Skip to content
OpenAdvisories
Medium USN-2275-1 3 CVEs

dbus vulnerabilities

Published Jul 8, 2014 · Updated Apr 22, 2026

Ecosystem: Ubuntu

Summary

Alban Crequy discovered that dbus-daemon incorrectly sent AccessDenied
errors to the service instead of the client when enforcing permissions. A
local user can use this issue to possibly deny access to the service.
(CVE-2014-3477)

Alban Crequy discovered that dbus-daemon incorrectly handled certain file
descriptors. A local attacker could use this issue to cause services or
clients to disconnect, resulting in a denial of service. (CVE-2014-3532,
CVE-2014-3533)

Fixed packages 1

ReleasePackageFixed in
Ubuntu · 14.04 LTS 14.04:LTS dbus 1.6.18-0ubuntu4.1

Vulnerabilities 3

  • Medium 4.0
    CVE-2014-3477

    The dbus-daemon in D-Bus 1.2.x through 1.4.x, 1.6.x before 1.6.20, and 1.8.x before 1.8.4, sends an AccessDenied error …

    dbus dbus Debian Ubuntu
  • Unscored —
    CVE-2014-3532

    dbus 1.3.0 before 1.6.22 and 1.8.x before 1.8.6, when running on Linux 2.6.37-rc4 or later, allows local users to cause…

    dbus dbus Debian Ubuntu
  • Unscored —
    CVE-2014-3533

    dbus 1.3.0 before 1.6.22 and 1.8.x before 1.8.6 allows local users to cause a denial of service (disconnect) via a cert…

    dbus dbus Debian Ubuntu

References

  • report
    https://ubuntu.com/security/CVE-2014-3477
  • report
    https://ubuntu.com/security/CVE-2014-3532
  • report
    https://ubuntu.com/security/CVE-2014-3533