognizes send_interface attributes in allow directives in the security policy only for fully qualified method calls, which allows local users to bypass intend...Show more
dbus-daemon in D-Bus before 1.0.3, and 1.1.x before 1.1.20, recognizes send_interface attributes in allow directives in the security policy only for fully qualified method calls, which allows local users to bypass intended access restrictions via a method call with a NULL interface.Show less