CVE-2010-4352 Stack consumption vulnerability in D-Bus (aka DBus) before 1.4.1 allows local users to cause a denial of service (daemon crash) via a message containing many nested variants.
LowCVSS 2.1
EPSS 0.58%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Stack consumption vulnerability in D-Bus (aka DBus) before 1.4.1 allows local users to cause a denial of service (daemon crash) via a message containing many nested variants.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| d-bus project d-bus | <= 1.4.0 | No fix listed |
| debian/dbus(Debian:12) | < 1.2.24-4 | 1.2.24-4 |
| debian/dbus(Debian:13) | < 1.2.24-4 | 1.2.24-4 |
| debian/dbus(Debian:14) | < 1.2.24-4 | 1.2.24-4 |
References
- cgit.freedesktop.org patch
- kb.juniper.net
- FEDORA-2010-19166 exploit patch vendor-advisory
- SUSE-SR:2011:004 vendor-advisory
- openSUSE-SU-2012:1418 vendor-advisory
- [oss-security] 20101216 CVE Request -- D-BUS -- Stack frame overflow by validating message with excessive number of nested variants exploit mailing-list patch
- [oss-security] 20101216 Re: CVE Request -- D-BUS -- Stack frame overflow by validating message with excessive number of nested variants exploit mailing-list patch
- [oss-security] 20101221 Re: Re: CVE Request -- D-BUS -- Stack frame overflow by validating message with excessive number of nested variants mailing-list
- 42580 third-party-advisory vendor-advisory
- 42760 third-party-advisory vendor-advisory
- 42911 third-party-advisory
- 42960 third-party-advisory
- DSA-2149 vendor-advisory
- www.remlab.net vendor-advisory
- 45377 vdb-entry
- USN-1044-1 vendor-advisory
- ADV-2010-3325 vdb-entry vendor-advisory
- ADV-2011-0161 vdb-entry
- ADV-2011-0178 vdb-entry
- ADV-2011-0464 vdb-entry
- bugs.freedesktop.org exploit patch
- bugzilla.redhat.com exploit patch
- Debian Security Tracker CVE-2010-4352 vendor-advisory