CVE

Id
70931  
CVE No.
CVE-2014-3635  
Status
Candidate  
Description
Off-by-one error in D-Bus 1.3.0 through 1.6.x before 1.6.24 and 1.8.x before 1.8.8, when running on a 64-bit system and the max_message_unix_fds limit is set to an odd number, allows local users to cause a denial of service (dbus-daemon crash) or possibly execute arbitrary code by sending one more file descriptor than the limit, which triggers a heap-based buffer overflow or an assertion failure.  
Phase
Assigned (20140514)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
675654 70931 CVE-2014-3635 MLIST:[oss-security] 20140916 CVE-2014-3635 to 3639: security issues in D-Bus < 1.8.8  View
675655 70931 CVE-2014-3635 URL:http://www.openwall.com/lists/oss-security/2014/09/16/9  View
675656 70931 CVE-2014-3635 CONFIRM:https://bugs.freedesktop.org/show_bug.cgi?id=83622  View
675657 70931 CVE-2014-3635 CONFIRM:http://advisories.mageia.org/MGASA-2014-0395.html  View
675658 70931 CVE-2014-3635 CONFIRM:http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html  View
675659 70931 CVE-2014-3635 DEBIAN:DSA-3026  View
675660 70931 CVE-2014-3635 URL:http://www.debian.org/security/2014/dsa-3026  View
675661 70931 CVE-2014-3635 MANDRIVA:MDVSA-2015:176  View
675662 70931 CVE-2014-3635 URL:http://www.mandriva.com/security/advisories?name=MDVSA-2015:176  View
675663 70931 CVE-2014-3635 SUSE:openSUSE-SU-2014:1239  View
675664 70931 CVE-2014-3635 URL:http://lists.opensuse.org/opensuse-updates/2014-09/msg00049.html  View
675665 70931 CVE-2014-3635 UBUNTU:USN-2352-1  View
675666 70931 CVE-2014-3635 URL:http://www.ubuntu.com/usn/USN-2352-1  View
675667 70931 CVE-2014-3635 SECTRACK:1030864  View
675668 70931 CVE-2014-3635 URL:http://www.securitytracker.com/id/1030864  View
675669 70931 CVE-2014-3635 SECUNIA:61378  View

Related JVN