dbus 1.3.0 before 1.6.22 and 1.8.x before 1.8.6 allows local users to cause a denial of service (disconnect) via a certain sequence of crafted messages that cause the dbus-daemon to forward a message containing an invalid file descriptor.
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "dbus-1-doc": "1.6.18-0ubuntu4.1", "libdbus-1-3": "1.6.18-0ubuntu4.1", "dbus": "1.6.18-0ubuntu4.1", "dbus-1-dbg": "1.6.18-0ubuntu4.1", "dbus-x11": "1.6.18-0ubuntu4.1", "libdbus-1-dev": "1.6.18-0ubuntu4.1" } ] }