View | Details | Raw Unified | Return to bug 247340
Collapse All | Expand All

(-)vuln.xml (+27 lines)
Line 60 Link Here
61
  <vuln vid="27616957-b084-11ea-937b-b42e99a1b9c3">
62
    <topic>dbus file descriptor leak</topic>
63
    <affects>
64
      <package>
65
	<name>dbus</name>
66
	<range><lt>1.12.18</lt></range>
67
      </package>
68
    </affects>
69
    <description>
70
      <body xmlns="http://www.w3.org/1999/xhtml">
71
	<p>GitHub Security Lab reports:</p>
72
	<blockquote cite="https://gitlab.freedesktop.org/dbus/dbus/-/issues/294">
73
	  <p>D-Bus has a file descriptor leak, which can lead to denial of service when the dbus-daemon runs out of file descriptors.
74
      An unprivileged local attacker can use this to attack the system dbus-daemon, leading to denial of service for all users of the machine.</p>
75
	</blockquote>
76
      </body>
77
    </description>
78
    <references>
79
      <url>https://www.openwall.com/lists/oss-security/2020/06/04/3</url>
80
      <cvename>CVE-2020-12049</cvename>
81
   </references>
82
    <dates>
83
      <discovery>2020-04-09</discovery>
84
      <entry>2020-06-17</entry>
85
    </dates>
86
  </vuln>
87

Return to bug 247340