fkie_cve-2015-0245
Vulnerability from fkie_nvd
Published
2015-02-13 15:59
Modified
2025-04-12 10:46
Severity ?
Summary
D-Bus 1.4.x through 1.6.x before 1.6.30, 1.8.x before 1.8.16, and 1.9.x before 1.9.10 does not validate the source of ActivationFailure signals, which allows local users to cause a denial of service (activation failure error returned) by leveraging a race condition involving sending an ActivationFailure signal before systemd responds.
References
Impacted products
{
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:freedesktop:dbus:1.4.0:*:*:*:*:*:*:*",
"matchCriteriaId": "2D95FA2A-9CFB-4B02-A849-36431874AB7C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:freedesktop:dbus:1.4.1:*:*:*:*:*:*:*",
"matchCriteriaId": "EE4B9649-3F37-4700-A900-2D0EDFAB1FDB",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:freedesktop:dbus:1.4.4:*:*:*:*:*:*:*",
"matchCriteriaId": "70C7FEDA-AE1E-4BD9-8998-9A6C01F80277",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:freedesktop:dbus:1.4.6:*:*:*:*:*:*:*",
"matchCriteriaId": "71648B78-E1D4-4F74-B029-F6ECE65E84A7",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:freedesktop:dbus:1.4.8:*:*:*:*:*:*:*",
"matchCriteriaId": "AD3C815C-E979-45DF-AA05-1A2CAF4DF910",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:freedesktop:dbus:1.4.10:*:*:*:*:*:*:*",
"matchCriteriaId": "6E72AD88-640C-4B27-9A56-570151667FD5",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:freedesktop:dbus:1.4.12:*:*:*:*:*:*:*",
"matchCriteriaId": "3D986A4B-827C-4064-9004-E4D6FA524FFC",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:freedesktop:dbus:1.4.14:*:*:*:*:*:*:*",
"matchCriteriaId": "F7197910-4381-4D23-85A1-5348D20AAD63",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:freedesktop:dbus:1.4.16:*:*:*:*:*:*:*",
"matchCriteriaId": "B1059BE8-1044-4DC7-9B41-E76A56225000",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:freedesktop:dbus:1.4.18:*:*:*:*:*:*:*",
"matchCriteriaId": "2124D0C2-21A6-4C72-97B9-A53BCDA697DD",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:freedesktop:dbus:1.4.20:*:*:*:*:*:*:*",
"matchCriteriaId": "1646C38B-596F-4614-93FC-0BFB88E9F034",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:freedesktop:dbus:1.4.24:*:*:*:*:*:*:*",
"matchCriteriaId": "9914C4DF-2B1B-416E-BE8A-274676F8CDA5",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:freedesktop:dbus:1.4.26:*:*:*:*:*:*:*",
"matchCriteriaId": "A2126812-E627-4514-8895-177F6A139B8C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:freedesktop:dbus:1.5.0:*:*:*:*:*:*:*",
"matchCriteriaId": "DFC34AF2-60BD-4D52-8704-B0A4E3B9F35E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:freedesktop:dbus:1.5.2:*:*:*:*:*:*:*",
"matchCriteriaId": "AA8D645B-19A4-4AF5-A667-C95F90B8F282",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:freedesktop:dbus:1.5.4:*:*:*:*:*:*:*",
"matchCriteriaId": "4E8E5358-8466-4D3A-8AE4-3EE55700140D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:freedesktop:dbus:1.5.6:*:*:*:*:*:*:*",
"matchCriteriaId": "7B175C3A-44FC-4069-99F4-CFF78DAF6C60",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:freedesktop:dbus:1.5.8:*:*:*:*:*:*:*",
"matchCriteriaId": "36C6830D-92D2-49EC-BD13-BA7EE7720E61",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:freedesktop:dbus:1.5.10:*:*:*:*:*:*:*",
"matchCriteriaId": "3E33E9B8-4543-46D0-837B-DCCAC25C47E7",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:freedesktop:dbus:1.5.12:*:*:*:*:*:*:*",
"matchCriteriaId": "831CFD41-47B0-4920-B118-7AD2CAFBFA85",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:freedesktop:dbus:1.6.0:*:*:*:*:*:*:*",
"matchCriteriaId": "0A772FA8-668B-45AC-9813-0B5ADCE91DD6",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:freedesktop:dbus:1.6.2:*:*:*:*:*:*:*",
"matchCriteriaId": "E155EB75-8D98-4469-98CB-81A40ABF0D9C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:freedesktop:dbus:1.6.4:*:*:*:*:*:*:*",
"matchCriteriaId": "4D6AF8D8-6A4E-4A42-A738-84690B6F9FDC",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:freedesktop:dbus:1.6.6:*:*:*:*:*:*:*",
"matchCriteriaId": "E598FE36-ABEB-4682-950A-E462CC780F82",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:freedesktop:dbus:1.6.8:*:*:*:*:*:*:*",
"matchCriteriaId": "EE224CED-410C-43D8-9220-0AEF5EB49C8D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:freedesktop:dbus:1.6.10:*:*:*:*:*:*:*",
"matchCriteriaId": "A24ED739-0B39-4A70-B7E0-8A859759233D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:freedesktop:dbus:1.6.12:*:*:*:*:*:*:*",
"matchCriteriaId": "F89DEA95-DFB8-4D75-BE65-A477972D143E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:freedesktop:dbus:1.6.14:*:*:*:*:*:*:*",
"matchCriteriaId": "76BCD0D9-4F06-46E7-8734-AAEE28DD1631",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:freedesktop:dbus:1.6.16:*:*:*:*:*:*:*",
"matchCriteriaId": "C22CA4E4-458D-465A-8272-473055A608EB",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:freedesktop:dbus:1.6.18:*:*:*:*:*:*:*",
"matchCriteriaId": "8133A184-FC2E-41AC-B2C2-EFD819B011FC",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:freedesktop:dbus:1.6.20:*:*:*:*:*:*:*",
"matchCriteriaId": "2D5009D1-BDA4-4DFC-A629-07144BDAEC93",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:freedesktop:dbus:1.6.22:*:*:*:*:*:*:*",
"matchCriteriaId": "1A1D15D9-89A1-4742-8613-4CFF215525DB",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:freedesktop:dbus:1.6.24:*:*:*:*:*:*:*",
"matchCriteriaId": "B38D12A6-4ED9-4510-BA44-3CD0B1A2163B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:freedesktop:dbus:1.6.26:*:*:*:*:*:*:*",
"matchCriteriaId": "835DB488-7518-48D8-84C0-9683DB17BFF4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:freedesktop:dbus:1.6.28:*:*:*:*:*:*:*",
"matchCriteriaId": "1B63977B-D6F0-4C62-8333-EF7EBE21D030",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:freedesktop:dbus:1.8.0:*:*:*:*:*:*:*",
"matchCriteriaId": "9AB63C07-1022-4EEE-B419-4E0A80AE64A5",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:freedesktop:dbus:1.8.2:*:*:*:*:*:*:*",
"matchCriteriaId": "68B161B9-7385-4C0B-AC4D-1145E1004B74",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:freedesktop:dbus:1.8.4:*:*:*:*:*:*:*",
"matchCriteriaId": "6DD6AAFC-C18F-4AF5-B8D1-82F85F8421DC",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:freedesktop:dbus:1.8.6:*:*:*:*:*:*:*",
"matchCriteriaId": "A214F572-0572-426B-979C-22EB3A43ED6F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:freedesktop:dbus:1.8.8:*:*:*:*:*:*:*",
"matchCriteriaId": "A1664AE8-6009-4CC1-8A4A-C3E55C431018",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:freedesktop:dbus:1.8.10:*:*:*:*:*:*:*",
"matchCriteriaId": "0B45E579-E43F-4725-A5AE-5194B6126ABA",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:freedesktop:dbus:1.8.12:*:*:*:*:*:*:*",
"matchCriteriaId": "59787F9D-0D7E-483F-BFAE-4426523C518A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:freedesktop:dbus:1.8.14:*:*:*:*:*:*:*",
"matchCriteriaId": "760A9BEA-337D-45D7-83B3-5446A0841277",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:freedesktop:dbus:1.9.0:*:*:*:*:*:*:*",
"matchCriteriaId": "8E6D58E5-A652-4A45-A4A0-53B98FB8B251",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:freedesktop:dbus:1.9.2:*:*:*:*:*:*:*",
"matchCriteriaId": "EB313FC3-FE3E-43B5-8B3B-146D03EA2BFF",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:freedesktop:dbus:1.9.4:*:*:*:*:*:*:*",
"matchCriteriaId": "3CE1EB43-CF8C-4E61-A262-CDB0DAE862D6",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:freedesktop:dbus:1.9.6:*:*:*:*:*:*:*",
"matchCriteriaId": "CCE5143A-1691-4C95-9C39-87C575FDE7EA",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:freedesktop:dbus:1.9.8:*:*:*:*:*:*:*",
"matchCriteriaId": "F4037B8B-16F0-490F-AF47-269D990E30F9",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*",
"matchCriteriaId": "A10BC294-9196-425F-9FB0-B1625465B47F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*",
"matchCriteriaId": "03117DF1-3BEC-4B8D-AD63-DBBDB2126081",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "D-Bus 1.4.x through 1.6.x before 1.6.30, 1.8.x before 1.8.16, and 1.9.x before 1.9.10 does not validate the source of ActivationFailure signals, which allows local users to cause a denial of service (activation failure error returned) by leveraging a race condition involving sending an ActivationFailure signal before systemd responds."
},
{
"lang": "es",
"value": "D-Bus 1.4.x hasta 1.6.x anterior a 1.6.30, 1.8.x anterior a 1.8.16, y 1.9.x anterior a 1.9.10 no valida la fuente de los se\u00f1ales ActivationFailure, lo que permite a usuarios locales causar una denegaci\u00f3n de servicio (retorno del error del fallo de activaci\u00f3n) mediante el aprovechamiento de una condici\u00f3n de carrera que involucra el env\u00edo de un se\u00f1al ActivationFailure antes de que systemd responda."
}
],
"id": "CVE-2015-0245",
"lastModified": "2025-04-12T10:46:40.837",
"metrics": {
"cvssMetricV2": [
{
"acInsufInfo": false,
"baseSeverity": "LOW",
"cvssData": {
"accessComplexity": "MEDIUM",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 1.9,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:L/AC:M/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
"exploitabilityScore": 3.4,
"impactScore": 2.9,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"source": "nvd@nist.gov",
"type": "Primary",
"userInteractionRequired": false
}
]
},
"published": "2015-02-13T15:59:08.337",
"references": [
{
"source": "secalert@redhat.com",
"url": "http://advisories.mageia.org/MGASA-2015-0071.html"
},
{
"source": "secalert@redhat.com",
"url": "http://lists.opensuse.org/opensuse-updates/2015-02/msg00066.html"
},
{
"source": "secalert@redhat.com",
"url": "http://www.debian.org/security/2015/dsa-3161"
},
{
"source": "secalert@redhat.com",
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:176"
},
{
"source": "secalert@redhat.com",
"url": "http://www.openwall.com/lists/oss-security/2015/02/09/6"
},
{
"source": "secalert@redhat.com",
"url": "http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://advisories.mageia.org/MGASA-2015-0071.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://lists.opensuse.org/opensuse-updates/2015-02/msg00066.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://www.debian.org/security/2015/dsa-3161"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:176"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://www.openwall.com/lists/oss-security/2015/02/09/6"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html"
}
],
"sourceIdentifier": "secalert@redhat.com",
"vulnStatus": "Deferred",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-362"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
}
]
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.
Loading…
Loading…