A use-after-free flaw was found in D-Bus Development branch <= 1.13.16, dbus-1.12.x stable branch <= 1.12.18, and dbus-1.10.x and older branches <= 1.10.30 when a system has multiple usernames sharing the same UID. When a set of policy rules references these usernames, D-Bus may free some memory in the heap, which is still used by data structures necessary for the other usernames sharing the UID, possibly leading to a crash or other undefined behaviors
{ "binaries": [ { "binary_version": "1.6.18-0ubuntu4.5+esm3", "binary_name": "dbus" }, { "binary_version": "1.6.18-0ubuntu4.5+esm3", "binary_name": "dbus-x11" }, { "binary_version": "1.6.18-0ubuntu4.5+esm3", "binary_name": "libdbus-1-3" }, { "binary_version": "1.6.18-0ubuntu4.5+esm3", "binary_name": "libdbus-1-dev" } ] }
{ "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro", "binaries": [ { "binary_version": "1.10.6-1ubuntu3.6+esm1", "binary_name": "dbus" }, { "binary_version": "1.10.6-1ubuntu3.6+esm1", "binary_name": "dbus-tests" }, { "binary_version": "1.10.6-1ubuntu3.6+esm1", "binary_name": "dbus-user-session" }, { "binary_version": "1.10.6-1ubuntu3.6+esm1", "binary_name": "dbus-x11" }, { "binary_version": "1.10.6-1ubuntu3.6+esm1", "binary_name": "libdbus-1-3" }, { "binary_version": "1.10.6-1ubuntu3.6+esm1", "binary_name": "libdbus-1-dev" } ] }
{ "availability": "No subscription required", "binaries": [ { "binary_version": "1.12.2-1ubuntu1.3", "binary_name": "dbus" }, { "binary_version": "1.12.2-1ubuntu1.3", "binary_name": "dbus-tests" }, { "binary_version": "1.12.2-1ubuntu1.3", "binary_name": "dbus-user-session" }, { "binary_version": "1.12.2-1ubuntu1.3", "binary_name": "dbus-x11" }, { "binary_version": "1.12.2-1ubuntu1.3", "binary_name": "libdbus-1-3" }, { "binary_version": "1.12.2-1ubuntu1.3", "binary_name": "libdbus-1-dev" } ] }
{ "availability": "No subscription required", "binaries": [ { "binary_version": "1.12.16-2ubuntu2.2", "binary_name": "dbus" }, { "binary_version": "1.12.16-2ubuntu2.2", "binary_name": "dbus-tests" }, { "binary_version": "1.12.16-2ubuntu2.2", "binary_name": "dbus-user-session" }, { "binary_version": "1.12.16-2ubuntu2.2", "binary_name": "dbus-x11" }, { "binary_version": "1.12.16-2ubuntu2.2", "binary_name": "libdbus-1-3" }, { "binary_version": "1.12.16-2ubuntu2.2", "binary_name": "libdbus-1-dev" } ] }