D-Bus before 1.15.6 sometimes allows unprivileged users to crash dbus-daemon. If a privileged user with control over the dbus-daemon is using the org.freedesktop.DBus.Monitoring interface to monitor message bus traffic, then an unprivileged user with the ability to connect to the same dbus-daemon can cause a dbus-daemon crash under some circumstances via an unreplyable message. When done on the well-known system bus, this is a denial-of-service vulnerability. The fixed versions are 1.12.28, 1.14.8, and 1.15.6.
Metrics
Affected Vendors & Products
References
History
Mon, 09 Jun 2025 15:15:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Weaknesses | CWE-404 | |
Metrics |
ssvc
|

Status: PUBLISHED
Assigner: mitre
Published: 2023-06-08T00:00:00.000Z
Updated: 2025-06-09T15:02:51.642Z
Reserved: 2023-06-08T00:00:00.000Z
Link: CVE-2023-34969

Updated: 2024-08-02T16:17:04.235Z

Status : Modified
Published: 2023-06-08T03:15:08.970
Modified: 2025-06-09T15:15:29.340
Link: CVE-2023-34969
