Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2014-3477

The dbus-daemon in D-Bus 1.2.x through 1.4.x, 1.6.x before 1.6.20, and 1.8.x before 1.8.4, sends an AccessDenied error to the service instead of a client when the client is prohibited from accessing the service, which allows local users to cause a denial of service (initialization failure and exit) or possibly conduct a side-channel attack via a D-Bus message to an inactive service.

Published

2014-07-01T17:55:04.277

Last Modified

2025-04-12T10:46:40.837

Status

Deferred

Source

[email protected]

Severity

CVSSv3.1: 4.0 (MEDIUM)

CVSSv2 Vector

AV:L/AC:L/Au:N/C:N/I:N/A:P

  • Access Vector: LOCAL
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: NONE
  • Integrity Impact: NONE
  • Availability Impact: PARTIAL
Exploitability Score

3.9

Impact Score

2.9

Weaknesses
  • Type: Primary
    NVD-CWE-noinfo
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application d-bus_project d-bus 1.2.4.2 Yes
Application d-bus_project d-bus 1.2.4.4 Yes
Application d-bus_project d-bus 1.2.4.6 Yes
Application freedesktop dbus 1.2.1 Yes
Application freedesktop dbus 1.2.3 Yes
Application freedesktop dbus 1.2.4 Yes
Application freedesktop dbus 1.2.6 Yes
Application freedesktop dbus 1.2.8 Yes
Application freedesktop dbus 1.2.10 Yes
Application freedesktop dbus 1.2.12 Yes
Application freedesktop dbus 1.2.14 Yes
Application freedesktop dbus 1.2.16 Yes
Application freedesktop dbus 1.2.18 Yes
Application freedesktop dbus 1.2.20 Yes
Application freedesktop dbus 1.2.22 Yes
Application freedesktop dbus 1.2.24 Yes
Application freedesktop dbus 1.2.26 Yes
Application freedesktop dbus 1.2.28 Yes
Application freedesktop dbus 1.2.30 Yes
Application freedesktop dbus 1.3.0 Yes
Application freedesktop dbus 1.3.1 Yes
Application freedesktop dbus 1.4.0 Yes
Application freedesktop dbus 1.4.1 Yes
Application freedesktop dbus 1.4.4 Yes
Application freedesktop dbus 1.4.6 Yes
Application freedesktop dbus 1.4.8 Yes
Application freedesktop dbus 1.4.10 Yes
Application freedesktop dbus 1.4.12 Yes
Application freedesktop dbus 1.4.14 Yes
Application freedesktop dbus 1.4.16 Yes
Application freedesktop dbus 1.4.18 Yes
Application freedesktop dbus 1.4.20 Yes
Application freedesktop dbus 1.4.22 Yes
Application freedesktop dbus 1.4.24 Yes
Application freedesktop dbus 1.4.26 Yes
Application freedesktop dbus 1.6.0 Yes
Application freedesktop dbus 1.6.2 Yes
Application freedesktop dbus 1.6.4 Yes
Application freedesktop dbus 1.6.6 Yes
Application freedesktop dbus 1.6.8 Yes
Application freedesktop dbus 1.6.10 Yes
Application freedesktop dbus 1.6.12 Yes
Application freedesktop dbus 1.6.14 Yes
Application freedesktop dbus 1.6.16 Yes
Application freedesktop dbus 1.6.18 Yes
Application freedesktop dbus 1.8.0 Yes
Application freedesktop dbus 1.8.2 Yes
References