Red Hat Security AdvisoryRHSA-2010:0018
dbus security update
Released 2010-01-07 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) dbus-1.1.2-12.el5_4.1, dbus-1.1.2-12.el5_4.1.i386, dbus-1.1.2-12.el5_4.1.ia64 +13
- Red Hat Enterprise Linux Desktop (v. 5 client) dbus-1.1.2-12.el5_4.1, dbus-1.1.2-12.el5_4.1.i386, dbus-libs-1.1.2-12.el5_4.1 +3
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) dbus-1.1.2-12.el5_4.1, dbus-devel-1.1.2-12.el5_4.1, dbus-devel-1.1.2-12.el5_4.1.i386
Fixes 1 record
Priority LOW 20
The _dbus_validate_signature_with_reason function (dbus-marshal-validate.c) in D-Bus (aka DBus) before 1.2.14 uses incorrect logic to validate a basic type, which allows remote attackers to spoof a signature via a crafte…
CVSS 2.0LOW 3.6· Local · No auth · Interaction — · EPSS 0.01321 · Published 2009-04-27 · Fixed CWE-20
