CVE Feed

    Dashboard / CVE / CVE-2014-3639

    CVE-2014-3639

    The dbus-daemon in D-Bus before 1.6.24 and 1.8.x before 1.8.8 does not properly close old connections, which allows local users to cause a denial of service (incomplete connection consumption and prevention of new connections) via a large number of incomplete connections.

    Published:Sep 16, 2014
    Last Modified:Apr 12, 2025
    EPS:Sep 22, 2014
    EPSS Score:0.00092
    CVSS Score:2.1

    Affected Products

    Vendor
    D-bus Project
    Product
    D-bus
    Vendor
    Freedesktop
    Product
    Dbus
    Vendor
    Opensuse
    Product
    Opensuse

    Exploits

    No exploit reference

    Related CVEs

    CVE-2014-3638 (CVSS 2.1) — The bus_connections_check_reply function in config-parser.c in D-Bus before 1.6.24 and 1.8.x before 1.8.8 allo…
    CVE-2014-3636 (CVSS 1.9) — D-Bus 1.3.0 through 1.6.x before 1.6.24 and 1.8.x before 1.8.8 allows local users to (1) cause a denial of ser…
    CVE-2014-3635 (CVSS 4.4) — Off-by-one error in D-Bus 1.3.0 through 1.6.x before 1.6.24 and 1.8.x before 1.8.8, when running on a 64-bit s…
    CVE-2014-3477 (CVSS 4) — The dbus-daemon in D-Bus 1.2.x through 1.4.x, 1.6.x before 1.6.20, and 1.8.x before 1.8.4, sends an AccessDeni…
    CVE-2011-2200 (CVSS 4.6) — The _dbus_header_byteswap function in dbus-marshal-header.c in D-Bus (aka DBus) 1.2.x before 1.2.28, 1.4.x bef…
    CVE-2010-4352 (CVSS 2.1) — Stack consumption vulnerability in D-Bus (aka DBus) before 1.4.1 allows local users to cause a denial of servi…

    References

    http://advisories.mageia.org/MGASA-2014-0395.html
    http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00026.html
    http://lists.opensuse.org/opensuse-updates/2014-09/msg00049.html
    http://secunia.com/advisories/61378
    http://secunia.com/advisories/61431
    http://www.debian.org/security/2014/dsa-3026
    http://www.mandriva.com/security/advisories?name=MDVSA-2015:176
    http://www.openwall.com/lists/oss-security/2014/09/16/9
    http://www.securitytracker.com/id/1030864
    http://www.ubuntu.com/usn/USN-2352-1
    https://bugs.freedesktop.org/show_bug.cgi?id=80919
    http://advisories.mageia.org/MGASA-2014-0395.html
    http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00026.html
    http://lists.opensuse.org/opensuse-updates/2014-09/msg00049.html
    http://secunia.com/advisories/61378
    http://secunia.com/advisories/61431
    http://www.debian.org/security/2014/dsa-3026
    http://www.mandriva.com/security/advisories?name=MDVSA-2015:176
    http://www.openwall.com/lists/oss-security/2014/09/16/9
    http://www.securitytracker.com/id/1030864
    http://www.ubuntu.com/usn/USN-2352-1
    https://bugs.freedesktop.org/show_bug.cgi?id=80919

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High