NVD

Id
22735  
Name
CVE-2015-0245  
Description
D-Bus 1.4.x through 1.6.x before 1.6.30, 1.8.x before 1.8.16, and 1.9.x before 1.9.10 does not validate the source of ActivationFailure signals, which allows local users to cause a denial of service (activation failure error returned) by leveraging a race condition involving sending an ActivationFailure signal before systemd responds.  
Reject
 
CVSS Version
2  
CVSS Score
1.9  
Severity
Low  
CVSS Base Score
1.9  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-19  
Published
2015-02-13  
Modified Date
2016-10-14  
Seq
2015-0245  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
120397 22735 CVE-2015-0245 http://advisories.mageia.org/MGASA-2015-0071.html  View
120398 22735 CVE-2015-0245 openSUSE-SU-2015:0300  View
120399 22735 CVE-2015-0245 DSA-3161  View
120400 22735 CVE-2015-0245 MDVSA-2015:176  View
120401 22735 CVE-2015-0245 [oss-security] 20150209 CVE-2015-0245: denial of service in dbus >= 1.4 systemd activation  View
120402 22735 CVE-2015-0245 http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
6194 JVNDB-2015-001514 D-Bus におけるサービス運用妨害 (DoS) の脆弱性 D-Bus は、ActivationFailure シグナルのソースを検証しないため、サービス運用妨害 (アクティベーション失敗のエラーリターン) 状態にされる脆弱性が存在します。 CVE-2015-0245 77456 CVE-2015-0245 22735 1.9 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-001514.html 2015-02-04 2015-04-27 View