CVE-2014-8148 The default D-Bus access control rule in Midgard2 10.05.7.1 allows local users to send arbitrary method calls or signals to any process on the system bus and possibly execute arbitrary code with root....
HighCVSS 7.2
EPSS 0.43%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The default D-Bus access control rule in Midgard2 10.05.7.1 allows local users to send arbitrary method calls or signals to any process on the system bus and possibly execute arbitrary code with root privileges.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| opensuse | = 13.1 | No fix listed |
| opensuse | = 13.2 | No fix listed |
| midgard-project midgard2 | = 10.05.7.1 | No fix listed |
References
- openSUSE-SU-2015:0111 third-party-advisory vendor-advisory
- openSUSE-SU-2015:0300 third-party-advisory vendor-advisory
- [oss-security] 20150105 CVE-2014-8148: midgard-core configures D-Bus system bus to be insecure mailing-list third-party-advisory