D-Bus 1.3.0 through 1.6.x before 1.6.24 and 1.8.x before 1.8.8 does not properly close connections for processes that have terminated, which allows local users to cause a denial of service via a D-bus message containing a D-Bus connection file descriptor.<a href=http://cwe.mitre.org/data/definitions/775.html>CWE-775: Missing Release of File Descriptor or Handle after Effective Lifetime</a> http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-3637
