CVE-2011-2200

EUVD-2011-2190
The _dbus_header_byteswap function in dbus-marshal-header.c in D-Bus (aka DBus) 1.2.x before 1.2.28, 1.4.x before 1.4.12, and 1.5.x before 1.5.4 does not properly handle a non-native byte order, which allows local users to cause a denial of service (connection loss), obtain potentially sensitive information, or conduct unspecified state-modification attacks via crafted messages.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
4.6 UNKNOWN
LOCAL
LOW
AV:L/AC:L/Au:N/C:P/I:P/A:P
Base Score
CVSS 3.x
EPSS Score
Percentile: 26%
Affected Products (NVD)
VendorProductVersion
freedesktopdbus
1.5.0
freedesktopdbus
1.5.2
freedesktopdbus
1.4.0
freedesktopdbus
1.4.1
freedesktopdbus
1.4.4
freedesktopdbus
1.4.6
freedesktopdbus
1.4.8
freedesktopdbus
1.4.10
d-bus_projectd-bus
1.2.4.2
d-bus_projectd-bus
1.2.4.4
d-bus_projectd-bus
1.2.4.6
freedesktopdbus
1.2.1
freedesktopdbus
1.2.2
freedesktopdbus
1.2.3
freedesktopdbus
1.2.4
freedesktopdbus
1.2.6
freedesktopdbus
1.2.8
freedesktopdbus
1.2.10
freedesktopdbus
1.2.12
freedesktopdbus
1.2.14
freedesktopdbus
1.2.16
freedesktopdbus
1.2.18
freedesktopdbus
1.2.20
freedesktopdbus
1.2.22
freedesktopdbus
1.2.24
freedesktopdbus
1.2.26
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
dbus
bookworm
1.14.10-1~deb12u1
fixed
bullseye
1.12.28-0+deb11u1
fixed
bullseye (security)
1.12.24-0+deb11u1
fixed
lenny
no-dsa
sid
1.14.10-6
fixed
trixie
1.14.10-6
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
dbus
hardy
Fixed 1.1.20-1ubuntu3.5
released
lucid
Fixed 1.2.16-2ubuntu4.3
released
maverick
Fixed 1.4.0-0ubuntu1.3
released
natty
Fixed 1.4.6-1ubuntu6.1
released
Common Weakness Enumeration
References
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=629938
http://cgit.freedesktop.org/dbus/dbus/commit/?h=dbus-1.2&id=6519a1f77c61d753d4c97efd6e15630eb275336e
http://cgit.freedesktop.org/dbus/dbus/commit/?h=dbus-1.4&id=c3223ba6c401ba81df1305851312a47c485e6cd7
http://cgit.freedesktop.org/dbus/dbus/tree/NEWS?h=dbus-1.2
http://cgit.freedesktop.org/dbus/dbus/tree/NEWS?h=dbus-1.4
http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705
http://lists.freedesktop.org/archives/dbus/2007-March/007357.html
http://lists.freedesktop.org/archives/dbus/2011-May/014408.html
http://openwall.com/lists/oss-security/2011/06/12/1
http://openwall.com/lists/oss-security/2011/06/12/2
http://openwall.com/lists/oss-security/2011/06/13/12
http://secunia.com/advisories/44896
http://www.redhat.com/support/errata/RHSA-2011-1132.html
https://bugs.freedesktop.org/show_bug.cgi?id=38120
https://bugzilla.redhat.com/show_bug.cgi?id=712676
https://exchange.xforce.ibmcloud.com/vulnerabilities/67974
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=629938
http://cgit.freedesktop.org/dbus/dbus/commit/?h=dbus-1.2&id=6519a1f77c61d753d4c97efd6e15630eb275336e
http://cgit.freedesktop.org/dbus/dbus/commit/?h=dbus-1.4&id=c3223ba6c401ba81df1305851312a47c485e6cd7
http://cgit.freedesktop.org/dbus/dbus/tree/NEWS?h=dbus-1.2
http://cgit.freedesktop.org/dbus/dbus/tree/NEWS?h=dbus-1.4
http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705
http://lists.freedesktop.org/archives/dbus/2007-March/007357.html
http://lists.freedesktop.org/archives/dbus/2011-May/014408.html
http://openwall.com/lists/oss-security/2011/06/12/1
http://openwall.com/lists/oss-security/2011/06/12/2
http://openwall.com/lists/oss-security/2011/06/13/12
http://secunia.com/advisories/44896
http://www.redhat.com/support/errata/RHSA-2011-1132.html
https://bugs.freedesktop.org/show_bug.cgi?id=38120
https://bugzilla.redhat.com/show_bug.cgi?id=712676
https://exchange.xforce.ibmcloud.com/vulnerabilities/67974