CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2014-3635

Off-by-one error in D-Bus 1.3.0 through 1.6.x before 1.6.24 and 1.8.x before 1.8.8, when running on a 64-bit system and the max_message_unix_fds limit is set to an odd number, allows local users to cause a denial of service (dbus-daemon crash) or possibly execute arbitrary code by sending one more file descriptor than the limit, which triggers a heap-based buffer overflow or an assertion failure.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.002

EPSS Ranking 39.7%

CVSS Severity

CVSS v2 Score 4.4

References

Products affected by CVE-2014-3635

D-Bus Project » D-Bus » Version: 1.2.1

cpe:2.3:a:d-bus_project:d-bus:1.2.1
D-Bus Project » D-Bus » Version: 1.2.10

cpe:2.3:a:d-bus_project:d-bus:1.2.10
D-Bus Project » D-Bus » Version: 1.2.12

cpe:2.3:a:d-bus_project:d-bus:1.2.12
D-Bus Project » D-Bus » Version: 1.2.14

cpe:2.3:a:d-bus_project:d-bus:1.2.14
D-Bus Project » D-Bus » Version: 1.2.16

cpe:2.3:a:d-bus_project:d-bus:1.2.16
D-Bus Project » D-Bus » Version: 1.2.18

cpe:2.3:a:d-bus_project:d-bus:1.2.18
D-Bus Project » D-Bus » Version: 1.2.2

cpe:2.3:a:d-bus_project:d-bus:1.2.2
D-Bus Project » D-Bus » Version: 1.2.20

cpe:2.3:a:d-bus_project:d-bus:1.2.20
D-Bus Project » D-Bus » Version: 1.2.22

cpe:2.3:a:d-bus_project:d-bus:1.2.22
D-Bus Project » D-Bus » Version: 1.2.24

cpe:2.3:a:d-bus_project:d-bus:1.2.24
D-Bus Project » D-Bus » Version: 1.2.26

cpe:2.3:a:d-bus_project:d-bus:1.2.26
D-Bus Project » D-Bus » Version: 1.2.28

cpe:2.3:a:d-bus_project:d-bus:1.2.28
D-Bus Project » D-Bus » Version: 1.2.3

cpe:2.3:a:d-bus_project:d-bus:1.2.3
D-Bus Project » D-Bus » Version: 1.2.30

cpe:2.3:a:d-bus_project:d-bus:1.2.30
D-Bus Project » D-Bus » Version: 1.2.4

cpe:2.3:a:d-bus_project:d-bus:1.2.4
D-Bus Project » D-Bus » Version: 1.2.4.2

cpe:2.3:a:d-bus_project:d-bus:1.2.4.2
D-Bus Project » D-Bus » Version: 1.2.4.4

cpe:2.3:a:d-bus_project:d-bus:1.2.4.4
D-Bus Project » D-Bus » Version: 1.2.4.6

cpe:2.3:a:d-bus_project:d-bus:1.2.4.6
D-Bus Project » D-Bus » Version: 1.2.6

cpe:2.3:a:d-bus_project:d-bus:1.2.6
D-Bus Project » D-Bus » Version: 1.2.8

cpe:2.3:a:d-bus_project:d-bus:1.2.8
D-Bus Project » D-Bus » Version: 1.3.0

cpe:2.3:a:d-bus_project:d-bus:1.3.0
D-Bus Project » D-Bus » Version: 1.3.1

cpe:2.3:a:d-bus_project:d-bus:1.3.1
D-Bus Project » D-Bus » Version: 1.4.0

cpe:2.3:a:d-bus_project:d-bus:1.4.0
D-Bus Project » D-Bus » Version: 1.4.1

cpe:2.3:a:d-bus_project:d-bus:1.4.1
D-Bus Project » D-Bus » Version: 1.4.10

cpe:2.3:a:d-bus_project:d-bus:1.4.10
D-Bus Project » D-Bus » Version: 1.4.12

cpe:2.3:a:d-bus_project:d-bus:1.4.12
D-Bus Project » D-Bus » Version: 1.4.14

cpe:2.3:a:d-bus_project:d-bus:1.4.14
D-Bus Project » D-Bus » Version: 1.4.16

cpe:2.3:a:d-bus_project:d-bus:1.4.16
D-Bus Project » D-Bus » Version: 1.4.18

cpe:2.3:a:d-bus_project:d-bus:1.4.18
D-Bus Project » D-Bus » Version: 1.4.20

cpe:2.3:a:d-bus_project:d-bus:1.4.20
D-Bus Project » D-Bus » Version: 1.4.22

cpe:2.3:a:d-bus_project:d-bus:1.4.22
D-Bus Project » D-Bus » Version: 1.4.24

cpe:2.3:a:d-bus_project:d-bus:1.4.24
D-Bus Project » D-Bus » Version: 1.4.26

cpe:2.3:a:d-bus_project:d-bus:1.4.26
D-Bus Project » D-Bus » Version: 1.4.4

cpe:2.3:a:d-bus_project:d-bus:1.4.4
D-Bus Project » D-Bus » Version: 1.4.6

cpe:2.3:a:d-bus_project:d-bus:1.4.6
D-Bus Project » D-Bus » Version: 1.4.8

cpe:2.3:a:d-bus_project:d-bus:1.4.8
D-Bus Project » D-Bus » Version: 1.5.0

cpe:2.3:a:d-bus_project:d-bus:1.5.0
D-Bus Project » D-Bus » Version: 1.5.10

cpe:2.3:a:d-bus_project:d-bus:1.5.10
D-Bus Project » D-Bus » Version: 1.5.12

cpe:2.3:a:d-bus_project:d-bus:1.5.12
D-Bus Project » D-Bus » Version: 1.5.2

cpe:2.3:a:d-bus_project:d-bus:1.5.2
D-Bus Project » D-Bus » Version: 1.5.4

cpe:2.3:a:d-bus_project:d-bus:1.5.4
D-Bus Project » D-Bus » Version: 1.5.6

cpe:2.3:a:d-bus_project:d-bus:1.5.6
D-Bus Project » D-Bus » Version: 1.5.8

cpe:2.3:a:d-bus_project:d-bus:1.5.8
D-Bus Project » D-Bus » Version: 1.6.0

cpe:2.3:a:d-bus_project:d-bus:1.6.0
D-Bus Project » D-Bus » Version: 1.6.10

cpe:2.3:a:d-bus_project:d-bus:1.6.10
D-Bus Project » D-Bus » Version: 1.6.12

cpe:2.3:a:d-bus_project:d-bus:1.6.12
D-Bus Project » D-Bus » Version: 1.6.14

cpe:2.3:a:d-bus_project:d-bus:1.6.14
D-Bus Project » D-Bus » Version: 1.6.16

cpe:2.3:a:d-bus_project:d-bus:1.6.16
D-Bus Project » D-Bus » Version: 1.6.18

cpe:2.3:a:d-bus_project:d-bus:1.6.18
D-Bus Project » D-Bus » Version: 1.6.2

cpe:2.3:a:d-bus_project:d-bus:1.6.2
D-Bus Project » D-Bus » Version: 1.6.20

cpe:2.3:a:d-bus_project:d-bus:1.6.20
D-Bus Project » D-Bus » Version: 1.6.22

cpe:2.3:a:d-bus_project:d-bus:1.6.22
D-Bus Project » D-Bus » Version: 1.6.4

cpe:2.3:a:d-bus_project:d-bus:1.6.4
D-Bus Project » D-Bus » Version: 1.6.6

cpe:2.3:a:d-bus_project:d-bus:1.6.6
D-Bus Project » D-Bus » Version: 1.6.8

cpe:2.3:a:d-bus_project:d-bus:1.6.8
Freedesktop » Dbus » Version: 1.6.0

cpe:2.3:a:freedesktop:dbus:1.6.0
Freedesktop » Dbus » Version: 1.6.10

cpe:2.3:a:freedesktop:dbus:1.6.10
Freedesktop » Dbus » Version: 1.6.12

cpe:2.3:a:freedesktop:dbus:1.6.12
Freedesktop » Dbus » Version: 1.6.14

cpe:2.3:a:freedesktop:dbus:1.6.14
Freedesktop » Dbus » Version: 1.6.16

cpe:2.3:a:freedesktop:dbus:1.6.16
Freedesktop » Dbus » Version: 1.6.18

cpe:2.3:a:freedesktop:dbus:1.6.18
Freedesktop » Dbus » Version: 1.6.2

cpe:2.3:a:freedesktop:dbus:1.6.2
Freedesktop » Dbus » Version: 1.6.20

cpe:2.3:a:freedesktop:dbus:1.6.20
Freedesktop » Dbus » Version: 1.6.4

cpe:2.3:a:freedesktop:dbus:1.6.4
Freedesktop » Dbus » Version: 1.6.6

cpe:2.3:a:freedesktop:dbus:1.6.6
Freedesktop » Dbus » Version: 1.6.8

cpe:2.3:a:freedesktop:dbus:1.6.8
Freedesktop » Dbus » Version: 1.8.0

cpe:2.3:a:freedesktop:dbus:1.8.0
Freedesktop » Dbus » Version: 1.8.2

cpe:2.3:a:freedesktop:dbus:1.8.2
Freedesktop » Dbus » Version: 1.8.4

cpe:2.3:a:freedesktop:dbus:1.8.4
Freedesktop » Dbus » Version: 1.8.6

cpe:2.3:a:freedesktop:dbus:1.8.6
Opensuse » Opensuse » Version: 12.3

cpe:2.3:o:opensuse:opensuse:12.3

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2014-3635

Products

Pricing

Contact Us