AZL-81957
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-81957.json
- JSON Data
- https://api.osv.dev/v1/vulns/AZL-81957
- Upstream
- Published
- 2026-04-07T21:17:17Z
- Modified
- 2026-08-29T05:25:22Z
- Summary
- CVE-2026-34080 affecting package xdg-dbus-proxy 0.1.6-2
- Details
-
xdg-dbus-proxy is a filtering proxy for D-Bus connections. Prior to 0.1.7, a policy parser vulnerability allows bypassing eavesdrop restrictions. The proxy checks for eavesdrop=true in policy rules but fails to handle eavesdrop ='true' (with a space before the equals sign) and similar cases. Clients can intercept D-Bus messages they should not have access to. This vulnerability is fixed in 0.1.7.
- References