PatchTheCVEd-bus project vulnerabilities
Recent CVEs affecting d-bus project products. 5 tracked.
d-bus project has 5 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 4. Most recent: 2014-10-25. Highest priority: CVE-2014-3635 (score 26/100).
- CVE-2014-3639 LOW 2.1 MITIGATE UPGRADE The dbus-daemon in D-Bus before 1.6.24 and 1.8.x before 1.8.8 does not properly close old connections, which a
- CVE-2014-3638 LOW 2.1 UPGRADE MITIGATE The bus_connections_check_reply function in config-parser.c in D-Bus before 1.6.24 and 1.8.x before 1.8.8 allo
- CVE-2014-3636 LOW 1.9 UPGRADE MITIGATE D-Bus 1.3.0 through 1.6.x before 1.6.24 and 1.8.x before 1.8.8 allows local users to (1) cause a denial of ser
- CVE-2014-3635 MEDIUM 4.4 UPGRADE MITIGATE Off-by-one error in D-Bus 1.3.0 through 1.6.x before 1.6.24 and 1.8.x before 1.8.8, when running on a 64-bit s
- CVE-2014-3477 MEDIUM 4.0 DOWNGRADE MITIGATE The dbus-daemon in D-Bus 1.2.x through 1.4.x, 1.6.x before 1.6.20, and 1.8.x before 1.8.4, sends an AccessDeni
FAQ
How do I fix d-bus project vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is d-bus project being exploited right now?
None of the tracked d-bus project CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which d-bus project CVE should I patch first?
CVE-2014-3635 currently ranks highest (26/100): Off-by-one error in D-Bus 1.3.0 through 1.6.x before 1.6.24 and 1.8.x before 1.8.8, when running on a 64-bit s.