Skip to content
OpenAdvisories
Medium USN-5704-1 3 CVEs

dbus vulnerabilities

Published Oct 27, 2022 · Updated Jun 29, 2026

Ecosystem: Ubuntu

Summary

It was discovered that DBus incorrectly handled messages with invalid type
signatures. A local attacker could possibly use this issue to cause DBus to
crash, resulting in a denial of service. (CVE-2022-42010)

It was discovered that DBus was incorrectly validating the length of arrays of
fixed-length items. A local attacker could possibly use this issue to cause
DBus to crash, resulting in a denial of service. (CVE-2022-42011)

It was discovered that DBus incorrectly handled the body DBus message with
attached file descriptors. A local attacker could possibly use this issue to
cause DBus to crash, resulting in a denial of service. (CVE-2022-42012)

Fixed packages 5

ReleasePackageFixed in
Ubuntu · 18.04 LTS 18.04:LTS dbus 1.12.2-1ubuntu1.4
Ubuntu · 20.04 LTS 20.04:LTS dbus 1.12.16-2ubuntu2.3
Ubuntu · 22.04 LTS 22.04:LTS dbus 1.12.20-2ubuntu4.1
Ubuntu · Pro 14.04 LTS Pro:14.04:LTS dbus 1.6.18-0ubuntu4.5+esm3
Ubuntu · Pro 16.04 LTS Pro:16.04:LTS dbus 1.10.6-1ubuntu3.6+esm2

Vulnerabilities 3

References

  • report
    https://ubuntu.com/security/CVE-2022-42010
  • report
    https://ubuntu.com/security/CVE-2022-42011
  • report
    https://ubuntu.com/security/CVE-2022-42012