Approved changes feed: RSS · Atom

cpe:2.3:a:freedesktop:dbus:1.5.0:*:*:*:*:*:*:*

part: a version: 1.5.0 update: *

VendorFreedesktop (2c544e5d-e68e-5b35-a616-dc08f0ba697e)
ProductDbus (7e992f2d-f5d6-5884-a5a2-9325da73d4f4)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/dbus purl2cpe 2026-06-01 10:14:03.871605
pkg:deb/ubuntu/dbus purl2cpe 2026-06-01 10:14:03.871606
pkg:github/freedesktop/dbus purl2cpe 2026-06-01 10:14:03.871608
pkg:gitlab/redhat/dbus purl2cpe 2026-06-01 10:14:03.871609
pkg:rpm/centos/dbus purl2cpe 2026-06-01 10:14:03.871611
pkg:rpm/fedora/dbus purl2cpe 2026-06-01 10:14:03.871612
pkg:rpm/opensuse/dbus purl2cpe 2026-06-01 10:14:03.871614

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2015-0245 vulnerable 2026-06-03 14:34:29.350962 Details available
D-Bus 1.4.x through 1.6.x before 1.6.30, 1.8.x before 1.8.16, and 1.9.x before 1.9.10 does not validate the source of ActivationFailure signals, which allows local users to cause a denial of service (activation failure error returned) by leveraging a race condition involving sending an ActivationFailure signal before systemd responds.
Published: 2015-02-13T15:00:00.000Z
Updated: 2024-08-06T04:03:10.538Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-3637 vulnerable 2026-06-03 14:34:00.402712 Details available
D-Bus 1.3.0 through 1.6.x before 1.6.24 and 1.8.x before 1.8.8 does not properly close connections for processes that have terminated, which allows local users to cause a denial of service via a D-bus message containing a D-Bus connection file descriptor.
Published: 2014-09-22T15:00:00.000Z
Updated: 2024-08-06T10:50:18.287Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-3533 vulnerable 2026-06-03 14:33:55.139230 Details available
dbus 1.3.0 before 1.6.22 and 1.8.x before 1.8.6 allows local users to cause a denial of service (disconnect) via a certain sequence of crafted messages that cause the dbus-daemon to forward a message containing an invalid file descriptor.
Published: 2014-07-19T19:00:00.000Z
Updated: 2024-08-06T10:50:16.803Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-2200 vulnerable 2026-06-03 14:31:06.238499 Details available
The _dbus_header_byteswap function in dbus-marshal-header.c in D-Bus (aka DBus) 1.2.x before 1.2.28, 1.4.x before 1.4.12, and 1.5.x before 1.5.4 does not properly handle a non-native byte order, which allows local users to cause a denial of service (connection loss), obtain potentially sensitive information, or conduct unspecified state-modification attacks via crafted messages.
Published: 2011-06-22T22:00:00.000Z
Updated: 2024-08-06T22:53:17.198Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.