dbus 1.3.0 before 1.6.22 and 1.8.x before 1.8.6 allows local users to cause a denial of service (disconnect) via a certain sequence of crafted messages that cause the dbus-daemon to forward a message containing an invalid file descriptor.
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "binary_version": "1.6.18-0ubuntu4.1", "binary_name": "dbus" }, { "binary_version": "1.6.18-0ubuntu4.1", "binary_name": "dbus-1-dbg" }, { "binary_version": "1.6.18-0ubuntu4.1", "binary_name": "dbus-1-doc" }, { "binary_version": "1.6.18-0ubuntu4.1", "binary_name": "dbus-x11" }, { "binary_version": "1.6.18-0ubuntu4.1", "binary_name": "libdbus-1-3" }, { "binary_version": "1.6.18-0ubuntu4.1", "binary_name": "libdbus-1-dev" } ] }