Skip to content
OpenAdvisories
Medium ALAS2023-2023-100 3 CVEs

Moderate: dbus security update (Amazon Linux 2023)

Published Feb 17, 2023 · Updated Feb 22, 2023

Summary

Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2022-42012: An issue was discovered in D-Bus before 1.12.24, 1.13.x and 1.14.x before 1.14.4, and 1.15.x before 1.15.2. An authenticated attacker can cause dbus-daemon and other programs that use libdbus to crash by sending a message with attached file descriptors in an unexpected format. CVE-2022-42011: An issue was discovered in D-Bus before 1.12.24, 1.13.x and 1.14.x before 1.14.4, and 1.15.x before 1.15.2. An authenticated attacker can cause dbus-daemon and other programs that use libdbus to crash when receiving a message where an array length is inconsistent with the size of the element type. CVE-2022-42010: An issue was discovered in D-Bus before 1.12.24, 1.13.x and 1.14.x before 1.14.4, and 1.15.x before 1.15.2. An authenticated attacker can cause dbus-daemon and other programs that use libdbus to crash when receiving a message with certain invalid type signatures.

Fixed packages 16

ReleasePackageFixed in
Amazon Linux · 2023 dbus 1:1.12.24-1.amzn2023.0.2
Amazon Linux · 2023 dbus-common 1:1.12.24-1.amzn2023.0.2
Amazon Linux · 2023 dbus-daemon 1:1.12.24-1.amzn2023.0.2
Amazon Linux · 2023 dbus-daemon-debuginfo 1:1.12.24-1.amzn2023.0.2
Amazon Linux · 2023 dbus-debuginfo 1:1.12.24-1.amzn2023.0.2
Amazon Linux · 2023 dbus-debugsource 1:1.12.24-1.amzn2023.0.2
Amazon Linux · 2023 dbus-devel 1:1.12.24-1.amzn2023.0.2
Amazon Linux · 2023 dbus-doc 1:1.12.24-1.amzn2023.0.2
Amazon Linux · 2023 dbus-libs 1:1.12.24-1.amzn2023.0.2
Amazon Linux · 2023 dbus-libs-debuginfo 1:1.12.24-1.amzn2023.0.2
Amazon Linux · 2023 dbus-tests 1:1.12.24-1.amzn2023.0.2
Amazon Linux · 2023 dbus-tests-debuginfo 1:1.12.24-1.amzn2023.0.2
Amazon Linux · 2023 dbus-tools 1:1.12.24-1.amzn2023.0.2
Amazon Linux · 2023 dbus-tools-debuginfo 1:1.12.24-1.amzn2023.0.2
Amazon Linux · 2023 dbus-x11 1:1.12.24-1.amzn2023.0.2
Amazon Linux · 2023 dbus-x11-debuginfo 1:1.12.24-1.amzn2023.0.2

Vulnerabilities 3

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2022-42010.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2022-42011.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2022-42012.html