dbus 1.3.0 before 1.6.22 and 1.8.x before 1.8.6 allows local users to cause a denial of service (disconnect) via a certain sequence of crafted messages that cause the dbus-daemon to forward a message containing an invalid file descriptor.
{
"binaries": [
{
"binary_version": "1.6.18-0ubuntu4.1",
"binary_name": "dbus"
},
{
"binary_version": "1.6.18-0ubuntu4.1",
"binary_name": "dbus-x11"
},
{
"binary_version": "1.6.18-0ubuntu4.1",
"binary_name": "libdbus-1-3"
},
{
"binary_version": "1.6.18-0ubuntu4.1",
"binary_name": "libdbus-1-dev"
}
],
"availability": "No subscription required"
}