MGASA-2020-0262
- Source
- https://advisories.mageia.org/MGASA-2020-0262.html
- Import Source
- https://advisories.mageia.org/MGASA-2020-0262.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/MGASA-2020-0262
- Related
- Published
- 2020-06-15T07:54:40Z
- Modified
- 2020-06-15T07:09:12Z
- Summary
- Updated dbus packages fix security vulnerability
- Details
-
The updated packages fix a security vulnerability: An issue was discovered in dbus >= 1.3.0 before 1.12.18. The DBusServer in libdbus, as used in dbus-daemon, leaks file descriptors when a message exceeds the per-message file descriptor limit. A local attacker with access to the D-Bus system bus or another system service's private AF_UNIX socket could use this to make the system service reach its file descriptor limit, denying service to subsequent D-Bus clients. (CVE-2020-12049)
- References
- Credits
-
-
- Mageia - COORDINATOR
-