CVE-2010-4352
LOW 2.1EPSS 0.6%
Stack consumption vulnerability in D-Bus (aka DBus) before 1.4.1 allows local users to cause a denial of service (daemon crash) via a message containing many nested variants.
- CVSS v2.0 NVD
- 2.1 LOW
AV:L/AC:L/Au:N/C:N/I:N/A:P - EPSS
- 0.58% chance of exploitation in the next 30 days, 47th percentile
- Published
- 2010-12-30
- Updated
- 2024-08-07
Proof-of-concept exploits (1)
Security advisories
- http://secunia.com/advisories/42580
- http://secunia.com/advisories/42760
- http://www.remlab.net/op/dbus-variant-recursion.shtml
- http://www.vupen.com/english/advisories/2010/3325
- http://cgit.freedesktop.org/dbus/dbus/commit/?id=7d65a3a6ed8815e34a99c680ac3869fde49dbbd4
- http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052550.html
- http://openwall.com/lists/oss-security/2010/12/16/3
- http://openwall.com/lists/oss-security/2010/12/16/6
- https://bugzilla.redhat.com/show_bug.cgi?id=663673
- http://www.securityfocus.com/bid/45377
- http://www.ubuntu.com/usn/USN-1044-1