Summary
Kevin Backhouse discovered that DBus incorrectly handled file descriptors.
A local attacker could possibly use this issue to cause DBus to crash,
resulting in a denial of service.
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 16.04 LTS 16.04:LTS | dbus | 1.10.6-1ubuntu3.6 |
| Ubuntu · 18.04 LTS 18.04:LTS | dbus | 1.12.2-1ubuntu1.2 |
| Ubuntu · 20.04 LTS 20.04:LTS | dbus | 1.12.16-2ubuntu2.1 |
Vulnerabilities 1
-
Unscored —
An issue was discovered in dbus >= 1.3.0 before 1.12.18. The DBusServer in libdbus, as used in dbus-daemon, leaks file …
References
-
report
https://ubuntu.com/security/CVE-2020-12049