{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2015-02-09T00:00:00", "descriptions": [{"lang": "en", "value": "D-Bus 1.4.x through 1.6.x before 1.6.30, 1.8.x before 1.8.16, and 1.9.x before 1.9.10 does not validate the source of ActivationFailure signals, which allows local users to cause a denial of service (activation failure error returned) by leveraging a race condition involving sending an ActivationFailure signal before systemd responds."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2016-11-16T20:57:01", "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "shortName": "redhat"}, "references": [{"tags": ["x_refsource_CONFIRM"], "url": "http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html"}, {"name": "openSUSE-SU-2015:0300", "tags": ["vendor-advisory", "x_refsource_SUSE"], "url": "http://lists.opensuse.org/opensuse-updates/2015-02/msg00066.html"}, {"name": "DSA-3161", "tags": ["vendor-advisory", "x_refsource_DEBIAN"], "url": "http://www.debian.org/security/2015/dsa-3161"}, {"name": "[oss-security] 20150209 CVE-2015-0245: denial of service in dbus >= 1.4 systemd activation", "tags": ["mailing-list", "x_refsource_MLIST"], "url": "http://www.openwall.com/lists/oss-security/2015/02/09/6"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://advisories.mageia.org/MGASA-2015-0071.html"}, {"name": "MDVSA-2015:176", "tags": ["vendor-advisory", "x_refsource_MANDRIVA"], "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:176"}]}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-06T04:03:10.538Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html"}, {"name": "openSUSE-SU-2015:0300", "tags": ["vendor-advisory", "x_refsource_SUSE", "x_transferred"], "url": "http://lists.opensuse.org/opensuse-updates/2015-02/msg00066.html"}, {"name": "DSA-3161", "tags": ["vendor-advisory", "x_refsource_DEBIAN", "x_transferred"], "url": "http://www.debian.org/security/2015/dsa-3161"}, {"name": "[oss-security] 20150209 CVE-2015-0245: denial of service in dbus >= 1.4 systemd activation", "tags": ["mailing-list", "x_refsource_MLIST", "x_transferred"], "url": "http://www.openwall.com/lists/oss-security/2015/02/09/6"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://advisories.mageia.org/MGASA-2015-0071.html"}, {"name": "MDVSA-2015:176", "tags": ["vendor-advisory", "x_refsource_MANDRIVA", "x_transferred"], "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:176"}]}]}, "cveMetadata": {"assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "assignerShortName": "redhat", "cveId": "CVE-2015-0245", "datePublished": "2015-02-13T15:00:00", "dateReserved": "2014-11-18T00:00:00", "dateUpdated": "2024-08-06T04:03:10.538Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:freedesktop:dbus:1.4.0:*:*:*:*:*:*:*", "matchCriteriaId": "2D95FA2A-9CFB-4B02-A849-36431874AB7C", "vulnerable": true}, {"criteria": "cpe:2.3:a:freedesktop:dbus:1.4.1:*:*:*:*:*:*:*", "matchCriteriaId": "EE4B9649-3F37-4700-A900-2D0EDFAB1FDB", "vulnerable": true}, {"criteria": "cpe:2.3:a:freedesktop:dbus:1.4.4:*:*:*:*:*:*:*", "matchCriteriaId": "70C7FEDA-AE1E-4BD9-8998-9A6C01F80277", "vulnerable": true}, {"criteria": "cpe:2.3:a:freedesktop:dbus:1.4.6:*:*:*:*:*:*:*", "matchCriteriaId": "71648B78-E1D4-4F74-B029-F6ECE65E84A7", "vulnerable": true}, {"criteria": "cpe:2.3:a:freedesktop:dbus:1.4.8:*:*:*:*:*:*:*", "matchCriteriaId": "AD3C815C-E979-45DF-AA05-1A2CAF4DF910", "vulnerable": true}, {"criteria": "cpe:2.3:a:freedesktop:dbus:1.4.10:*:*:*:*:*:*:*", "matchCriteriaId": "6E72AD88-640C-4B27-9A56-570151667FD5", "vulnerable": true}, {"criteria": "cpe:2.3:a:freedesktop:dbus:1.4.12:*:*:*:*:*:*:*", "matchCriteriaId": "3D986A4B-827C-4064-9004-E4D6FA524FFC", "vulnerable": true}, {"criteria": "cpe:2.3:a:freedesktop:dbus:1.4.14:*:*:*:*:*:*:*", "matchCriteriaId": "F7197910-4381-4D23-85A1-5348D20AAD63", "vulnerable": true}, {"criteria": "cpe:2.3:a:freedesktop:dbus:1.4.16:*:*:*:*:*:*:*", "matchCriteriaId": "B1059BE8-1044-4DC7-9B41-E76A56225000", "vulnerable": true}, {"criteria": "cpe:2.3:a:freedesktop:dbus:1.4.18:*:*:*:*:*:*:*", "matchCriteriaId": "2124D0C2-21A6-4C72-97B9-A53BCDA697DD", "vulnerable": true}, {"criteria": "cpe:2.3:a:freedesktop:dbus:1.4.20:*:*:*:*:*:*:*", "matchCriteriaId": "1646C38B-596F-4614-93FC-0BFB88E9F034", "vulnerable": true}, {"criteria": "cpe:2.3:a:freedesktop:dbus:1.4.24:*:*:*:*:*:*:*", "matchCriteriaId": "9914C4DF-2B1B-416E-BE8A-274676F8CDA5", "vulnerable": true}, {"criteria": "cpe:2.3:a:freedesktop:dbus:1.4.26:*:*:*:*:*:*:*", "matchCriteriaId": "A2126812-E627-4514-8895-177F6A139B8C", "vulnerable": true}, {"criteria": "cpe:2.3:a:freedesktop:dbus:1.5.0:*:*:*:*:*:*:*", "matchCriteriaId": "DFC34AF2-60BD-4D52-8704-B0A4E3B9F35E", "vulnerable": true}, {"criteria": "cpe:2.3:a:freedesktop:dbus:1.5.2:*:*:*:*:*:*:*", "matchCriteriaId": "AA8D645B-19A4-4AF5-A667-C95F90B8F282", "vulnerable": true}, {"criteria": "cpe:2.3:a:freedesktop:dbus:1.5.4:*:*:*:*:*:*:*", "matchCriteriaId": "4E8E5358-8466-4D3A-8AE4-3EE55700140D", "vulnerable": true}, {"criteria": "cpe:2.3:a:freedesktop:dbus:1.5.6:*:*:*:*:*:*:*", "matchCriteriaId": "7B175C3A-44FC-4069-99F4-CFF78DAF6C60", "vulnerable": true}, {"criteria": "cpe:2.3:a:freedesktop:dbus:1.5.8:*:*:*:*:*:*:*", "matchCriteriaId": "36C6830D-92D2-49EC-BD13-BA7EE7720E61", "vulnerable": true}, {"criteria": "cpe:2.3:a:freedesktop:dbus:1.5.10:*:*:*:*:*:*:*", "matchCriteriaId": "3E33E9B8-4543-46D0-837B-DCCAC25C47E7", "vulnerable": true}, {"criteria": "cpe:2.3:a:freedesktop:dbus:1.5.12:*:*:*:*:*:*:*", "matchCriteriaId": "831CFD41-47B0-4920-B118-7AD2CAFBFA85", "vulnerable": true}, {"criteria": "cpe:2.3:a:freedesktop:dbus:1.6.0:*:*:*:*:*:*:*", "matchCriteriaId": "0A772FA8-668B-45AC-9813-0B5ADCE91DD6", "vulnerable": true}, {"criteria": "cpe:2.3:a:freedesktop:dbus:1.6.2:*:*:*:*:*:*:*", "matchCriteriaId": "E155EB75-8D98-4469-98CB-81A40ABF0D9C", "vulnerable": true}, {"criteria": "cpe:2.3:a:freedesktop:dbus:1.6.4:*:*:*:*:*:*:*", "matchCriteriaId": "4D6AF8D8-6A4E-4A42-A738-84690B6F9FDC", "vulnerable": true}, {"criteria": "cpe:2.3:a:freedesktop:dbus:1.6.6:*:*:*:*:*:*:*", "matchCriteriaId": "E598FE36-ABEB-4682-950A-E462CC780F82", "vulnerable": true}, {"criteria": "cpe:2.3:a:freedesktop:dbus:1.6.8:*:*:*:*:*:*:*", "matchCriteriaId": "EE224CED-410C-43D8-9220-0AEF5EB49C8D", "vulnerable": true}, {"criteria": "cpe:2.3:a:freedesktop:dbus:1.6.10:*:*:*:*:*:*:*", "matchCriteriaId": "A24ED739-0B39-4A70-B7E0-8A859759233D", "vulnerable": true}, {"criteria": "cpe:2.3:a:freedesktop:dbus:1.6.12:*:*:*:*:*:*:*", "matchCriteriaId": "F89DEA95-DFB8-4D75-BE65-A477972D143E", "vulnerable": true}, {"criteria": "cpe:2.3:a:freedesktop:dbus:1.6.14:*:*:*:*:*:*:*", "matchCriteriaId": "76BCD0D9-4F06-46E7-8734-AAEE28DD1631", "vulnerable": true}, {"criteria": "cpe:2.3:a:freedesktop:dbus:1.6.16:*:*:*:*:*:*:*", "matchCriteriaId": "C22CA4E4-458D-465A-8272-473055A608EB", "vulnerable": true}, {"criteria": "cpe:2.3:a:freedesktop:dbus:1.6.18:*:*:*:*:*:*:*", "matchCriteriaId": "8133A184-FC2E-41AC-B2C2-EFD819B011FC", "vulnerable": true}, {"criteria": "cpe:2.3:a:freedesktop:dbus:1.6.20:*:*:*:*:*:*:*", "matchCriteriaId": "2D5009D1-BDA4-4DFC-A629-07144BDAEC93", "vulnerable": true}, {"criteria": "cpe:2.3:a:freedesktop:dbus:1.6.22:*:*:*:*:*:*:*", "matchCriteriaId": "1A1D15D9-89A1-4742-8613-4CFF215525DB", "vulnerable": true}, {"criteria": "cpe:2.3:a:freedesktop:dbus:1.6.24:*:*:*:*:*:*:*", "matchCriteriaId": "B38D12A6-4ED9-4510-BA44-3CD0B1A2163B", "vulnerable": true}, {"criteria": "cpe:2.3:a:freedesktop:dbus:1.6.26:*:*:*:*:*:*:*", "matchCriteriaId": "835DB488-7518-48D8-84C0-9683DB17BFF4", "vulnerable": true}, {"criteria": "cpe:2.3:a:freedesktop:dbus:1.6.28:*:*:*:*:*:*:*", "matchCriteriaId": "1B63977B-D6F0-4C62-8333-EF7EBE21D030", "vulnerable": true}, {"criteria": "cpe:2.3:a:freedesktop:dbus:1.8.0:*:*:*:*:*:*:*", "matchCriteriaId": "9AB63C07-1022-4EEE-B419-4E0A80AE64A5", "vulnerable": true}, {"criteria": "cpe:2.3:a:freedesktop:dbus:1.8.2:*:*:*:*:*:*:*", "matchCriteriaId": "68B161B9-7385-4C0B-AC4D-1145E1004B74", "vulnerable": true}, {"criteria": "cpe:2.3:a:freedesktop:dbus:1.8.4:*:*:*:*:*:*:*", "matchCriteriaId": "6DD6AAFC-C18F-4AF5-B8D1-82F85F8421DC", "vulnerable": true}, {"criteria": "cpe:2.3:a:freedesktop:dbus:1.8.6:*:*:*:*:*:*:*", "matchCriteriaId": "A214F572-0572-426B-979C-22EB3A43ED6F", "vulnerable": true}, {"criteria": "cpe:2.3:a:freedesktop:dbus:1.8.8:*:*:*:*:*:*:*", "matchCriteriaId": "A1664AE8-6009-4CC1-8A4A-C3E55C431018", "vulnerable": true}, {"criteria": "cpe:2.3:a:freedesktop:dbus:1.8.10:*:*:*:*:*:*:*", "matchCriteriaId": "0B45E579-E43F-4725-A5AE-5194B6126ABA", "vulnerable": true}, {"criteria": "cpe:2.3:a:freedesktop:dbus:1.8.12:*:*:*:*:*:*:*", "matchCriteriaId": "59787F9D-0D7E-483F-BFAE-4426523C518A", "vulnerable": true}, {"criteria": "cpe:2.3:a:freedesktop:dbus:1.8.14:*:*:*:*:*:*:*", "matchCriteriaId": "760A9BEA-337D-45D7-83B3-5446A0841277", "vulnerable": true}, {"criteria": "cpe:2.3:a:freedesktop:dbus:1.9.0:*:*:*:*:*:*:*", "matchCriteriaId": "8E6D58E5-A652-4A45-A4A0-53B98FB8B251", "vulnerable": true}, {"criteria": "cpe:2.3:a:freedesktop:dbus:1.9.2:*:*:*:*:*:*:*", "matchCriteriaId": "EB313FC3-FE3E-43B5-8B3B-146D03EA2BFF", "vulnerable": true}, {"criteria": "cpe:2.3:a:freedesktop:dbus:1.9.4:*:*:*:*:*:*:*", "matchCriteriaId": "3CE1EB43-CF8C-4E61-A262-CDB0DAE862D6", "vulnerable": true}, {"criteria": "cpe:2.3:a:freedesktop:dbus:1.9.6:*:*:*:*:*:*:*", "matchCriteriaId": "CCE5143A-1691-4C95-9C39-87C575FDE7EA", "vulnerable": true}, {"criteria": "cpe:2.3:a:freedesktop:dbus:1.9.8:*:*:*:*:*:*:*", "matchCriteriaId": "F4037B8B-16F0-490F-AF47-269D990E30F9", "vulnerable": true}], "negate": false, "operator": "OR"}]}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*", "matchCriteriaId": "A10BC294-9196-425F-9FB0-B1625465B47F", "vulnerable": true}, {"criteria": "cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*", "matchCriteriaId": "03117DF1-3BEC-4B8D-AD63-DBBDB2126081", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "D-Bus 1.4.x through 1.6.x before 1.6.30, 1.8.x before 1.8.16, and 1.9.x before 1.9.10 does not validate the source of ActivationFailure signals, which allows local users to cause a denial of service (activation failure error returned) by leveraging a race condition involving sending an ActivationFailure signal before systemd responds."}, {"lang": "es", "value": "D-Bus 1.4.x hasta 1.6.x anterior a 1.6.30, 1.8.x anterior a 1.8.16, y 1.9.x anterior a 1.9.10 no valida la fuente de los se\u00f1ales ActivationFailure, lo que permite a usuarios locales causar una denegaci\u00f3n de servicio (retorno del error del fallo de activaci\u00f3n) mediante el aprovechamiento de una condici\u00f3n de carrera que involucra el env\u00edo de un se\u00f1al ActivationFailure antes de que systemd responda."}], "id": "CVE-2015-0245", "lastModified": "2023-12-27T16:36:58.353", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "LOW", "cvssData": {"accessComplexity": "MEDIUM", "accessVector": "LOCAL", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 1.9, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:L/AC:M/Au:N/C:N/I:N/A:P", "version": "2.0"}, "exploitabilityScore": 3.4, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2015-02-13T15:59:08.337", "references": [{"source": "secalert@redhat.com", "url": "http://advisories.mageia.org/MGASA-2015-0071.html"}, {"source": "secalert@redhat.com", "url": "http://lists.opensuse.org/opensuse-updates/2015-02/msg00066.html"}, {"source": "secalert@redhat.com", "url": "http://www.debian.org/security/2015/dsa-3161"}, {"source": "secalert@redhat.com", "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:176"}, {"source": "secalert@redhat.com", "url": "http://www.openwall.com/lists/oss-security/2015/02/09/6"}, {"source": "secalert@redhat.com", "url": "http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html"}], "sourceIdentifier": "secalert@redhat.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-362"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{"bugzilla": {"description": "dbus: denial of service in dbus systemd activation", "id": "1186775", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1186775"}, "csaw": false, "cvss": {"cvss_base_score": "1.9", "cvss_scoring_vector": "AV:L/AC:M/Au:N/C:N/I:N/A:P", "status": "draft"}, "cwe": "CWE-285", "details": ["D-Bus 1.4.x through 1.6.x before 1.6.30, 1.8.x before 1.8.16, and 1.9.x before 1.9.10 does not validate the source of ActivationFailure signals, which allows local users to cause a denial of service (activation failure error returned) by leveraging a race condition involving sending an ActivationFailure signal before systemd responds."], "name": "CVE-2015-0245", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:5", "fix_state": "Not affected", "package_name": "dbus", "product_name": "Red Hat Enterprise Linux 5"}, {"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Not affected", "package_name": "dbus", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Will not fix", "package_name": "dbus", "product_name": "Red Hat Enterprise Linux 7"}], "public_date": "2015-02-09T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2015-0245\nhttps://nvd.nist.gov/vuln/detail/CVE-2015-0245"], "statement": "Red Hat Product Security has rated this issue as having Low security impact. This issue is not currently planned to be addressed in future updates. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.", "threat_severity": "Low"}