CVE

Id
70933  
CVE No.
CVE-2014-3637  
Status
Candidate  
Description
D-Bus 1.3.0 through 1.6.x before 1.6.24 and 1.8.x before 1.8.8 does not properly close connections for processes that have terminated, which allows local users to cause a denial of service via a D-bus message containing a D-Bus connection file descriptor.  
Phase
Assigned (20140514)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
675685 70933 CVE-2014-3637 MLIST:[oss-security] 20140916 CVE-2014-3635 to 3639: security issues in D-Bus < 1.8.8  View
675686 70933 CVE-2014-3637 URL:http://www.openwall.com/lists/oss-security/2014/09/16/9  View
675687 70933 CVE-2014-3637 CONFIRM:https://bugs.freedesktop.org/show_bug.cgi?id=80559  View
675688 70933 CVE-2014-3637 CONFIRM:http://advisories.mageia.org/MGASA-2014-0395.html  View
675689 70933 CVE-2014-3637 DEBIAN:DSA-3026  View
675690 70933 CVE-2014-3637 URL:http://www.debian.org/security/2014/dsa-3026  View
675691 70933 CVE-2014-3637 MANDRIVA:MDVSA-2015:176  View
675692 70933 CVE-2014-3637 URL:http://www.mandriva.com/security/advisories?name=MDVSA-2015:176  View
675693 70933 CVE-2014-3637 SUSE:openSUSE-SU-2014:1239  View
675694 70933 CVE-2014-3637 URL:http://lists.opensuse.org/opensuse-updates/2014-09/msg00049.html  View
675695 70933 CVE-2014-3637 UBUNTU:USN-2352-1  View
675696 70933 CVE-2014-3637 URL:http://www.ubuntu.com/usn/USN-2352-1  View
675697 70933 CVE-2014-3637 SECTRACK:1030864  View
675698 70933 CVE-2014-3637 URL:http://www.securitytracker.com/id/1030864  View
675699 70933 CVE-2014-3637 SECUNIA:61378  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
16442 JVNDB-2014-005317 Linux Kernel の KVM サブシステムの arch/x86/kvm/vmx.c におけるサービス運用妨害 (DoS) の脆弱性 Linux Kernel の KVM サブシステムの arch/x86/kvm/vmx.c は、INVEPT 命令の終了ハンドラを持たないため、サービス運用妨害 (ゲスト OS クラッシュ) 状態にされる脆弱性が存在します。 CVE-2014-3645 70933 2.1 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-005317.html  View