Read the docs
TI-2006-05872 Aliases CVE-2006-6107GHSA-r8m2-5wq2-xvh3

Unspecified vulnerability in the match_rule_equal function in bus/signals.c in D-Bus…

Priority LOW 10Published · Updated

Key facts

Attack vector
Local
Privileges required
Low
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
None · None · Partial
Fix status
Fixed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA and Red Hat.

Summary

Unspecified vulnerability in the match_rule_equal function in bus/signals.c in D-Bus before 1.0.2 allows local applications to remove match rules for other applications and cause a denial of service (lost process messages).

Why it matters now

EPSS 0.00398 34th percentileScored 2026-11-08
Fix Fixed Red Hat: 1 advisory

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 7

CPEVersionsRoleVendor
cpe:2.3:a:d-bus:d-bus:0.13:*:*:*:*:*:*:*0.13VulnerableD-bus
cpe:2.3:a:d-bus:d-bus:0.20:*:*:*:*:*:*:*0.20VulnerableD-bus
cpe:2.3:a:d-bus:d-bus:0.21:*:*:*:*:*:*:*0.21VulnerableD-bus
cpe:2.3:a:d-bus:d-bus:0.22:*:*:*:*:*:*:*0.22VulnerableD-bus
cpe:2.3:a:d-bus:d-bus:0.23:*:*:*:*:*:*:*0.23VulnerableD-bus
cpe:2.3:a:d-bus:d-bus:1.0:*:*:*:*:*:*:*1.0VulnerableD-bus
cpe:2.3:a:d-bus:d-bus:1.0.1:*:*:*:*:*:*:*1.0.1VulnerableD-bus
  • cpe:2.3:a:d-bus:d-bus:0.13:*:*:*:*:*:*:* Versions 0.13 Vulnerable ·D-bus
  • cpe:2.3:a:d-bus:d-bus:0.20:*:*:*:*:*:*:* Versions 0.20 Vulnerable ·D-bus
  • cpe:2.3:a:d-bus:d-bus:0.21:*:*:*:*:*:*:* Versions 0.21 Vulnerable ·D-bus
  • cpe:2.3:a:d-bus:d-bus:0.22:*:*:*:*:*:*:* Versions 0.22 Vulnerable ·D-bus
  • cpe:2.3:a:d-bus:d-bus:0.23:*:*:*:*:*:*:* Versions 0.23 Vulnerable ·D-bus
  • cpe:2.3:a:d-bus:d-bus:1.0:*:*:*:*:*:*:* Versions 1.0 Vulnerable ·D-bus
  • cpe:2.3:a:d-bus:d-bus:1.0.1:*:*:*:*:*:*:* Versions 1.0.1 Vulnerable ·D-bus

Remediation

Red Hat 1 advisory

  • RHSA-2007:0008 Released 2007-02-08 · Red Hat rating Moderate
    dbus security update
    • Red Hat Enterprise Linux AS version 4 dbus-0.22-12.EL.8, dbus-0.22-12.EL.8.i386, dbus-0.22-12.EL.8.ia64 +17
    • Red Hat Enterprise Linux Desktop version 4 dbus-0.22-12.EL.8, dbus-0.22-12.EL.8.i386, dbus-devel-0.22-12.EL.8 +7
    • Red Hat Enterprise Linux ES version 4 dbus-0.22-12.EL.8, dbus-0.22-12.EL.8.i386, dbus-0.22-12.EL.8.ia64 +12
    • Red Hat Enterprise Linux WS version 4 dbus-0.22-12.EL.8, dbus-0.22-12.EL.8.i386, dbus-0.22-12.EL.8.ia64 +12

Vendor assessments

Red Hat

Red Hat rating: Moderate. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Enterprise Linux AS version 4Fixed RHSA-2007:0008
Red Hat Enterprise Linux Desktop version 4Fixed RHSA-2007:0008
Red Hat Enterprise Linux ES version 4Fixed RHSA-2007:0008
Red Hat Enterprise Linux WS version 4Fixed RHSA-2007:0008

Timeline

  1. 2026-10-02 Threatist record created from CVE-2006-6107
  2. 2026-10-03 Alias added: GHSA-r8m2-5wq2-xvh3

References

Patch 1

Advisory 5

Other 5

  • TI-2005-00169 D-BUS (dbus) before 0.22 does not properly restrict access to a socket, if the socket… CVSS 2.0LOW 2.1

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences