NVD

Id
31796  
Name
CVE-2014-3635  
Description
Off-by-one error in D-Bus 1.3.0 through 1.6.x before 1.6.24 and 1.8.x before 1.8.8, when running on a 64-bit system and the max_message_unix_fds limit is set to an odd number, allows local users to cause a denial of service (dbus-daemon crash) or possibly execute arbitrary code by sending one more file descriptor than the limit, which triggers a heap-based buffer overflow or an assertion failure.  
Reject
 
CVSS Version
2  
CVSS Score
4.4  
Severity
Medium  
CVSS Base Score
4.4  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2014-09-22  
Modified Date
2016-10-14  
Seq
2014-3635  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
167567 31796 CVE-2014-3635 http://advisories.mageia.org/MGASA-2014-0395.html  View
167568 31796 CVE-2014-3635 openSUSE-SU-2014:1239  View
167569 31796 CVE-2014-3635 DSA-3026  View
167570 31796 CVE-2014-3635 [oss-security] 20140916 CVE-2014-3635 to 3639: security issues in D-Bus < 1.8.8  View
167571 31796 CVE-2014-3635 http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html  View
167572 31796 CVE-2014-3635 1030864  View
167573 31796 CVE-2014-3635 USN-2352-1  View
167574 31796 CVE-2014-3635 https://bugs.freedesktop.org/show_bug.cgi?id=83622  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
15491 JVNDB-2014-004366 D-Bus におけるサービス運用妨害 (DoS) の脆弱性 D-Bus には、64-bit システム上で稼動している、および max_message_unix_fds 制限を奇数に設定されている場合、一つずれエラー (Off-by-One error) により、サービス運用妨害 (dbus-デーモンクラッシュ) 状態にされる、または任意のコードを実行される脆弱性が存在します。 CVE-2014-3635 70923 CVE-2014-3635 31796 6.8 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-004366.html 2014-09-09 2015-06-22 View