MGASA-2020-0262

See a problem?
Please try reporting it to the source first.
Source
https://advisories.mageia.org/MGASA-2020-0262.html
Import Source
https://advisories.mageia.org/MGASA-2020-0262.json
JSON Data
https://api.osv.dev/v1/vulns/MGASA-2020-0262
Related
Published
2020-06-15T07:54:40Z
Modified
2020-06-15T07:09:12Z
Summary
Updated dbus packages fix security vulnerability
Details

The updated packages fix a security vulnerability: An issue was discovered in dbus >= 1.3.0 before 1.12.18. The DBusServer in libdbus, as used in dbus-daemon, leaks file descriptors when a message exceeds the per-message file descriptor limit. A local attacker with access to the D-Bus system bus or another system service's private AF_UNIX socket could use this to make the system service reach its file descriptor limit, denying service to subsequent D-Bus clients. (CVE-2020-12049)

References
Credits

Affected packages

Mageia:7 / dbus

Package

Name
dbus
Purl
pkg:rpm/mageia/dbus?distro=mageia-7

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.13.8-4.2.mga7

Ecosystem specific 

{
    "section": "core"
}