Wind River Support Network

HomeDefectsLIN5-19532
Fixed

LIN5-19532 : Security Advisory - dbus - CVE-2014-3637

Created: Oct 14, 2014    Updated: Dec 19, 2017
Resolved Date: Dec 28, 2014
Found In Version: 5.0.1
Fix Version: 5.0.1.23
Severity: Standard
Applicable for: Wind River Linux 5
Component/s: Userspace

Description

D-Bus 1.3.0 through 1.6.x before 1.6.24 and 1.8.x before 1.8.8 does not properly close connections for processes that have terminated, which allows local users to cause a denial of service via a D-bus message containing a D-Bus connection file descriptor.<a href=http://cwe.mitre.org/data/definitions/775.html>CWE-775: Missing Release of File Descriptor or Handle after Effective Lifetime</a>

http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-3637

Other Downloads


Live chat
Online