FreeBSD Bugzilla – Attachment 215654 Details for
Bug 247340
security/vuxml dbus vulnerability
Home
|
New
|
Browse
|
Search
|
[?]
|
Reports
|
Help
|
New Account
|
Log In
Remember
[x]
|
Forgot Password
Login:
[x]
[patch]
vuxml entry for dbus - CVE-2020-12049
CVE-2020-12049.diff (text/plain), 1.07 KB, created by
rob2g2
on 2020-06-17 10:38:31 UTC
(
hide
)
Description:
vuxml entry for dbus - CVE-2020-12049
Filename:
MIME Type:
Creator:
rob2g2
Created:
2020-06-17 10:38:31 UTC
Size:
1.07 KB
patch
obsolete
>--- vuln2.xml Wed Jun 17 12:20:18 2020 >+++ vuln.xml Wed Jun 17 12:36:10 2020 >@@ -60,0 +61,27 @@ >+ <vuln vid="27616957-b084-11ea-937b-b42e99a1b9c3"> >+ <topic>dbus file descriptor leak</topic> >+ <affects> >+ <package> >+ <name>dbus</name> >+ <range><lt>1.12.18</lt></range> >+ </package> >+ </affects> >+ <description> >+ <body xmlns="http://www.w3.org/1999/xhtml"> >+ <p>GitHub Security Lab reports:</p> >+ <blockquote cite="https://gitlab.freedesktop.org/dbus/dbus/-/issues/294"> >+ <p>D-Bus has a file descriptor leak, which can lead to denial of service when the dbus-daemon runs out of file descriptors. >+ An unprivileged local attacker can use this to attack the system dbus-daemon, leading to denial of service for all users of the machine.</p> >+ </blockquote> >+ </body> >+ </description> >+ <references> >+ <url>https://www.openwall.com/lists/oss-security/2020/06/04/3</url> >+ <cvename>CVE-2020-12049</cvename> >+ </references> >+ <dates> >+ <discovery>2020-04-09</discovery> >+ <entry>2020-06-17</entry> >+ </dates> >+ </vuln> >+
You cannot view the attachment while viewing its details because your browser does not support IFRAMEs.
View the attachment on a separate page
.
View Attachment As Diff
View Attachment As Raw
Actions:
View
|
Diff
Attachments on
bug 247340
: 215654