UBUNTU-CVE-2014-8148

Source
https://ubuntu.com/security/CVE-2014-8148
Import Source
https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2014/UBUNTU-CVE-2014-8148.json
JSON Data
https://api.osv.dev/v1/vulns/UBUNTU-CVE-2014-8148
Upstream
  • CVE-2014-8148
Published
2015-01-26T15:59:00Z
Modified
2026-04-22T09:52:14Z
Severity
  • Ubuntu - medium
Summary
[none]
Details

The default D-Bus access control rule in Midgard2 10.05.7.1 allows local users to send arbitrary method calls or signals to any process on the system bus and possibly execute arbitrary code with root privileges.

References

Affected packages

Ubuntu:16.04:LTS / midgard2-core

Package

Name
midgard2-core
Purl
pkg:deb/ubuntu/midgard2-core@10.05.7.1-2ubuntu1?arch=source&distro=xenial

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

10.*
10.05.7.1-2
10.05.7.1-2ubuntu1

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "gir1.2-midgard-10.05",
            "binary_version": "10.05.7.1-2ubuntu1"
        },
        {
            "binary_name": "libmidgard2-2010.05",
            "binary_version": "10.05.7.1-2ubuntu1"
        },
        {
            "binary_name": "midgard2-bin",
            "binary_version": "10.05.7.1-2ubuntu1"
        },
        {
            "binary_name": "midgard2-common",
            "binary_version": "10.05.7.1-2ubuntu1"
        }
    ]
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2014/UBUNTU-CVE-2014-8148.json"