https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2014-3636.htmlhttps://patchthecve.com/cve/CVE-2014-3636.htmlWed, 17 Jun 2026 00:08:39 +0000LOW 1.9: D-Bus 1.3.0 through 1.6.x before 1.6.24 and 1.8.x before 1.8.8 allows local users to (1) cause a denial of service (prevention of new connections and connection drop) by queuing the maximum number of file descriptors or (2) cause a denial of service (disconnect) via multiple messages that combine tohttps://patchthecve.com/cve/CVE-2014-3639.htmlhttps://patchthecve.com/cve/CVE-2014-3639.htmlWed, 17 Jun 2026 00:08:40 +0000LOW 2.1: The dbus-daemon in D-Bus before 1.6.24 and 1.8.x before 1.8.8 does not properly close old connections, which allows local users to cause a denial of service (incomplete connection consumption and prevention of new connections) via a large number of incomplete connections.https://patchthecve.com/cve/CVE-2014-3638.htmlhttps://patchthecve.com/cve/CVE-2014-3638.htmlWed, 17 Jun 2026 00:08:40 +0000LOW 2.1: The bus_connections_check_reply function in config-parser.c in D-Bus before 1.6.24 and 1.8.x before 1.8.8 allows local users to cause a denial of service (CPU consumption) via a large number of method calls.https://patchthecve.com/cve/CVE-2014-3635.htmlhttps://patchthecve.com/cve/CVE-2014-3635.htmlWed, 17 Jun 2026 00:08:39 +0000MEDIUM 4.4: Off-by-one error in D-Bus 1.3.0 through 1.6.x before 1.6.24 and 1.8.x before 1.8.8, when running on a 64-bit system and the max_message_unix_fds limit is set to an odd number, allows local users to cause a denial of service (dbus-daemon crash) or possibly execute arbitrary code by sending one more fhttps://patchthecve.com/cve/CVE-2014-3477.htmlhttps://patchthecve.com/cve/CVE-2014-3477.htmlWed, 17 Jun 2026 00:08:15 +0000MEDIUM 4.0: The dbus-daemon in D-Bus 1.2.x through 1.4.x, 1.6.x before 1.6.20, and 1.8.x before 1.8.4, sends an AccessDenied error to the service instead of a client when the client is prohibited from accessing the service, which allows local users to cause a denial of service (initialization failure and exit)