Summary
USN-5244-1 fixed a vulnerability in DBus. This update provides
the corresponding update for Ubuntu 18.04 LTS and Ubuntu 20.04 LTS.
Original advisory details:
Daniel Onaca discovered that DBus contained a use-after-free vulnerability,
caused by the incorrect handling of usernames sharing the same UID. An
attacker could possibly use this issue to cause DBus to crash, resulting
in a denial of service.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 18.04 LTS 18.04:LTS | dbus | 1.12.2-1ubuntu1.3 |
| Ubuntu · 20.04 LTS 20.04:LTS | dbus | 1.12.16-2ubuntu2.2 |
Vulnerabilities 1
-
Unscored —
A use-after-free flaw was found in D-Bus Development branch <= 1.13.16, dbus-1.12.x stable branch <= 1.12.18, and dbus-…
References
-
report
https://ubuntu.com/security/CVE-2020-35512