Approved changes feed: RSS · Atom
cpe:2.3:a:freedesktop:dbus:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Freedesktop (2c544e5d-e68e-5b35-a616-dc08f0ba697e) |
|---|---|
| Product | Dbus (7e992f2d-f5d6-5884-a5a2-9325da73d4f4) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/dbus |
purl2cpe | 2026-06-01 10:14:03.804131 |
pkg:deb/ubuntu/dbus |
purl2cpe | 2026-06-01 10:14:03.804132 |
pkg:github/freedesktop/dbus |
purl2cpe | 2026-06-01 10:14:03.804134 |
pkg:gitlab/redhat/dbus |
purl2cpe | 2026-06-01 10:14:03.804135 |
pkg:rpm/centos/dbus |
purl2cpe | 2026-06-01 10:14:03.804136 |
pkg:rpm/fedora/dbus |
purl2cpe | 2026-06-01 10:14:03.804138 |
pkg:rpm/opensuse/dbus |
purl2cpe | 2026-06-01 10:14:03.804139 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-34969 |
vulnerable | 2026-06-08 06:06:26.265580 |
Details available
D-Bus before 1.15.6 sometimes allows unprivileged users to crash dbus-daemon. If a privileged user with control over the dbus-daemon is using the org.freedesktop.DBus.Monitoring interface to monitor message bus traffic, then an unprivileged user with the ability to connect to the same dbus-daemon can cause a dbus-daemon crash under some circumstances via an unreplyable message. When done on the well-known system bus, this is a denial-of-service vulnerability. The fixed versions are 1.12.28, 1.14.8, and 1.15.6.
Published: 2023-06-08T00:00:00.000Z
Updated: 2025-06-09T15:02:51.642Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-42012 |
vulnerable | 2026-06-08 05:49:29.111476 |
Details available
An issue was discovered in D-Bus before 1.12.24, 1.13.x and 1.14.x before 1.14.4, and 1.15.x before 1.15.2. An authenticated attacker can cause dbus-daemon and other programs that use libdbus to crash by sending a message with attached file descriptors in an unexpected format.
Published: 2022-10-09T00:00:00.000Z
Updated: 2025-06-09T15:04:43.166Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-42011 |
vulnerable | 2026-06-08 05:49:29.110551 |
Details available
An issue was discovered in D-Bus before 1.12.24, 1.13.x and 1.14.x before 1.14.4, and 1.15.x before 1.15.2. An authenticated attacker can cause dbus-daemon and other programs that use libdbus to crash when receiving a message where an array length is inconsistent with the size of the element type.
Published: 2022-10-09T00:00:00.000Z
Updated: 2025-06-09T15:05:41.494Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-42010 |
vulnerable | 2026-06-08 05:49:29.108962 |
Details available
An issue was discovered in D-Bus before 1.12.24, 1.13.x and 1.14.x before 1.14.4, and 1.15.x before 1.15.2. An authenticated attacker can cause dbus-daemon and other programs that use libdbus to crash when receiving a message with certain invalid type signatures.
Published: 2022-10-09T00:00:00.000Z
Updated: 2025-06-09T15:06:45.678Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-12049 |
vulnerable | 2026-06-08 05:17:56.286266 |
Details available
An issue was discovered in dbus >= 1.3.0 before 1.12.18. The DBusServer in libdbus, as used in dbus-daemon, leaks file descriptors when a message exceeds the per-message file descriptor limit. A local attacker with access to the D-Bus system bus or another system service's private AF_UNIX socket could use this to make the system service reach its file descriptor limit, denying service to subsequent D-Bus clients.
Published: 2020-06-08T00:00:00.000Z
Updated: 2024-08-04T11:48:57.950Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-12749 |
vulnerable | 2026-06-08 05:12:40.345051 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-3532 |
vulnerable | 2026-06-08 05:05:33.328189 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-1189 |
vulnerable | 2026-06-08 04:51:13.584557 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-4311 |
vulnerable | 2026-06-08 04:50:38.581524 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-3834 |
vulnerable | 2026-06-08 04:50:36.693634 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-0595 |
vulnerable | 2026-06-08 04:50:17.220244 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.