CVE-2014-3533
NONE
Published Jul 19, 201411y ago · Modified Jun 17, 20262w ago
Published Jul 19, 2014 11y ago
Last Modified Jun 17, 2026 2w ago
Description
dbus 1.3.0 before 1.6.22 and 1.8.x before 1.8.6 allows local users to cause a denial of service (disconnect) via a certain sequence of crafted messages that cause the dbus-daemon to forward a message containing an invalid file descriptor.
Threat Intelligence
No active exploitation signals — not in CISA KEV and no EPSS score yet.
Exploit & Patch Status
No Known Exploit
No Patch Available
Weaknesses 1
CWE-20 Improper Input Validation Validation
Affected Products 38
| Vendor | Product | Version | Range |
|---|---|---|---|
| debian | debian_linux | 7.0 | any |
| freedesktop | dbus | 1.3.0 | any |
| freedesktop | dbus | 1.3.1 | any |
| freedesktop | dbus | 1.4.0 | any |
| freedesktop | dbus | 1.4.1 | any |
| freedesktop | dbus | 1.4.4 | any |
| freedesktop | dbus | 1.4.6 | any |
| freedesktop | dbus | 1.4.8 | any |
| freedesktop | dbus | 1.4.10 | any |
| freedesktop | dbus | 1.4.12 | any |
| freedesktop | dbus | 1.4.14 | any |
| freedesktop | dbus | 1.4.16 | any |
| freedesktop | dbus | 1.4.18 | any |
| freedesktop | dbus | 1.4.20 | any |
| freedesktop | dbus | 1.4.22 | any |
| freedesktop | dbus | 1.4.24 | any |
| freedesktop | dbus | 1.4.26 | any |
| freedesktop | dbus | 1.5.0 | any |
| freedesktop | dbus | 1.5.2 | any |
| freedesktop | dbus | 1.5.4 | any |
| freedesktop | dbus | 1.5.6 | any |
| freedesktop | dbus | 1.5.8 | any |
| freedesktop | dbus | 1.5.10 | any |
| freedesktop | dbus | 1.5.12 | any |
| freedesktop | dbus | 1.6.0 | any |
| freedesktop | dbus | 1.6.2 | any |
| freedesktop | dbus | 1.6.10 | any |
| freedesktop | dbus | 1.6.12 | any |
| freedesktop | dbus | 1.6.14 | any |
| freedesktop | dbus | 1.6.16 | any |
| freedesktop | dbus | 1.6.18 | any |
| freedesktop | dbus | 1.6.20 | any |
| freedesktop | dbus | 1.8.0 | any |
| freedesktop | dbus | 1.8.2 | any |
| freedesktop | dbus | 1.8.4 | any |
| mageia_project | mageia | 3 | any |
| mageia_project | mageia | 4 | any |
| opensuse | opensuse | 12.3 | any |
References 11
- advisories.mageia.org http://advisories.mageia.org/MGASA-2014-0294.html
- lists.opensuse.org http://lists.opensuse.org/opensuse-updates/2014-09/msg00049.html
- openwall.com http://openwall.com/lists/oss-security/2014/07/02/4
- secunia.com http://secunia.com/advisories/59611
- secunia.com http://secunia.com/advisories/59798
- secunia.com http://secunia.com/advisories/60236
- debian.org http://www.debian.org/security/2014/dsa-2971
- mandriva.com http://www.mandriva.com/security/advisories?name=MDVSA-2015:176
- oracle.com http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html
- bugs.freedesktop.org https://bugs.freedesktop.org/show_bug.cgi?id=79694
- bugs.freedesktop.org https://bugs.freedesktop.org/show_bug.cgi?id=80469
Remediation
No remediation data recorded yet
Check vendor advisories and the NVD entry for patch availability.