Approved changes feed: RSS · Atom
cpe:2.3:a:d-bus_project:d-bus:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | D Bus Project (b7e032a0-3d2a-525d-a7f4-34c0a8651e0e) |
|---|---|
| Product | D Bus (dc6fe177-a945-5112-a047-3700d19c4e88) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/dbus |
purl2cpe | 2026-06-01 10:16:11.805736 |
pkg:deb/ubuntu/dbus |
purl2cpe | 2026-06-01 10:16:11.805738 |
pkg:github/freedesktop/dbus |
purl2cpe | 2026-06-01 10:16:11.805739 |
pkg:rpm/fedora/dbus |
purl2cpe | 2026-06-01 10:16:11.805741 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2014-3639 |
vulnerable | 2026-06-08 05:05:41.992499 |
Details available
The dbus-daemon in D-Bus before 1.6.24 and 1.8.x before 1.8.8 does not properly close old connections, which allows local users to cause a denial of service (incomplete connection consumption and prevention of new connections) via a large number of incomplete connections.
Published: 2014-09-22T15:00:00.000Z
Updated: 2024-08-06T10:50:18.243Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-3638 |
vulnerable | 2026-06-08 05:05:41.991734 |
Details available
The bus_connections_check_reply function in config-parser.c in D-Bus before 1.6.24 and 1.8.x before 1.8.8 allows local users to cause a denial of service (CPU consumption) via a large number of method calls.
Published: 2014-09-22T15:00:00.000Z
Updated: 2024-08-06T10:50:17.924Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-3636 |
vulnerable | 2026-06-08 05:05:41.976096 |
Details available
D-Bus 1.3.0 through 1.6.x before 1.6.24 and 1.8.x before 1.8.8 allows local users to (1) cause a denial of service (prevention of new connections and connection drop) by queuing the maximum number of file descriptors or (2) cause a denial of service (disconnect) via multiple messages that combine to have more than the allowed number of file descriptors for a single sendmsg call.
Published: 2014-10-25T20:00:00.000Z
Updated: 2024-10-17T18:03:39.167Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-3635 |
vulnerable | 2026-06-08 05:05:41.967105 |
Details available
Off-by-one error in D-Bus 1.3.0 through 1.6.x before 1.6.24 and 1.8.x before 1.8.8, when running on a 64-bit system and the max_message_unix_fds limit is set to an odd number, allows local users to cause a denial of service (dbus-daemon crash) or possibly execute arbitrary code by sending one more file descriptor than the limit, which triggers a heap-based buffer overflow or an assertion failure.
Published: 2014-09-22T15:00:00.000Z
Updated: 2024-08-06T10:50:18.235Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-4352 |
vulnerable | 2026-06-08 04:56:27.320795 |
Details available
Stack consumption vulnerability in D-Bus (aka DBus) before 1.4.1 allows local users to cause a denial of service (daemon crash) via a message containing many nested variants.
Published: 2010-12-30T18:00:00.000Z
Updated: 2024-08-07T03:43:14.724Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.