D-Bus before 1.15.6 sometimes allows unprivileged users to crash dbus-daemon. If a privileged user with control over the dbus-daemon is using the org.freedesktop.DBus.Monitoring interface to monitor message bus traffic, then an unprivileged user with the ability to connect to the same dbus-daemon can cause a dbus-daemon crash under some circumstances via an unreplyable message. When done on the well-known system bus, this is a denial-of-service vulnerability. The fixed versions are 1.12.28, 1.14.8, and 1.15.6.
{ "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro", "binaries": [ { "binary_name": "dbus", "binary_version": "1.10.6-1ubuntu3.6+esm3" }, { "binary_name": "dbus-tests", "binary_version": "1.10.6-1ubuntu3.6+esm3" }, { "binary_name": "dbus-user-session", "binary_version": "1.10.6-1ubuntu3.6+esm3" }, { "binary_name": "dbus-x11", "binary_version": "1.10.6-1ubuntu3.6+esm3" }, { "binary_name": "libdbus-1-3", "binary_version": "1.10.6-1ubuntu3.6+esm3" }, { "binary_name": "libdbus-1-dev", "binary_version": "1.10.6-1ubuntu3.6+esm3" } ] }
{ "binaries": [ { "binary_name": "dbus", "binary_version": "1.12.2-1ubuntu1.4" }, { "binary_name": "dbus-tests", "binary_version": "1.12.2-1ubuntu1.4" }, { "binary_name": "dbus-user-session", "binary_version": "1.12.2-1ubuntu1.4" }, { "binary_name": "dbus-x11", "binary_version": "1.12.2-1ubuntu1.4" }, { "binary_name": "libdbus-1-3", "binary_version": "1.12.2-1ubuntu1.4" }, { "binary_name": "libdbus-1-dev", "binary_version": "1.12.2-1ubuntu1.4" } ] }
{ "binaries": [ { "binary_name": "dbus", "binary_version": "1.12.16-2ubuntu2.3" }, { "binary_name": "dbus-tests", "binary_version": "1.12.16-2ubuntu2.3" }, { "binary_name": "dbus-user-session", "binary_version": "1.12.16-2ubuntu2.3" }, { "binary_name": "dbus-x11", "binary_version": "1.12.16-2ubuntu2.3" }, { "binary_name": "libdbus-1-3", "binary_version": "1.12.16-2ubuntu2.3" }, { "binary_name": "libdbus-1-dev", "binary_version": "1.12.16-2ubuntu2.3" } ] }
{ "binaries": [ { "binary_name": "dbus", "binary_version": "1.12.20-2ubuntu4.1" }, { "binary_name": "dbus-tests", "binary_version": "1.12.20-2ubuntu4.1" }, { "binary_name": "dbus-user-session", "binary_version": "1.12.20-2ubuntu4.1" }, { "binary_name": "dbus-x11", "binary_version": "1.12.20-2ubuntu4.1" }, { "binary_name": "libdbus-1-3", "binary_version": "1.12.20-2ubuntu4.1" }, { "binary_name": "libdbus-1-dev", "binary_version": "1.12.20-2ubuntu4.1" } ] }