CVE

Id
70934  
CVE No.
CVE-2014-3638  
Status
Candidate  
Description
The bus_connections_check_reply function in config-parser.c in D-Bus before 1.6.24 and 1.8.x before 1.8.8 allows local users to cause a denial of service (CPU consumption) via a large number of method calls.  
Phase
Assigned (20140514)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
675700 70934 CVE-2014-3638 MLIST:[oss-security] 20140916 CVE-2014-3635 to 3639: security issues in D-Bus < 1.8.8  View
675701 70934 CVE-2014-3638 URL:http://www.openwall.com/lists/oss-security/2014/09/16/9  View
675702 70934 CVE-2014-3638 CONFIRM:https://bugs.freedesktop.org/show_bug.cgi?id=81053  View
675703 70934 CVE-2014-3638 CONFIRM:http://advisories.mageia.org/MGASA-2014-0395.html  View
675704 70934 CVE-2014-3638 DEBIAN:DSA-3026  View
675705 70934 CVE-2014-3638 URL:http://www.debian.org/security/2014/dsa-3026  View
675706 70934 CVE-2014-3638 MANDRIVA:MDVSA-2015:176  View
675707 70934 CVE-2014-3638 URL:http://www.mandriva.com/security/advisories?name=MDVSA-2015:176  View
675708 70934 CVE-2014-3638 SUSE:SUSE-SU-2014:1146  View
675709 70934 CVE-2014-3638 URL:http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00026.html  View
675710 70934 CVE-2014-3638 SUSE:openSUSE-SU-2014:1239  View
675711 70934 CVE-2014-3638 URL:http://lists.opensuse.org/opensuse-updates/2014-09/msg00049.html  View
675712 70934 CVE-2014-3638 UBUNTU:USN-2352-1  View
675713 70934 CVE-2014-3638 URL:http://www.ubuntu.com/usn/USN-2352-1  View
675714 70934 CVE-2014-3638 SECTRACK:1030864  View
675715 70934 CVE-2014-3638 URL:http://www.securitytracker.com/id/1030864  View
675716 70934 CVE-2014-3638 SECUNIA:61378  View
675717 70934 CVE-2014-3638 URL:http://secunia.com/advisories/61378  View
675718 70934 CVE-2014-3638 SECUNIA:61431  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
16443 JVNDB-2014-005318 Linux Kernel の KVM サブシステムの arch/x86/kvm/vmx.c におけるサービス運用妨害 (DoS) の脆弱性 Linux Kernel の KVM サブシステムの arch/x86/kvm/vmx.c は、INVVPID 命令の終了ハンドラを持たないため、サービス運用妨害 (ゲスト OS クラッシュ) 状態にされる脆弱性が存在します。 CVE-2014-3646 70934 2.1 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-005318.html  View